【摘要】 数据库的安全策略需要各种模型来表达,访问控制模型就是其中之一。基于角色的存取控制RBAC被公认为是对传统的自主访问控制和强制访问控制的革新及补充,并且是最有发展潜力的存取控制策略,已成为当前数据库领域研究的热点之一。现代大型关系数据库系统(RDBMS)均不同程度地支持RBAC,但不尽相同,各具特点。文中选择了RBAC的用户-角色分配、可分配权限、角色层次关系等几个重要的性能技术指标,对当前广泛使用的MS SQL SERVER 2000典型的RDBMS的RBAC特征进行了研究。更多还原

【Abstract】 It is necessary for the security strategy of databases to be expressed by different kinds of models and the access control model is one of them. Role-based access control is publicly known as reform and complement for the traditional self-determination access control and compulsive access control. Moreover, it is recognized as the most potential access control strategy and is the hot topic in the current database field. RDBMS supports RBAC to different extents with their own characteristics. This paper chooses several important capability technique indexes of RBAC,such as user-role distribution, permission distribution, and role hierarchy relationship. It studies the typical RBAC characteristics of RDBMS for the broadly-used MS SQL SERVER2000.更多还原