基于角色訪問控制(RBAC)是一種方便安全和高效的訪問控制機(jī)制，但對操作主體的設(shè)置最小粒度只能達(dá)到角色級別，造成系統(tǒng)的靈活性與實(shí)用性不足。針對這個(gè)缺陷，在設(shè)備管理系統(tǒng)中，首先對系統(tǒng)的權(quán)限進(jìn)行層次式劃分，系統(tǒng)角色實(shí)行等級制，上級角色給下級角色設(shè)置權(quán)限，使操作主體最小粒度達(dá)到單個(gè)用戶，對權(quán)限的表示采用了權(quán)限特征值的方法，減少了權(quán)限存儲的空間。經(jīng)過在實(shí)際系統(tǒng)的使用，效果良好。

　　Abstract:

　　Role-based access control (RBAC) is a safe and efficient access control mechanism， but the main settings for the operating minimum level of granularity of the role can only be achieved， resulting in lack of system flexibility and practicality. For this defect， the equipment management system， the first hierarchical permissions system division， the role of the implementation of the system hierarchy， the role of a subordinate role in setting higher authority， so that the minimum size to achieve a single operation of the main users of the authority that adopted the privilege characteristic value， reducing storage space access. After the actual use of the system to good effect.