科学基金管理系统的用户权限管理模式研究

针对科学基金管理系统权限管理的灵活需求,文中总结了当前主流的访问控制模型和行业最佳实践,并设计了＂角色-项目＂松耦合的权限管理模式。通过一个具体案例显示,通过合理的角色结构设计,结合基于工作流、角色等级的RBAC模型,该模式可以有效解决大型科学基金管理系统所面临的用户权限管理问题,如难以实现时间维度的控制、不能分级授权等问题,并能适应业务需求的发展和变化。此外,文中提出的信息系统权限管理模式的设计思路,弥补了目前权限管理领域缺乏的应用研究。

Research on Access Control to Grant Management Systems

In response to the need for flexible access control to research grant management systems,it reviews the current access control models and best practices,and proposes a ＂role-project＂ loose coupling model for access control.Conducted a case study to show that,through proper role structure design and RBAC based on workflows and role hierarchy,the model can solve problems faced by a large research grant management system,e.g.,difficulties with time-based control and the inability to allow decentralized delegation of access privilege.It is also shown that the model can adapt to changes arising from rapid business development.Moreover,propose a generic approach to design solutions for access control to information systems,to make up for the lack of application-oriented research in this field.