第一个目标是实现完整的细粒度访问控制。
The first is to achieve complete and fine-grained access control.
对资产的细粒度访问控制的语义因素是什么？
What are the semantic considerations for fine-grained access control on your assets? For example?
我们的客户同时利用基于角色的权限和细粒度访问控制。
Our clients take advantage of both role-based permission and fine-grained access control.
本系列的第3部分将更详细地讨论该细粒度访问控制模型。
Part 3 of this series will discuss the fine-grained access control model in more detail.
细粒度访问控制不只是授予或拒绝执行程序或读取数据文件的权限。
Fine-grained access control goes beyond granting or denying the right to execute a program or read a data file.
例如，在WebSpherePortal中，您可以在聚合框架内应用细粒度访问控制。
For example, in WebSphere Portal, you can apply fine-grained access control within the aggregation framework.
换句话说，这种简单的方法不能区分不同的用户类型，因此不能用于需要细粒度访问控制的应用程序。
In other words, this simple approach fails to distinguish between different types of users, making it unsuitable for applications that require granular access control.
通过实际应用来看，应用上下文技术可以用于提高细粒度访问控制的性能，从而提高数据库的安全性。
Application context can be useful for the purposes of enforcing fine-grained access control and enhances the security of database.
此类授权测试可以称为细粒度访问控制，因为运行应用程序将其应用于该程序所使用的几乎任何类型的资源。
This type of authorization testing might be called fine-grained access control because it is applied by a running program to virtually any type of resource that the program works with.
诸如apache等Web服务器提供的授权类型可以称为粗粒度访问控制，因为它只提供了一个外部安全层。
The kind of authorization provided by a Web server like Apache might be called coarse-grained access control because it provides only an outer layer of security.
另外，可以对每个映像和每个模式应用不同的细粒度访问控制，控制能够读取资产的用户和能够编辑资产的用户。
In addition, you can apply fine-grained access control distinctly to each image and each pattern, controlling who can read the asset and who can edit it.
基于角色的访问控制模型(RBAC)难以直接有效地应用到以“最小需要”为原则的细粒度访问控制应用领域。
The basic model of RBAC can not be applied directly to the systems which require "minimum necessary" and fine-grained access control.
讨论了数据库细粒度访问控制的几种常见技术，并结合实例介绍了如何使用VPD、应用上下文和视图来构建企业细粒度访问控制体系。
The paper describes the theory of several technologies, such as VPD, Application Context and View, of Fine-grained Access and how they work together with the explanation of an example.
该模型从用户证书、时间约束、XML文档分类等方面对传统的RBAC模型进行了扩展，以实现基于内容的时间上下文敏感的多粒度访问控制。
This model extends the traditional RBAC model with user credentials, temporal constraints and XML document classification to enforce a content-based time-aware multi-granularity access control.
MSDA主要解决了多策略框架对细粒度访问控制和受控访问机制支持不足的问题，并把体系结构实施对原有系统结构和对系统性能的影响控制在较小的范围内。
MSDA not only solves the problem of fine-grained access control and controlled access mechanisms, but also minimizes the influence on the original system structure and system performance.
授权和访问控制的粒度粗细不等。
Authorization and access control can vary from coarse - to fine-grained.
这是各种权限：读、写、完全控制、指定给用户、bucket或对象级别的访问粒度。
There are various permissions - read, write, full control - assigned to users, and access granularity established at bucket or object level.
DomainRBAC为用户提供了很好的资源访问粒度控制，它要求启用Enhanced RBAC。
Domain RBAC provides fine granular control access over resources for users and requires Enhanced RBAC to be enabled.
服务接口通常是粗粒度的，但客户端通常希望对其访问的粒度进行更多的控制。
Service interfaces are typically coarse-grained but the client often wants more control over their granularity of access.
从理论上而言，这可以使用可用于通用soa交互的任何机制，这些控制将得到一个用户名，此用户名可随后用于进行更为细粒度的访问控制。
In theory this can use any of the mechanisms described for general SOA interactions and these controls will result in a user name which can then be used for the finer grained access controls.
这样使得您可以为文件系统对象建立细粒度的访问控制，并且支持继承特性。
This allows you to establish fine-grained access control for file system objects and support inheritance features.
对与该服务相关联的资产的细粒度保护还需要其它访问控制。
Additional access control is required for fine-grained protection of the assets associated with that service.
该例表明，你可以对你需要的单个资源进行访问控制，甚至深入到非常细粒度的实例级别。
This example shows that you can control, even down to a very fine-grained instance level, access to individual resources if you needed to.
访问控制表让您定义细粒度的文件许可权。
Access control lists let you define fine-grained permissions for files.
添加到ACL的每个用户或组可以具有不同的活动权限，从而可对任何用户可用的访问权限类型进行适当的细粒度控制。
Each user or group that is added to the ACL can have a different set of active permissions, enabling very granular control over exactly what type of access is available to any user.
属性可以在查询中使用，并且可用于建立细粒度的访问控制。
Properties can be used in queries, and can be used to establish fine-grained access control.
DB 2对数据库访问的性能和安全特性施加细粒度的控制—因此需要更细致的处理。
DB2 gives fine-grained control over performance and security characteristics of database access-and demands correspondingly careful attention.
访问控制：细粒度的访问控制可能是必须的，通过一个数据库查找原语或对特定于应用程序的授权服务的调用实现。
Access control: Fine-grained access control might be necessary via a database lookup primitive, or a service invoke to an application specific authorization service.
LBAC特性为控制对各行和各列的读写访问提供了更细的粒度。
The LBAC feature provides for greater granularity for controlling read and write access to individual rows and table columns.
在数据存储之上，JCR提供诸如访问粒度控制、版本控制、内容事件、全文检索和过滤等内容服务。
Sitting on top of the data storage, JCR offers content services like granular access control, versioning, content events, full-text search and filtering among others.
应用推荐