RBAC Model
core concept: user,role,permission,operation,resource
- user has many roles, assign role to user; one role can be assigned to many users.
- user has many permissions, assign permission to user; one permission can be assigned to many users.
- operation is like add, update, delete, import, download, visible, invisible, etc.
- resource is like menu, button, or other screen elements.
- permission has many resources and operations; one resource can be used by many permissions; one operation can be used by many permissions.
RBAC模型速记
原文:http://www.cnblogs.com/netfocus/p/4560292.html