对现有基于任务一角色的访问控制模型(T-RBAC)进行了扩展,提出了面向用户的任务分配(UTA)和面向角色的权限分配(PRA)策略,有效地解决了企业信息系统中连带责任、面向用户的事务任务、面向用户的职责分离以及权限分配等问题。
This paper expanded task-role-based access control model, advanced some new strategy of user-oriented task assignment and role-oriented privilege assignment, which effectively solved the question of implicative responsibility, user-orien- ted business task, user-oriented separation of duties, and privilege' s assignment.