Reflections on the new solution to read RBAC

Tao recommended a good blog, the address is: http://globeeip.iteye.com/blog/1236167 Name: RBAC New Solution: resource-based Rights Management (resource-based access control)

Implicit access control is mentioned (that is, to determine what role the user has) and explicit access control (that is, to determine whether a user has permission to do something with certain resources)

Implicit control will encounter a problem: if the need to change the day, such as the admin can view the report, now requires the project manager to see the report, may need to modify the program, add to the role of the project manager to judge.

and display control, it will be much better, "Users have permissions" This can be configured, so that is quite flexible. I really admire the author.