分级的行列级权限系统的设计和实现 design and implementation of classable privilege management system on row and tier level
3274 andDesign
2011,V01.32,No.10计算机工程与设计ComputerEngineering
分级的行列级权限系统的设计和实现
冯志亮, 谭景信
(华北计算技术研究所,北京100083)
摘要:为实现权限系统中用户授权的灵活性和数据级的权限控制,在传统权限访问控制模型的基础上,设计了一种基于
内存数据库的分级的行列级权限控制模型.通过分级授权实现授权的灵活性和可继承性,通过分级行列级权限实现数据级
权限控制,通过内存数据库和预排序遍历树算法实现数据的快速查询.开发了相应的软件系统,与传统权限模型进行了比
较,结果表明了该模型的可行性和高效性.
关键词:权限系统;分级授权;行列级权限;内存数据库;预排序遍历树算法
中图法分类号:TP311.56文献标识码:A 文章编号:1000-7024(2011)10-3274-04
and ofclassable
Designimplementationprivilegemanagementsystem
onrowandtierlevel
FENG Jing-xin
Zhi—liang,1=AN
Institute
(NorthChina Technology,Beijing100083,China)
ofComputing
AIntract:To ofauthorizationfortheⅢ;e塔andthedatalevel fill
ac∞鹳control,a modelthe
implementagility privilegemanagement
rowandtier whichisbasedonmain is based011the oftraditionalaccessandcontrolmodel.
level, memorydatabase, study
designed
The andinheritanceoftheauthorizationis classableauthorizationandthedataaccesscontrolis
agility by
implemented implementedby
tier
theclassabletowand levelaccesscontr01.Besidesmain databaseandmodified treetraversal isusedto
memory preorder algorithm
accelerate ofthe and are
the ofthe ofthemodeldemonstrated thetraditional
speed query DB.Finally,feasibilityvalidity bycomparing
aCC.燃Swithcontrolmodel. ’