<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:media="http://search.yahoo.com/mrss/" version="2.0"><channel><title>标签：鉴权 - Warren's Blog</title><link>/tags/jian-quan</link><atom:link href="/tags/jian-quan/feed/tags/jian-quan.xml" rel="self" type="application/rss+xml"/><description>IF THERE’S ANY TRUE LOGIC TO THE UNIVERSE… WE’LL END UP ON THAT GAYHUB AGAIN SOMEDAY.</description><generator>Halo v2.22.4</generator><language>zh-cn</language><image><url>https://oss-shenzhen-40g.oss-cn-shenzhen.aliyuncs.com/blog-attach/favicon_1619538565825.ico</url><title>标签：鉴权 - Warren's Blog</title><link>/tags/jian-quan</link></image><lastBuildDate>Sun, 3 May 2026 18:00:49 GMT</lastBuildDate><item><title><![CDATA[工程经验 - 数据鉴权设计与实践]]></title><link>/archives/gong-cheng-jing-yan---shu-ju-jian-quan-she-ji-yu-shi-jian</link><description><![CDATA[<img src="http://localhost:8090/plugins/feed/assets/telemetry.gif?title=%E5%B7%A5%E7%A8%8B%E7%BB%8F%E9%AA%8C%20-%20%E6%95%B0%E6%8D%AE%E9%89%B4%E6%9D%83%E8%AE%BE%E8%AE%A1%E4%B8%8E%E5%AE%9E%E8%B7%B5&amp;url=/archives/gong-cheng-jing-yan---shu-ju-jian-quan-she-ji-yu-shi-jian" width="1" height="1" alt="" style="opacity:0;">[TOC] 在我们的业务工程中，涉及到两部分鉴权的管控，这里简单做个总结分享 RBAC 和 ACL 模型在我们的工程中的实践 一、概念 1.1 鉴权 权限系统设计的核心目标是限制系统使用者的操作在一个合法的范围内，防止越权访问行为，包括水平越权和垂直越权两种。 水平越权：用户访问了不应该访问的数据。]]></description><guid isPermaLink="false">/archives/gong-cheng-jing-yan---shu-ju-jian-quan-she-ji-yu-shi-jian</guid><dc:creator>Warren Zhan</dc:creator><category>工作沉思录</category><pubDate>Mon, 15 Apr 2024 08:35:47 GMT</pubDate></item></channel></rss>