Shulou(Shulou.com)06/02 Report--

This article will explain in detail what the RBAC model is, and the editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

RBAC model is a classic model in permission design. The full name is Role-Based Access Control, role-based access control.

Permission Permission is a function in the system, which consists of one or more Operation. For example, user management is a permission, which consists of three operations: adding users, editing users, deleting users.

The role Role is a collection of permissions Permission. For example, a role has permissions such as user management department management document management and so on.

The user User, which can be assigned one or more roles, is thus granted permission. The user must not grant a permission directly, it must be through a role. This simplifies the workload of weighting and reduces the complexity of system implementation.

This is the most basic permission design, very easy to understand, but also very easy to implement. Shiro is the permission framework based on this model. So is Spring Security, but it is relatively complex.

Sometimes in order to facilitate empowerment, the concept of user groups will be added, users can be grouped, and user groups can be assigned a certain role, so that the permissions of users are the sum of their own roles and their own user group roles. However, this will increase the complexity of the system design. In general, there is no need to deal with it this way. Only when there are a large number of users and the empowerment work is complex and onerous, will we consider adding this design.

This is the end of the article on "what the RBAC model is". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.