Abstract: User management system is an important part in Web application system and a large-scale software system. In the existed user management system, a role, which is a set of authorities, does not involve scope. It is a conception in a one-dimensional space. A conception of two-dimensional role is given, which is in a two-dimensional space. A role is a binary set composed of authorities and scopes. A universal user management model based on user roles is constructed. Design and implementation of a universal user management system is achieved. It can satisfy requirements of modern Web application systems and large scale software systems in multiply levels and spaces towards user privilege.

Key words: universal user, role, scope, authority management, dynamic configuration

摘要： 用户管理系统是Web应用系统及大型软件系统的重要组成部分。在目前已有的用户管理系统中，角色只是权限的集合，不涉及管辖范围，是一个一维空间上的概念。该文提出一种二维角色的概念，是由权限和范围组成的二元对集合，是一个二维空间上的概念。构建一个基于二维角色的通用用户管理模型，设计一个通用用户管理系统，能满足现代Web应用系统和大型软件系统对用户授权的多层次和多空间的要求。

关键词: 通用用户, 角色, 范围, 权限管理, 动态配置

CLC Number: 

• TP311