Application of RBAC model in secondary vocational schools information management system

A comprehensive access control model with the main element of “user-organization-role-permission” was proposed based on the control problem of users in different levels accessing the system. The model improved the nature of role inheritance and constraint in RBAC model, and increased the association between the user and the organization. The constraint imposed by the organization to the users can not only make the system quickly identify the users´ department, but also improve the efficiency of the allocation of users´ rights in the system. This model has been successfully applied in the secondary vocational schools information management system of provincial Career Guidance for College Graduates Service Center. Different users can access the applications independently in the system, which accordingly keeps the users´ information safe. In addition, the integrated management between the users and organizations can take an effective control of the users of illegal organizations accessing the system.