The necessity of applying standard RBAC model (role) to CMS

With the acceleration of the development of information in enterprises, especially in the government, institutions, enterprises and other fields, due to more day-to-day departments, more detailed division of labor, the user access rights control management flexibility, ease of maintenance put forward a higher demand, therefore, efficient and advanced access control mode is very necessary. role-based access Control (RBAC) is an effective method to solve the common resource access control of the information in the website environment. The two notable characteristics are:

1. Reduce the complexity of authorization management and reduce management overhead.

2, flexibility to support the site's security policy, and the site functions of the changes have a great scalability.

Dynamic Sitefactory™cms is a set of enterprise content management system, which is based on the standard RBAC model (role), which is aimed at government, institution, enterprise and other fields as the development object. As shown in the following illustration, a comparison of traditional and dynamic sitefactory™cms roles:

As you can see from the comparison, at present, large and small content management system (CMS) and information management system, most of the use of static control methods or member groups of the original authority form, can not meet the current Internet Information explosion era of high maintenance, high flexibility, high uniformity of characteristics, especially the information portals, Complex shop and industry vertical information application needs, therefore, the role (RBAC model) in the application of CMS is bound to be the trend. So what's the magic of it? Today will be introduced in the context of the dynamic sitefactory™ the role of the assignment of rights to answer for you.

The concept of a role

A role is the identity of a user in an environment that has some matching permissions. A role is also a collection of custom permissions, where you can establish multiple roles and assign multiple permissions to each role. For example, the school website teachers, students, forum administrators are a role. For each role, he can have a range of permissions, which are relatively fixed.

The role of dynamic sitefactory™cms is realized through the standard RBAC (role-based access Control) model, and the following figure is the illustration of the role application in Sitefactory™cms. We have set up "warehouse management", "Finance personnel", "salesman", "designer", "Editor of Column", "Editor-in-Chief" and other roles, and they have relatively independent control authority. After assigning Zhang, Doe, Harry to different roles, they have a set of permissions. See the relationship between the user and the role is Many-to-many. That is, a user can belong to multiple roles, and a role can include multiple users.

Character of the role

1. Access rights are associated with roles, and different roles have different permissions. What role does the user have in the resource

Row access determines what permissions the user has and what actions they can perform.

For example: We use dynamic sitefactory™cms to add an "order Processor" role in the background, have permission to view orders, modify orders, delete orders, order void, add the role of order teller, and have permission to order transfer and order close. Given the role of the Zhang "order processor," Zhang has the "view order", "Modify Order", "Delete order", "Order void" permission, without the permission of the order teller.