訪問控制是現代企業信息系統設計的核心，它控制用戶行為，保護系統資源的安全。
傳統的訪問控制模塊的設計與應用系統緊密耦合，使其無法得到很好的復用。本文介紹了輕量級目錄訪問控制協議(Lightweight Directory Access Protocol，簡稱LDAP )和基于角色的訪問控制基于角色的訪問控制(Role-based Access Control，簡稱 RBAC)模型，基于它們設計了一個高效、安全的訪問控制系統。該系統在省郵政綜合服務平臺中的到應用，有效解決了原有系統設計中的一些弊端。
關鍵詞：輕量目錄訪問協議；基于角色的訪問控制；權限管理；系統集成
Abstract: Access control plays an important role in the enterprise application system. It is used to control the user’s behavior, and to ensure the safety of system resources. Conventionally, access control module is tightly integrated into the application system, which makes it difficult to reuse the access control module in the new systems. Re-developing the access control module under this condition will cause data redundant, which will make it difficult to maintain the base information and make the whole enterprise application systems unsafe. With the study of Lightweight Directory Access Protocol (LDAP) and Role-based Access Control (RBAC), we present the design of a secure access control system in this paper. The system is employed into the province’s postal services platform. It is shown that it can successfully solve these problems.
Keywords: lightweight directory access protocol; role-based access control; authorization; system integration