RBAC在设备管理系统中的应用

　　基于角色访问控制(RBAC)是一种方便安全和高效的访问控制机制，但对操作主体的设置最小粒度只能达到角色级别，造成系统的灵活性与实用性不足。针对这个缺陷，在设备管理系统中，首先对系统的权限进行层次式划分，系统角色实行等级制，上级角色给下级角色设置权限，使操作主体最小粒度达到单个用户，对权限的表示采用了权限特征值的方法，减少了权限存储的空间。经过在实际系统的使用，效果良好。

　　Abstract:

　　Role-based access control (RBAC) is a safe and efficient access control mechanism， but the main settings for the operating minimum level of granularity of the role can only be achieved， resulting in lack of system flexibility and practicality. For this defect， the equipment management system， the first hierarchical permissions system division， the role of the implementation of the system hierarchy， the role of a subordinate role in setting higher authority， so that the minimum size to achieve a single operation of the main users of the authority that adopted the privilege characteristic value， reducing storage space access. After the actual use of the system to good effect.