基于WEB模式下ERBAC模型研究及实现

ERBAC Model Research and Realization Based on WEB Mode

介绍了基于WEB模式下RBAC模型，并根据在实际应用过程中RBAC的出现的一些缺点和不足引用用户组概念对RBAC进行扩展。在用户原有权限不变的基础上增加了用户所在部门的权限，并给出了一个基于扩展RBAC模型的应用，增强了用户授权的灵活性和管理性，使ERBAC模型具有较高的安全性。

This paper introduces RBAC model based on WEB mode, and according to the practical application of RBAC to appear some shortcomings and the insufficiency in the process of reference group concepts of RBAC. In user permissions unchanged on the basis of original increased by user department, and gives an application based on extended RBAC model, enhance the flexibility of user authorization and manageability, the ERBAC model has higher security.