CAJ | 학술논문

文章对比分析了主流的访问控制模型，以基于角色的访问控制模型为基础，设计了适合云平台下CRM系统的访问控制机制，该机制增加了用户组、部门、资源、操作等实体。在优先通过角色授权的基础上，允许对用户直接授权，在权限设计中增加了用户权限直接授权，用户角色权限的动态授权等。本文还介绍了云平台下CRM系统的访问流程，并实现了云平台下CRM系统的访问控制。
문장대비분석료주류적방문공제모형，이기우각색적방문공제모형위기출，설계료괄합운평태하CRM계통적방문공제궤제，해궤제증가료용호조、부문、자원、조작등실체。재우선통과각색수권적기출상，윤허대용호직접수권，재권한설계중증가료용호권한직접수권，용호각색권한적동태수권등。본문환개소료운평태하CRM계통적방문류정，병실현료운평태하CRM계통적방문공제。
In this paper, the main access control models are analyzed and compared, and a access control mechanism suitable for the CRM system deployed in cloud platform is designed on the basis of role-based access control model. In this design the entities of user group, department, resource and operation are added, which authorize users through assigning users roles preferentially, and on this basis, allowing the existence of authorizing users directly. And the direct binding of users and permissions, and dynamic binding of users, roles and permissions are added. The access process of CRM system deployed in cloud platform is also introduced and implemented in this paper.