Administrative hierarchical-user role-based access control model
用户层次化的RBAC授权管理模型*

Aiming at reducing administrative cost, this paper proposed an administrative hierarchical-user-based access control model: AHURBAC(administrative hierarchical-user RBAC). The AHURBAC model provided lower administration overhead by making users and administrators hierarchical. Presented a formal definition of AHURBAC and defined can_assign, can_revoke, can_assignp and can_revokep. The model does benefit to lowering effective the authorization administrative cost.