校园信息资源管理与使用过程中,涉及多种复杂角色与权限控制,作者在RBAC模型上进行扩展,加入物理因素与部门职务的扩展,提出一个可动态配置的校园信息资源访问控制模型,将RBAC模型中权限和角色、角色和用户的多对多映射与物理因素、部门职务跟资源之间的对应关系进行整合,实现了一种较为灵活的高校校园信息资源访问控制,模块已经应用到具体的信息系统中。 In the process of management and use of campus information resources, it involves a variety of complex roles and permissions control. The author expands on the RBAC model by adding the physical factors and the extension of departmental functions. A dynamically configurable campus information resource access control model is proposed. RBAC In the model, the mapping between many and many roles and roles, roles and users is integrated with the physical factors and the correspondence between departments and resources to achieve a more flexible access control of information resources in colleges and universities. The module has been applied to specific Information system.