Role-based permission control mechanism

Abstract

A role-based permission control mechanism relates to the technical field of role-based access control, and in particular to a mechanism for database resources indirectly accessed by distributing a system application packaging access permission to a role and endowing a user with the role. The role links the user and the permission as an intermediate medium, the user indirectly accesses the database resources through the role. Role permission distribution of an access control model is to distribute an operation permission of a system function item of an application program layer to the role, the role controls the database resources through the function item of the operation system. The embodiment of the invention provides the role-based permission control mechanism which is a scheme for unified realization of the role-based permission management of the whole system in the application program layer. The database resources are indirectly accessed by distributing the system application packaging access permission to the role and endowing the user with the role, the burden and the cost of permission management are greatly reduced so that the permission management of the system is highly flexible.

Description

technical field [0001] The invention relates to the technical field of role-based access control, in particular to a system application encapsulating access authority to a role and assigning it to a user to indirectly access a database resource mechanism. Background technique [0002] Role-based access control (RBAC) is a new type of database permission management mechanism that has been studied the most and has the most mature thinking in recent years. It is considered to be an ideal candidate to replace traditional mandatory access control (MAC) and discretionary access control (DAC). . The basic idea of ​​role-based access control (RBAC) is to divide different roles according to different functional positions in the enterprise organization view, encapsulate the access rights of database resources in roles, and users access database resources indirectly by being assigned different roles . [0003] There are often a large number of tables and views in large database appli...

AI Technical Summary

Problems solved by technology

[0003] In large-scale database application systems, there are often a large number of tables and views, which makes the management and authorization of database resources very complicated.

It is very difficult for users to directly manage the access of resources in the database and the granting of permissions. It requires users to have a thorough understanding of the database structure and the use of SQL language. Once the application system structure or security requirements change, A large number of complex and cumbersome authorization changes are required, which is very prone to some unexpected security holes

Images