摘要： 面向角色的访问控制是策略中性的,面向角色中的自主访问控制应可与其它可能的访问策略一起协调工作,这必然使自主访问控制必须能与角色的层次结构(继承关系)对话。该文给出了一个实用的构建方法使角色系统中自主访问控制满足以上的需求。

关键词: 安全, 保护, 访问控制

Abstract: The discretionary access control (DAC) in a role-based system can work together with other policies. So it is indispensable for this DAC to deal with a role hierarchy that is predefined to enforce other desired policies. This paper presents a DAC construction based on ARBAC02 that can cooperate with other policies and that meets above requirements .

中图分类号: 

• TP393.08