细粒度角色访问控制  

Finely Granular Access Control Based on RBAC

作　　者：方卫青[1] 

机构地区：[1]常熟市第二人民医院信息中心,常熟215500

出　　处：《计算机系统应用》2011年第2期125-129,共5页Computer Systems & Applications

摘　　要：分析基于角色访问控制的模型,在此基础上提出了一种在面向对象的编程模式中基于细粒度权限控制的管理方法。利用对象的继承特性引入细粒度权限管理的概念,把资源的控制从菜单粒度分解到原子操作粒度。分解后的权限和角色建立关系,通过给用户分配角色建立权限和用户的关系,从而简化了权限的管理。最后给出了具体的实现过程,在实际中得到了应用,验证了此方法的正确性和可行性。Based on the theory of role-based access control, a method of finely granular access control in object orient programming is proposed in this paper. Introducing the idea about finely granular access control through Inherit attributes of object, decomposes the access privilege f^om menu to atom control. The privilege is assigned to role, then access control can be manage easily by＂ defining the user of the role to simplify management of permissions. Finally, the specific implementation process has been applied in practice to verify the correctness and feasibility of this method.

关 键 词：角色 访问控制 RBAC模型 细粒度访问控制 对象 继承 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]