本文基于RBAC模型设计实现了一种权限系统,给出了设计模型的概念图描述,讨论了权限维护子系统与权限匹配子系统的设计思想和方法,对提出的改进资源树编码进行了理论研究。在讨论角色继承实现过程的基础上,深入分析了将权限匹配系统分为拦截器、编码器与匹配器三个部分构建的策略,及用快表提高访问效率的辅助手段。最后通过与其他相似技术的比较分析,总结出了所实现系统的特点及存在问题。 In this paper, an authorization system is designed based on RBAC model. The concept map of the design model is presented. The design idea and method of the rights maintenance subsystem and permission matching subsystem are discussed. The proposed resource tree coding is studied theoretically . On the basis of discussing the realization process of role inheritance, this paper deeply analyzes the strategy of dividing the system of permission matching into three parts: interceptor, encoder and matcher, and the auxiliary means to improve the access efficiency with the fast table. Finally, through the comparison and analysis with other similar technologies, it summarizes the characteristics of the system and the existing problems.