An Object-oriented Fine-grained RBAC Model

RBAC model has provided a framework for access control and it has also been successfully applied in many fields. However, the access-division granular in RBAC model is not fine enough and its role hierarchy mechanism cannot response agilely as required. To deal with these two disadvantages, the object-oriented thoughts and the RBAC model are combined and then the Object-oriented Fine-grained RBAC model is promoted. In this model, the permissions are further divided into operations with access control modifiers and data, the roles hierarchy is expanded into multi-inheritance with access controls which can not only effectively reflect the organizational structure of the real-world enterprises but can also greatly diminish the roles quantity. The practice shows that this model is qualified with better agility, expansibility and practicability and that it simplifies the permission management.