Research And Practice Of Role Permissions And Users Assigned In Public Security

In the role-based access control model, many improvements have been proposed to solve the problems of the RBAC model.However, the model on the division of authorization is not as detail. That can’t support for software reuse and meet the needs of large distributed systems.The demand of above problems in public security forensic system is higher. To solve the problem, researches include the following aspects.(1) Based on the current RBAC model as well as the ERBAC model only introduce the concept of user groups in horizontal and no user groups on vertical classification, this paper introduces the concept of user group level (unit level) to extend the user group vertically. Such improvements are more in line with the demand of the public security forensic system for strict hierarchy between user groups, information security and the manageability of access authorization.(2) To solve the problem that the division of authorization is not in detail in the ERBAC model, this paper introduces the concept of the permission with scoping Then the fine grain access control is introduced to improve the original model of authority division is too rough.(3) According to the improved ERBAC model proposed in this paper, system is designed based on the actual demand of the system analysis, system design, database design and each function module design. Main function module of the system is implemented by programming with ASP.NET MVC, AJAX technology.The improved ERBAC model is used in the permission management module of the public security forensic system. In the process of the system debugging and actual operation, the system not only simplifies the audit platform and functional requirements, but also solves the span of the cross-district serial case which cannot be solved in the original system. At the same time, the manageability of authority, system security and stability, the user interface of the operability are improved a lot. What’s more, the design of improved system has a certain practical reference value.