Extended RBAC rights management model based on three management roles separation and data constraints
Yan Gao · Journal of Computer Applications · 2011
To improve the versatility and security of the rights management in information systems,an extended Role Based Access Control(RBAC) rights management model was brought out in this paper.The distribution of data access rights was implemented through a way similar to SQL grammar.It combined the function rights distribution and data access rights distribution efficiently.It could be used in common circumstances,and was flexible.Based on three management roles separation,it solved the problem that system administrator's privileges are too high and avoided the SQL injection.Practice proves that this model has versatility,flexibility,and high security.