In order to solve the problem of the shortage of the core RBAC model in practical applications,an improved RBAC model integrating the authorization of users and roles is presented.In this model,temporary permission is carried out by direct user authorization,conflict permissions are avoid by adding priority constraint to roles and inheritance constraint to user permissions,and a formal description for the model and the algorithm of authenticate are given.In order to understand the abstract and formal RBAC m...