基于RBAC权限管理模型的改进与应用

在分析现有权限管理系统权限的基础上，给出了新的授权模式，A用户在其自己的可授权的权限集合内可以直接对B用户授权，并且可设定所授权限的时效，B用户可以根据A用户规定时效内拥有A用户的权限。该方案采用静态权限分配与动态权限授权相结合，很好的解决了传统权限管理的僵化。改进后的方案在实际的项目中得到了应用，并取的很好的效果。

Improvement and application of access control mode based on RBAC

A new access authorization mode was established based on the analysis of access of existing access authorization control system, in which user A can authorize directly user B within his available authorization set, as well as set a time of validity, during which user B own user A's access authorization. This scheme combined static authority allotment with dynamic access authorization, solving the restriction of traditional authority management system. The improved scheme had been well applied in actual projects, getting good effect.