To address the drawbacks of traditional RBAC model when it is used in large-scale enterprise application and complex business access control,introduce attributes of RULES and GROUPS to extend and expand,forming the advanced RBAC ( Role-Based Access Control) model. RULES can be leveraged to access control of fine-grained complex business by fining the data scope. And GROUPS can be applied to realize the large-scale hierarchical authorization management by defining the hierarchical structure model. The access man-agement structure of SG-UVP is built based on the proposed model. Discuss the function construction,the processes of hierarchical au-thorization management and access control of the proposed model. The test results demonstrate the feasibility and effectiveness of the pro-posed method.%针对传统基于角色的访问控制( RBAC)模型在大规模企业应用及复杂业务权限控制中的不足，文中引入了RULES和GROUPS属性对其进行延伸和拓展，形成了改进的RBAC模型。通过RULES对数据范围细化，解决了细粒度复杂业务中的权限控制，通过GROUPS定义层次结构模型，实现了大规模授权中的分级管理。基于此模型构建了统一视频监控平台权限管理框架，讨论了其功能组成、分级管理授权过程及细粒度权限控制过程，并通过项目验证了其可行性与有效性。
展开▼
