MLTS-RBAC模型在SaaS中的农业信息服务应用

基于RBAC的SaaS访问控制服务平台中用户的角色多分层与角色时间约束模型(Multi-layered with Time constraint in SaaS-RBAC，MLTS-RBAC)是在RBAC的基础上，将SaaS平台的用户划分系统级用户和租户级别用户。根据角色将两种级别用户分别进行层级管理；为实现方便租赁费用的计算，防止权限滥用，模型中对租户角色加入时间约束，并依据服务等级协议监测租户是否有违例行为来约束角色使用服务的时间，确保租户正常使用服务。使用MLTS-RBAC模型与实际应用相结合，应用于农业信息服务的SaaS应用，解决农业信息服务中的管理问题。

MLTS-RBAC model of agricultural information service application in SaaS

This paper proposes (Multi-layered with Time constraint in SaaS-RBAC, MLTS-RBAC) model, which is based on the RBAC on the SaaS platform. The users are strictly divided into system level users and tenant level users, using hierarchy management to administrate the two levels of users respectively. In order to achieve convenient calculation of the rent and prevent the abuse of authority, the model set time constraints for the tenant level users. Once the lease time expires, the corresponding user will fail. By monitoring the tenants according to the service level agreement, the model can constrain the time each in which tenant use the system and thus ensure the tenants best services. Combined with the practical application, MLTS-RBAC model is used in agricultural information service on SaaS platform to solve the problem of management of agricultural information service.