基于角色访问控制机制在MIS权限管理中的应用

企业管理信息系统规模的不断扩大,使信息系统的权限管理成为一个日益突出的问题。权限管理方案和实现方法不合理,往往会加大权限管理的复杂性,或使权限管理失去足够的灵活性。文中结合一个实际的MIS系统,应用RBAC机制,把用户角色区分为系统角色和业务角色,并与业务逻辑相结合,提出了一套高效的企业信息系统权限管理解决方案和具体实现方法。通过在多个实际系统中的应用,证明此方案不仅可以满足企业对信息系统权限管理的要求,而且使权限管理具有很高的灵活性和可操作性。

The Application of RBAC in Privilege Management of MIS

With the development of the enterprise MIS, privilege management has become more and more important. A illogical resolvent or implementation method of privilege management often make MIS complicated or inflexible. Combining with a practical application, using RBAC mechanism, this paper present a suit of resolvent and implementation method of privilege management of MIS, which divide user role into system role and business role and combine with business logic. Several practical application prove that this resolvent not only can appease enterprise's request for privilege management of MIS, but also is very flexible and exercisable.