The design list of scope restriction single permission system based on RBAC

Scope limit individual permission system design checklist

The Authority design system has the general classification permission system, the scope restricts the permission system, the scope restricts the individual permission system three kinds. The author is developing a business-to-business project, in which the authority design uses the scope limit individual permission system. Related database table design list is as follows, hope can be more convenient for more people, but also hope that friends pointed out that the inappropriate place, greatly appreciated.

1, User table Save system user information, such as Zhang San, John Doe, field can have ID, name, fullname, email,

Phone 、......
2, the Role table holds role information, such as student, Administrator, field has ID, name 、......
3, the permission table saves the system's permission information, can define which module of the system is public, or what time period can be accessed
4, the User Role table associates a relationship table with users and roles, such as Zhang San-student, John Doe-admin, field has ID, user ID,

Role ID, according to which the user knows which role to belong
5, Role Permissions Table association roles and permissions for the Relationship table field information: Role ID, permission ID
6, the User Rights table is used to assign individual rights to the user, field information: User ID, permission ID
7, Menu table Overall menu Information field Information: Menu ID, menu fid, vegetable sole name
8, the Permissions menu table is used to correlate permissions and menu relationship tables, field information: Menu ID, permission ID

9, Module table module information Field information: module ID, menu ID, module name, target location toposition
10, Menu Module table context menu and Module field Information: Menu ID, module ID

Basic ideas:

User associated with role
Roles are associated with permissions
Permissions are associated with menus
Menu associated with module