一种基于角色的新型动态权限管理机制

基于实践，提出了一种基于角色的新型权限管理机制，该机制将基于角色（RBAC）的静态权限控制与基于任务（TBAC）的动态权限控制相结合，可以灵活、便捷地控制系统中用户的权限，并使系统的安全性与稳定性得到更好的保证。其中，静态管理是将用户按照角色的概念来分类而获得所拥有的权限；动态管理是通过引用角色环境函数与角色方法共同实现动态控制相应角色用户的权限。

A Dynamic Authority Management Mechanism Based on Role

The article proposes a new type of authority management mechanism,which is based on role according to the practice.The new mechanism,which combines the static limits of authority management based on Role-Based Access Control(RBAC) and dynamic limits of authority management based on Task-Based Access Control(TBAC),it can manipulate the limits of authority in the system flexibly and conveniently and have the guarantee of the system security and stability.Among the manager mechanism,RBAC is that acquiring the limits of authority according to the classification of the users;while the TBAC is that manipulates the relevant users' limits of authority dynamically by adopting role environment function and role method jointly.