管理信息系统中基于角色的访问控制

ROLE-BASED ACCESS CONTROL IN MANAGEMENT INFORMATION SYSTEM

基于角色的访问控制 (RBAC)中 ,根据组织中不同的工作岗位创建角色 ,用户的责任与能力 ,用户被分配到不同的角色。文中分析了目前MIS实施中权限管理存在的问题 ,并将RBAC应用于管理信息系统中 ,给出了实现的逻辑模型。

The roles based on access control are created for the various job functions in an organization and users are assigned roles on their responsibilities and qualifications. This paper analyzed the problems existing in administration of authorization in MIS and applied the RBAC in MIS, then presented a logic model of implementation.