摘要
访问控制是Web系统中安全防范和保护的主要策略,传统的访问控制已不能满足日益增长的安全性需求。本文在web应用系统中,使用基于角色的访问控制(RBAC)模型,通过引入角色的概念,将用户映射为在一个组织中的某种角色,将访问权限授权给相应的角色,根据用户在组织内所处的角色进行访问授权与控制,从而提高了在web系统中权限分配和访问控制的灵活性与安全性。
Access control is the main strategy of security and protection in Web system, the traditional access control can not meet the needs of the growing security. With using the role based access control （RBAC） model and introducing the concept of the role in the web system, the user is mapped to a role in an organization, access to the corresponding role authorization, access authorization and control according to the user＇s role in an organization, so as to improve the web system flexibility and security permissions and access control.
出处
《武汉纺织大学学报》
2015年第3期90-94,共5页
Journal of Wuhan Textile University
关键词
WEB系统
RABC
权限管理
Web system
role-based access control
permission manage
