MS SQL SERVER2000的角色存取控制策略  

The Role-Based Access Control Policy of MS SQL SERVER2000

作　　者：左翠华[1] 卢正鼎[1] 李瑞轩[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机工程与科学》2007年第11期78-80,共3页Computer Engineering & Science

基　　金：国家自然科学基金资助项目(60403027);国家"十五"科技攻关计划项目(2002BA103A04)

摘　　要：数据库的安全策略需要各种模型来表达,访问控制模型就是其中之一。基于角色的存取控制RBAC被公认为是对传统的自主访问控制和强制访问控制的革新及补充,并且是最有发展潜力的存取控制策略,已成为当前数据库领域研究的热点之一。现代大型关系数据库系统(RDBMS)均不同程度地支持RBAC,但不尽相同,各具特点。文中选择了RBAC的用户-角色分配、可分配权限、角色层次关系等几个重要的性能技术指标,对当前广泛使用的MS SQL SERVER 2000典型的RDBMS的RBAC特征进行了研究。It is necessary for the security strategy of databases to be expressed by different kinds of models and the access control model is one of them. Role-based access control is publicly known as reform and complement for the traditional self-determination access control and compulsive access control. Moreover, it is recognized as the most potential access control strategy and is the hot topic in the current database field. RDBMS supports RBAC to different extents with their own characteristics. This paper chooses several important capability technique indexes of RBAC, such as user-role distribution, permission distribution, and role hierarchy relationship. It studies the typical RBAC characteristics of RDBMS for the broadly-used MS SQL SERVER2000.

关 键 词：基于角色的访问控制 角色层次关系 权限 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]