摘要： 网格中大量用户共享不同组织提供的资源。传统的网格授权控制方式已无法适应具有大量用户的模式。该文在实际需求下建立了一个轻量级访问控制服务DACS。DACS将VO用户划分为不同的等级，资源只需对VO用户按级别进行整体授权。

关键词: 网格安全, 授权, 数据访问控制服务

Abstract: Grid is composed of several thousands of users from different organizations sharing their resources. Controlling access to these resources is a difficult problem and traditional access authorization is not applicable to a large scale environment. This paper describes a lightweight authorization service developed to solve this problem in the project requirements: data access control service (DACS). DACS divide VO users into different levels and resources only maintain access control policies to all users in same level as a whole.

Key words: Grid security, Authorization, Data access control service (DACS)