基于粒度的访问控制冲突分析及解决办法

访问控制规范了安全域中合法用户访问与操作资源的行为,保证资源不被非授权用户使用,从而起到保护资源的作用。访问控制粒度指明系统为用户授权的层次,如目录级授权与文件级授权等。当不同粒度安全域的用户进行资源互访时,则易造成访问权限的缩放以及授权的冲突等问题。分析不同粒度访问控制的特点,指出冲突产生的原因。同时,提出跨域资源访问应遵守的规则。根据这些原则,给出因访问控制粒度而引起的冲突解决方法。

Research on Access Control Conflict Based on Granularity and Its Solution

Access control regulates legitimate users' access and operation towards resources, so as to prevent resources from unauthorized access. Access control granularity specifies the authorization level which administrative domain provides service for users, such as directory authorization level, file authorization level etc. When users with different access granularity share resources, it easily lends to some problems such as privilege's change or conflicts. The paper analyzes the features of access control system with different granularity, points out how conflicts produce. Meanwhile, some rules that administrative domain should observe are proposed, and a solution is given towards access control granularity.