| 摘要 |
<p>Authority permissions corresponding to each of multiple roles (R1, R2, ..., Rm) assigned to a subject are derived by inheritance on the basis of subject assignment (association of roles and subjects), authority assignment (association of roles and authorities and permissions), and a role hierarchy which indicates the inheritance relations between roles. Of the derived authority permissions, those permissions of authorities (A1, A2, ..., An) which are derived from another of said roles (R1, R2, ..., Rm) and which have different permissions are determined according to input. As exceptional authority assignments corresponding to virtual exceptional roles comprising sets of roles (R1, R2, ..., Rm), authority permissions corresponding to each role (R1, R2, ..., Rm) are derived by inheritance on the basis of the role hierarchy, authority assignment and exceptional authority assignment.</p> |
