Role is introduced to separate user and privilege in role-based access control model, but RBAC can't directly control the permission for a sequence of events.

而基于角色的访问控制模型以角色为中介，将用户与权限逻辑隔离，但该模型不能处理有执行顺序的任务；

youdao

In the application of secure information systems, the traditional role-based access control model can not filter business data for users, which easily results in secret data leakage.

在安全信息系统应用中，传统的基于角色的访问控制模型不能为用户过滤业务数据，容易导致数据失密。

youdao

In this paper, we introduce the role-based access control model, analyse the role hierarchy model and the problem of private permissions in RBAC96, and point out the disadvantage of Sandhu s solution.

针对著名的 RBAC96模型的不足之处 ，结合私有权限、部门权限和权限属性变化等问题 ，对角色权限及角色层次关系进行了分析 ，提出了一个改进的角色层次化关系模型 。

youdao