ISSN : 1738-6764
To address the limitations of the traditional RBAC (Role-Based Access Control) model, particularly its inability to fulfill the requirements for hierarchical permissions and dynamic management in a business approval system, this paper introduces a new role-based access control model. This novel model is capable of dynamically creating, assigning, or revoking permissions, thereby achieving resource separation and multi-level permission management effectively. To demonstrate the model's feasibility, we applied it to a practical project. In this project, the JavaScript scripting language and the widely-used SSH (Struts2, Spring, Hibernate) framework were employed to implement the new model, which showcases enhanced capabilities in multi-level and dynamic multi-role permissions management.
