| 摘要 |
An apparatus for and method of assigning access to system resources comprising the steps of providing a set of system permissions to access the system resources, providing a role creation permission to allow a role having a role set of permissions from the set of system permissions to create a role having a set of permissions, which is a subset of the role set of permissions, creating a first role having a first set of permissions including a permission from the system permissions and a role creation permission, assigning a user to the first role, and allowing the user to create a second role having a second set of permissions which include only permissions from the first set of permissions.
|
