基于角色訪問控制(RBAC)是一種方便安全和高效的訪問控制機(jī)制，但對(duì)操作主體的設(shè)置最小粒度只能達(dá)到角色級(jí)別，造成系統(tǒng)的靈活性與實(shí)用性不足。針對(duì)這個(gè)缺陷，在設(shè)備管理系統(tǒng)中，首先對(duì)系統(tǒng)的權(quán)限進(jìn)行層次式劃分，系統(tǒng)角色實(shí)行等級(jí)制，上級(jí)角色給下級(jí)角色設(shè)置權(quán)限，使操作主體最小粒度達(dá)到單個(gè)用戶，對(duì)權(quán)限的表示采用了權(quán)限特征值的方法，減少了權(quán)限存儲(chǔ)的空間。經(jīng)過在實(shí)際系統(tǒng)的使用，效果良好。

　　Abstract:

　　Role-based access control (RBAC) is a safe and efficient access control mechanism， but the main settings for the operating minimum level of granularity of the role can only be achieved， resulting in lack of system flexibility and practicality. For this defect， the equipment management system， the first hierarchical permissions system division， the role of the implementation of the system hierarchy， the role of a subordinate role in setting higher authority， so that the minimum size to achieve a single operation of the main users of the authority that adopted the privilege characteristic value， reducing storage space access. After the actual use of the system to good effect.