A study of expand role-based access control model

In this paper, it presents E-RBAC model expanded on the traditional RBAC. The E-RBAC model has two ways of user authorization and introduces user group, module, role priority, it improves the system security and flexibility, reducing the complexity of the permission assignment. The expanded RBAC model can be easily applied to other information systems, now it has practical significance in the management information system.