关键词: 协同开发环境, 访问控制模型, 角色, 属性, 产品开发

Abstract: An access control model based on role and attribute was presented for requirement of collaborative development environment,in which the public attributes of objects and organizational attributes of subjects were defined to satisfy the dynamic variable accessibilities of objects and to improve the flexibility of permission assignments.To maintain the explicit role-permission assignments,the permission calculus rules were stipulated so that permission assignments based on attributes could be analyzed.The general access control matrix was used to ensure the security of distributed authorization.The proposed model was applied to a collaborative development environment,and the effectiveness was proved.

Key words: collaborative development environment, access control, role, attribute, product development