基于角色訪問控制(RBAC)是一種方便安全和高效的訪問控制機制，但對操作主體的設置最小粒度只能達到角色級別，造成系統的靈活性與實用性不足。針對這個缺陷，在設備管理系統中，首先對系統的權限進行層次式劃分，系統角色實行等級制，上級角色給下級角色設置權限，使操作主體最小粒度達到單個用戶，對權限的表示采用了權限特征值的方法，減少了權限存儲的空間。經過在實際系統的使用，效果良好。

　　Abstract:

　　Role-based access control (RBAC) is a safe and efficient access control mechanism， but the main settings for the operating minimum level of granularity of the role can only be achieved， resulting in lack of system flexibility and practicality. For this defect， the equipment management system， the first hierarchical permissions system division， the role of the implementation of the system hierarchy， the role of a subordinate role in setting higher authority， so that the minimum size to achieve a single operation of the main users of the authority that adopted the privilege characteristic value， reducing storage space access. After the actual use of the system to good effect.