基于RBAC模型用户访问控制的研究与实现  

RBAC-based User Access Control:A Study of Science and Technology Planning Project Management System and Its Implementation

作　　者：李光文[1] 

机构地区：[1]天津市科技统计与发展研究中心,天津300051

出　　处：《天津科技》2014年第12期15-17,共3页Tianjin Science & Technology

摘　　要：科技计划项目管理系统是一套由多个软件构成的综合系统,具有系统用户多、功能点多的特点,用户访问控制实现比较困难。基于角色的访问控制在系统用户访问控制中使用比较广泛,利用基于角色的访问控制模型,分析了系统中的用户和功能权限,将用户与功能权限相关联,实现了用户对系统的访问控制与用户和访问权限的逻辑分离,提高了在系统中权限分配和访问控制的灵活性与安全性。在基于角色的访问控制的基础上又引入数据权限控制,实现了用户对系统数据访问范围的控制,完善了基于角色的访问控制模型。As a multiple software constituted system,the science and technology planning project management system features multiple users and numerous function points,which cause difficulties in user access. As RBAC has been widely applied in system user access control,this study,based on the RBAC model,analyzed authorizations of users and system functions and connected users to their function authorizations to realize not only the system access control for users,but also the logical separation of users and their access rights,which enhances both the flexibility and safety of authorization distribution and access control in the system. Moreover,on the basis of RBAC,data authority control was introduced to realize the control of system data by users,which optimizes the RBAC-based access control model.

关 键 词：BRAC 用户访问 权限 功能 角色 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论]