摘要
对基于角色的访问控制模型进行了研究,对传统访问控制模型、基于角色的访问控制(RBAC)模型、角色管理模型ARBAC97进行了描述和分析。对RBAC模型进行范围扩展,通过引入角色范围的概念,以(用户,角色,范围)三元组来标识系统用户的权限,解决RBAC模型无法对资源实例进行权限控制的问题,也就是解决了系统用户拥有相同的角色,操作的数据范围可以不同。结合实际应用系统的需求,实现了权限管理系统。
Researching the role-based access control model, description and analysis on the traditional access control models, RBAC models, role based management model. Study and analyze the range extensions of the role-based access control （RBAC） model, by introducing the range of roles, use the （user, role, range） ternary array to identify the user＇s permissions, solving the insolvable problem by RBAC model that it cannot control the instance of resource, meantime the system users have the same role, the operating range of data can be different.The model is applied to the desi~,nin~ and development of the real business need.
出处
《科技信息》
2011年第13期112-113,170,共3页
Science & Technology Information
