分级数据权限设计方案研究  

Research on hierarchical data permission design scheme

作　　者：关伟文 GUAN Weiwen(Information Technology and Equipment Center,Guangzhou College of Technology and Business,Guangzhou 510000,China)

机构地区：[1]广州工商学院信息技术与装备中心,广州510000

出　　处：《计算机应用文摘》2022年第24期77-79,共3页Chinese Journal of Computer Application

摘　　要：用户权限管理是各个业务系统必不可少的一个模块,主要目的是对不同的人访问资源进行权限的控制。权限分为功能权限和数据权限。针对功能权限,可采用基于RBAC的权限控制模型。针对数据权限,目前并没有一种较为认可的通用解决方案。在RBAC和字段授权的基础下,文章提出基于“组织架构+RBAC”的权限控制模型的设计方案,以分级授权的形式解决传统信息系统难以解决的问题。实验表明,分级数据权限设计方案在信息系统的应用中是可行、合理、高效的。User rights management is an indispensable module of each business system.The main purpose is to control the rights of different people to access resources.Permissions can be divided into functional permissions and data permissions.Obviously,for functional permissions,an RBAC-based permission control model can be used.For data permissions,there is currently no generally accepted solution.On the basis of RBAC and field authorization,a design scheme of authority control model based on"organizational structure+RBAC"is proposed to solve the problems that are difficult to solve by traditional information systems in the form of hierarchical authorization.Experiments show that the hierarchical data authority design scheme is feasible,reasonable and efficient in the application of information systems.

关 键 词：数据权限 分级授权 角色控制 访问控制 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]