Role-Based Constrained Access Control Model and Implement Supported by Constraints among Permissions

Since current research on role-based access control manifests some deficiency, it argues building constraints among permissions and analyzing source of constraints among roles to support constrained management among roles and implement access control. The role-based constrained access control (RBCAC) model supported by constraints among permissions and the enhanced permission model are introduced. Finally, its application in ZD-PDM is illustrated. The fulfillment indicates the RBCAC model can not only enhance the system security, but also provide a more agile authorization to simplify the task complexity of security official (SO).