Design and implementation of access control for web application system
Qiaoming Zhu · Jisuanji gongcheng yu sheji · 2008
The access control requirements of web application system and the shortcomings in web application system with RBAC model are analysed.Then an extended model named WERBAC(Web-extended RBAC) is proposed,based on the NIST's RBAC propositional standards.WERBAC extends and defines roles and privileges of the NIST RBAC,and introduces the multiple dimensions and fine-grained controls for the pages.Finally,an instance is given using the WERBAC.