基于角色訪問控制(RBAC)是一種方便安全和高效的訪問控制機制，但對操作主體的設(shè)置最小粒度只能達到角色級別，造成系統(tǒng)的靈活性與實用性不足。針對這個缺陷，在設(shè)備管理系統(tǒng)中，首先對系統(tǒng)的權(quán)限進行層次式劃分，系統(tǒng)角色實行等級制，上級角色給下級角色設(shè)置權(quán)限，使操作主體最小粒度達到單個用戶，對權(quán)限的表示采用了權(quán)限特征值的方法，減少了權(quán)限存儲的空間。經(jīng)過在實際系統(tǒng)的使用，效果良好。

　　Abstract:

　　Role-based access control (RBAC) is a safe and efficient access control mechanism， but the main settings for the operating minimum level of granularity of the role can only be achieved， resulting in lack of system flexibility and practicality. For this defect， the equipment management system， the first hierarchical permissions system division， the role of the implementation of the system hierarchy， the role of a subordinate role in setting higher authority， so that the minimum size to achieve a single operation of the main users of the authority that adopted the privilege characteristic value， reducing storage space access. After the actual use of the system to good effect.