Research on access control model based on post and role
一种基于岗位和角色的访问控制模型研究

On the basis of RBAC model, this paper put forward a new model PRBAC, which was a two-level model based on the post and role. It made the post independent from an attribute of the role. Post and role could jointly determine the access authority of subject to the object. In practically, it can reduce the workload and the difficulty of authorization operation, and insuring security and consistency of the authority system. Contemporarily, it makes the authority process clear and easy to rea-lity.