针对信息网格RBAC(Role—Based Access Control)模型中由于继承关系产生的子角色不能拥有私有权限的问题进行了研究,并分析了当前提出的使用私有角色和深度指示符这两种解决方法。通过分析得出这两种方法分别存在角色膨胀和组合爆炸的缺点。在此基础上,提出了一种带有权限传播深度的新解决方法,即角色中的每个权限分别具有公有和私有属性以及权限传播深度,同时提供了一个算法求解每个角色的权限集。
A problem of private privileges that child role couldn' t obtain because of inherited relation in the RBAC model of information grid was researched, two present resolvations that used private roles and deepness fist notes were analyzed, from which they could result in role inflate and compages explosion. Then a new resolvation with privilege transmit deepness was presented, that was, every privilege of the role could get public attributions, private attributions and a privilege transmit deepness. Meanwhile an algorithm to obtain privilege sets of each role was given.