本文提出了一種集成功能權(quán)限和數(shù)據(jù)權(quán)限的通用的權(quán)限管理模型，該模型在主要對(duì)角色授權(quán)的基礎(chǔ)上加入了對(duì)用戶直接授權(quán)和屏蔽部分角色權(quán)限的機(jī)制，豐富了傳統(tǒng)模型對(duì)功能權(quán)限的控制，并且增加了數(shù)據(jù)權(quán)限的管理，有效地解決了各種管理系統(tǒng)中復(fù)雜的訪問控制問題。
關(guān)鍵詞：RBAC，功能權(quán)限，數(shù)據(jù)權(quán)限

A Universal Scheme of Authority Management Model LIN Wei-ju LIU Lie-gen ZHANGYu (Research Institution of Computer Application, South China University of Technology, Guangzhou, 510641) Abstract：In this paper, a universal scheme of authority management model integrates function permission and data permission is put forward. The model, manily based on the role authorization, has added the mechanism of user authorization and shielding part of authorization. It enriches function permission and adds the management of data permission，as well as solves the complex access control problems of a variety of management systems effectively.
Key words：RBAC，function permission，data permission