An Access Control Model Based on Web Application

To solve the cumbersome authorization, heavy workload and such problems which exposed in practical applications of the web application access control, the paper introduces a new access control model based on web application(WRBAC). The model classifies the object directly of web application, which can reduce the difficulty of assigning permission between roles and objects. The model improves the efficiency of the system authorized and offers the support of access control dynamically. At last, a formal description and implementation are presented, and a practical application is provided to verify the effectiveness of the model.