Formulation of User-Role Assignment Rule
角色指派规则生成研究

In some environments,the number of users is not huge and the user-role assignment relations are not com- plex. User-role assignment in such environment is managed by system administrator. But in a distributed environ- ment which has huge number of users and complex and inconstant relations of user-role assignment, traditional URA of RBAC is inefficient. User-Role assignment rule emerged as a solution of automatically URA and a constraint condi- tion of role on user. User who satisfies such rules can be assigned to proper role. There has little work on the formu- lation of user-role assignment rules. According to the ways that roles gain permissions, this paper introduces two methods of formulation of user-role assignment rules. One of two methods concerns on the formulation of user-role assignment rules in the course of PRA, the other concerns on how to formulate user-role assignment rules in role hi- erarchy. Also, this paper has introduced how to modify user-role assignment rules in the course of PRA and role hier- archy.