本文提出了一種集成功能權限和數據權限的通用的權限管理模型，該模型在主要對角色授權的基礎上加入了對用戶直接授權和屏蔽部分角色權限的機制，豐富了傳統模型對功能權限的控制，并且增加了數據權限的管理，有效地解決了各種管理系統中復雜的訪問控制問題。
關鍵詞：RBAC，功能權限，數據權限

A Universal Scheme of Authority Management Model LIN Wei-ju LIU Lie-gen ZHANGYu (Research Institution of Computer Application, South China University of Technology, Guangzhou, 510641) Abstract：In this paper, a universal scheme of authority management model integrates function permission and data permission is put forward. The model, manily based on the role authorization, has added the mechanism of user authorization and shielding part of authorization. It enriches function permission and adds the management of data permission，as well as solves the complex access control problems of a variety of management systems effectively.
Key words：RBAC，function permission，data permission