在基于角色的访问控制 (role basedaccesscontrol,RBAC)模型的基础上提出了一种基于角色的多级访问控制模型RBMHAC(role basedmulti hierarchyaccesscontrol) .该模型引入“域”的概念来模拟现实世界中的等级管理体制 ,通过对“域”用户的安全管理来有效地实现多级安全管理 .RBMHAC模型能提供更加完善的访问控制策略 ,对角色的管理也更加方便高效 . Based on role based access control (RBAC) model, a Role Based Multi-hierarchy Access Control (RBMHAC) model is proposed, which introduces the concept of “domain” to simulate the real world hierarchy Management system to effectively implement multi-level security management through the security management of “domain” users.RBMHAC model can provide a more complete access control strategy and more convenient and efficient role management.