Fine-Grained Access Control Model Based on RBAC

摘要

In RBAC model, a user cannot obtain part permissions of a role, and a role cannot inherit part permissions of another role. The set of permissions cannot be obtained EPSET1 and the set of permissions cannot be inherited EPSET2 are introduced, a fine-grained access control based on RBAC model is proposed in this paper. The algorithms for solving the set of permissions belongs to a role or a user are presented. The model proposed in this paper is applied for University Reform And Development Project Management System of Zhejiang Province, which has effectively solved both problems including a user can obtain part permissions of a role, and a role can inherit part permissions of another role.