测绘应用系统中权限管理模型研究

测绘数据安全,尤其是权限控制在测绘应用中已成为不可或缺的部分。本文针对传统的RBAC模型所存在的问题,引入"用户组"进行了改进:除了RBAC模型的角色授权外,增加了用户组对数据资源进行授权,使用户所拥有的权限变成用户所属角色的功能权限和用户所属部门的资源权限之和。改进后的混合授权的扩展模型(E-RBAC)不仅有效解决了角色定义、用户职责、功能和资源等动态变化对权限管理所带来的问题,更增强了对用户授权的灵活性和可维护性,并且在实际项目中得到了应用。

Research on privilege management for surveying and mapping application system

Surveying and mapping data security,especially access control,has become an indispensable function component in the practical application of surveying and mapping fields.During further anglicizing RBAC,the shortcoming of it is pointed out.An improved model named E-RBAC is proposed that user grou pis introduced.One way to grant user privilege is using role based on RBAC,another way is using user groupthat introduced above.The improved mix granting method solves the mentioned problem and is very convenient.It...