一种RBAC优化模型在大型煤矿ERP系统中的应用

An optimization model of RBAC applications in the ERP system of large coal mine

基于角色的访问控制(RBAC)主要研究将用户划分成与其在组织结构体系相一致的角色,是一种解决统一资源访问控制的有效方法。然而,大型煤矿ERP系统中涉及了大量的资源和用户,这些资源和用户还处于不断的变化中。传统的RBAC模型难以满足大型ERP在权限管理时复杂多变、灵活快捷的要求。在研发一个大型国有煤矿权限系统的过程中,提出了一种扩充的RBAC动态权限管理模型,引进用户组、权限组来强化角色的权限分配,大大增强了大型ERP对权限管理的便捷性和灵活性。

RBAC （Role-based Access Control） studies dividing users into roles that present the framework of organization system, it is an effective method to access the unified resource. But the ERP system in large coal-mine has related the magnanimous resource and users which stay in a ceaseless state. The tradition RBAC model is difficult to satisfy the changeful and complicated request in ERP system. When I developed the ERP authority system in a large state coal mine, I have brought forward one kind of extended RBAC of authority managing dynamic model , which introduces the user-group and privilege- group to strengthen the role-based privilege assigned , has enhanced the convenient , rapid and flexibility in large-scale ERP authority manages.