Resource Based Access Control vs Role Based Access Control
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am learning Apache Shiro, and I found this article: The New RBAC: Resource-Based Access Control And the author said: .......you could assign behaviors (permissions) directly to a Role if you want. In this sense, you would still have a Role-Based Access Control security policy - it is just you would have an explicit RBAC policy instead of the traditional implicit strategy. But that begs the question - why stop at roles? You can assign behaviors directly to users, or to groups, or to anything else your security policy might allow. It seems