基于角色的访问控制模型中私有权限问题的研究

介绍了RBAC模型及由于继承关系产生的子角色不能拥有私有权限的问题，并分析了当前提出的几种解决方法的不足。提出了一种新的方法解决该问题，即通过把角色中的权限集分为公有权限集和私有权限集，公有权限集可以被父角色继承，而私有权限集则不能被继承。同时提供一个算法来求每个角色的权限集。

Research on Private Privilege in Role-based Access Control Models

This paper introduces RBAC and the problem that the child role may not possess private privileges that result from inherited relation in role hierarchies, and points out the shortcomings of several current solution for the problem, and presents a new solution that divides role privileges into public privileges and private privileges,the parent role inherits public privileges from child role,but can not inherit private privileges from child role. The paper also give an algorithm to solve privilege set for every role.