摘要： 在RBAC模型和现有应用系统中权限设计现状的基础上，提出了一种适用于大型信 息系统的统一化权限体系的规范设计，它包括业务对象的规范化设计、用户与角色混合授权 、对象个体权限控制以及动态的工作流授权的集成。

关键词: 权限控制, 统一化设计, 混合授权, 工作流

Abstract: On the basis of role-based access control(RBAC) model and analysis of the design of access control in current applications, a design of united acce ss control system is proposed. It involves standard design of business object, c ombined authorization of users and roles, access control of instance of object a nd integration of dynamic authorization in workflow.

中图分类号: 

• TP311.1