The access control research of management information system

An access control solution, based on .Net Framework development technology, is presented here by using the Rule and Role Based Access Control model (RRBAC), which is different from the Role Based Access Control one. There are three steps of the achievement of access control. The first one is defining the object privilege, and then the access control list should be defined. The last but most important thing is the definition of the data structure. After that, the access control list can be bound to kinds of objects, such as pages, forms or other objects. It has been proven to be effective and flexible in the development of access control within management information system.