二维权限设置在道路运输管理系统中的实现

权限设置是MIS系统安全核心组成部分.常规的授权方式是基于角色和用户进行授权,能够实现一维权限管理.针对用户和进行授权,工作量巨大,在对大型企事业单位多层次管理时几乎不能实现;针对角色进行授权,工作量虽有减轻,但会出现权责不明和数据操作权限混淆的情况.作者介绍了二维权限设置的模型,以及实现方式,提出了一种基于二维的权限管理,其核心思想是机构和用户的自维护,该方式既考虑到了减少系统管理员的工作量,又兼顾了数据操作的安全性和系统最高管理员的唯一性.这一管理模式,正广泛运用于重庆市道路运输管理系统,经过重庆市42个运输管理部门使用证明效果良好.

The Practice of Two-dimension Rights Control in the Road Transportation Management System

Rights control is the central part of MIS(management information system) security management .Common rights control which bases the character and the operator can resolve the One-dimension rights management.Rights control based on the operator leads to the large workloads, the operation becomes unpractical when it is dealing with those units that are big and multiclass. On the other hand, rights control based on the character can release the workloads but it also brings us the confusion of duties and the data operation. The model and the practice of Two-dimension rights control are mentioned.The key property is the rights' self-maintenance of the units and the operators. It strongly supports the least work of the DBA(Database Administrator), insure the security of database and the exclusive DBA in the system. The two-dimension rights control has been used in the road transportation management system for 4 years by 42 units all over the Chongqing City with high praise of the users.