基于角色访问控制在权限管理中的研究与应用

本文研究了基于角色的访问控制的工作原理及其在某公司ERP系统中的具体应用。针对企业的人员的流动性,建立了用户权限的动态时效性控制。对于各个子系统开发进度的不同,提出了系统对新添模块的权限自适应管理,提高了后台执行效率。利用用户、角色、表单和功能四元素实现了系统访问权限的高弹性和动态控制。

Research and application of Role-Based Access Control in Privilege Management

The paper researches into the basic theory of Role- Based Access Control and its application in some company' s Enter- prise Resource Planning system and establishes user' s timeliness control over the employees' mobility. The paper also brings for- wards the conception of self- adapting management on the privilege of a newly- added module in view of the difference of each sub- system' s developing schedules, which in turn enhances the execution efficiency of background applications and carries out high- flexibility and dynamic control of access authorization of the system through User, Role, List and Function database table.