Task-Role-Based Access Control in Application on MIS

Access control is an important measure to ensure the security of the management information system in enterprise environment. Taking the characteristics of task-role-based access control (TRBAC) and the requirement of practical application into consideration, the paper introduces TRBAC which is suitable for enterprise environment into the design of MIS. Task is classified to support both passive and active access control and permission assignment is also analyzed according to task and task instance, and then the complexity of permission management is reduced. At the same time, responsibility separation is introduced to increase the security and performance of the system. Finally, an application instance of TRBAC in MIS is given to show the superiority of TRBAC in MIS