摘要： 主要研究基于C/S 与B/S 模式下系统的权限控制技术，综合考虑其设计与实现的共同特点，针对目前信息系统中操作用户多、用户分工显著不同、不同用户操作功能菜单相异等特点，提出了基于应用层的角色管理权限控制通用策略与方法，并且论述了具有很强通用性的具体设计与实现技术。

关键词: 中南大学信息科学与工程学院，长沙 410083

Abstract: The paper mainly studies the technologies of access control in MIS based on both C/S and B/S modes. It synthetically takes consideration of their common points in the design and realization. In view of the characteristics of multi-user operations and different menus for different users etc in present MIS, the paper proposes a general strategy and method of role-based access control on application layer and discusses universally concrete designing and realizing technologies.

Key words: RBAC; Access control; Role; C/S mode; B/S mode