改进的基于角色的通用权限管理模型及其实现

合理的权限管理能从根本上保证数据的安全,是所有MIS系统的核心内容之一。传统的基于角色的访问控制RBAC（Role-Based Access Control）模型对角色的依赖度过高,常会导致业务系统的权限管理不够灵活。文中从提高权限管理的灵活性和通用性入手,提出一种新的RUP（Role-User-Privilege）模型,并在此基础上设计了一个具有通用性的数据库。改进的基于角色的通用权限管理模型相较于以往的通用权限管理平台,具有管理粒度细化、分级授权和权限制约的特点,使其能更广泛地满足各种业务系统复杂、多变的应用需求。

A Modified Role-Based Permission Management Model and Its Implementation

A appropriate design of permission management can guarantee the security of data,which is the core of all MISs.The traditional role-based access control model depends highly on the role component that results many inflexibilities in permission management.To meet the demands in both flexibility and generality,it proposes a new role-user-privilege model and designs a database with generality.Compared with the traditional common rights management platforms,the modified role-based permission management model has more detailed granularity,hierarchical authority and privileges restricted features.It can meet the requirements of the wider variety of business complexity and application changes.