Research And Application Of Authorization Delegation Model Based On Automobile Production Management And Control System

Automobile production management and control system is designed for the auto parts factory,intended to make these enterprises accomplish office automation of their daily work.The daily work of these enterprises is mainly composed of two parts: daily data maintenance and workshop process.The former one focus on the management and maintenance of items such as project material information,financial information,employee information and other data related;the latter,according to the process characteristics of enterprise production,combined with the available resources in the workshop,reasonable production scheduling,ensure that products can be produced more by limited time.In daily work,it happens the emergence of the inevitable cause that employees cannot continue doing the duties or the completing the current task.If the problem develop without attention,the daily work of enterprises and production process are likely to stagnate.That may cause a great threat to the system security.In such a case,it is imperative for the enterprise to design a safe and effective authorization delegation function to make the use of the system avaliably.For an enterprise production management system,the authorization delegation mechanism is an indispensable part to make system function avaliably,the core function of it is provide a safe and effective mechanism if the user system cannot do the job temporarily or permanently,the user's permission can transfer to other users on behalf of the fomer.For automobile production management and control system,in the implementation of delegation,if permission involved in workflow needs to think differently,the permission granularity of the form module also need to be controlled by the model differently.It is also the core of this paper on how to construct a authorization delegation model in such a system.At present,the mainstream delegation model are role based delegation model,task based delegation model,permission based delegation model and their derivative.These models play their respective advantages and strengths in previous applications,played a very good role.But with the boom of IT industry and time lapses,the amount of users and data of the software system is growing exponentially,customer demand is also a trend of diversification,the traditional authorization delegation models are not flexible and simple enough in such circumstances,they also have some shortcomings on suitable issues for new systems,there are more or less defects in the model design.In conclusion,this paper is based on the team project and specific needs of enterprises,combined with the research and reference on traditional model,proposed a new authorization model named M-PBDM(Multi-Permission Based Delegation Model).Firstly,model strip abstract of enterprises organizational structure,define the concept of the role,users,task in the system,and distinguish the permission into workflow relevant permission and non-workflow relevant permission.With this classification,the permission transfer under the workflow is based on user task distributed by the system,the transfering of permission is also the transfer of task;the transfering under non-workflow permission is based on the role of the user,through further distinguishing of transferable permission and untransferable permission,and the granularity of permission,so that authorization delegation carrys out.Through practice and improvement for a period of time,the model has a good application in the this software.It helps reduce the system risk,improve the usability and safety of the system.