办公自动化系统中基于RBAC的授权模型

在基于角色的访问控制(RBAC)中,只给角色分配权限,用户必须成为角色中的一员才能取得相应的访问权限。基于角色授权的基本思想是:系统中某个成员将自己所拥有的权限授予另外一个成员,使之代表自己完成一定的工作。由于授权特征的多样性,授权模型有多种不同的状态。首先归纳出与授权有关的几种基本特征,然后根据办公自动化系统的具体业务情况将授权特征的组合进行精简,找出一组合适的状态,从而建立起办公自动化系统的授权模型。

The Authorization Model based on RBAC in OA System

In role based access control(RBAC),the user must be one of the roles firs t;then he can acquire corresponding access right.The basis thoughts of role -based authorization are as follow:one of the member in the system awards his own right to another,to make the other represent himself to c omplete some certain work.Because o f the diversity of authorization fea tures,authorization model has multi -varying status.First of a ll we sum up several basic features ab out authorization in this paper,afterwards reduce the whole components according to the detail business situation of OA system and find out a set of fitful status,thereby build up an authorization model of OA system.