Implementing Rule-Based RBAC in Web Information System
Shi Xi-lin · Journal of Sichuan University · 2006
Aiming at characteristics and safe problems of the Web resources access,studies in the deficiency of the traditional RBAC(the Role-Based Access Control) model,puts forward a kind of RBAC patulous model which is fit for the large system of Web resources access.Namely it establishes rules with the users' attributes,assigning the role for the customer according to the rule.That model makes up for the shortage of the traditional RBAC with static role-assignment,implements the dynamic allotment of the role,and makes constraints on the rule and the role allotment,raising the efficiency and the safety of the Web resources access.