权限管理模型 访问控制列表ACL (access control list)基于角色的访问控制RBAC(role based access control) 访问控制列表ACL (access control list) resourceaccessuser 基于角色的访问控制RBAC(role based access control) permissionroleuser user role permission session