第一个目标是实现完整的细粒度访问控制。
The first is to achieve complete and fine-grained access control.
对资产的细粒度访问控制的语义因素是什么？
What are the semantic considerations for fine-grained access control on your assets? For example?
我们的客户同时利用基于角色的权限和细粒度访问控制。
Our clients take advantage of both role-based permission and fine-grained access control.
本系列的第3部分将更详细地讨论该细粒度访问控制模型。
Part 3 of this series will discuss the fine-grained access control model in more detail.
细粒度访问控制不只是授予或拒绝执行程序或读取数据文件的权限。
Fine-grained access control goes beyond granting or denying the right to execute a program or read a data file.
例如，在WebSpherePortal中，您可以在聚合框架内应用细粒度访问控制。
For example, in WebSphere Portal, you can apply fine-grained access control within the aggregation framework.
换句话说，这种简单的方法不能区分不同的用户类型，因此不能用于需要细粒度访问控制的应用程序。
In other words, this simple approach fails to distinguish between different types of users, making it unsuitable for applications that require granular access control.
此类授权测试可以称为细粒度访问控制，因为运行应用程序将其应用于该程序所使用的几乎任何类型的资源。
This type of authorization testing might be called fine-grained access control because it is applied by a running program to virtually any type of resource that the program works with.
另外，可以对每个映像和每个模式应用不同的细粒度访问控制，控制能够读取资产的用户和能够编辑资产的用户。
In addition, you can apply fine-grained access control distinctly to each image and each pattern, controlling who can read the asset and who can edit it.
通过实际应用来看，应用上下文技术可以用于提高细粒度访问控制的性能，从而提高数据库的安全性。
Application context can be useful for the purposes of enforcing fine-grained access control and enhances the security of database.
基于角色的访问控制模型(RBAC)难以直接有效地应用到以“最小需要”为原则的细粒度访问控制应用领域。
The basic model of RBAC can not be applied directly to the systems which require "minimum necessary" and fine-grained access control.
讨论了数据库细粒度访问控制的几种常见技术，并结合实例介绍了如何使用VPD、应用上下文和视图来构建企业细粒度访问控制体系。
The paper describes the theory of several technologies, such as VPD, Application Context and View, of Fine-grained Access and how they work together with the explanation of an example.
MSDA主要解决了多策略框架对细粒度访问控制和受控访问机制支持不足的问题，并把体系结构实施对原有系统结构和对系统性能的影响控制在较小的范围内。
MSDA not only solves the problem of fine-grained access control and controlled access mechanisms, but also minimizes the influence on the original system structure and system performance.
这样使得您可以为文件系统对象建立细粒度的访问控制，并且支持继承特性。
This allows you to establish fine-grained access control for file system objects and support inheritance features.
对与该服务相关联的资产的细粒度保护还需要其它访问控制。
Additional access control is required for fine-grained protection of the assets associated with that service.
该例表明，你可以对你需要的单个资源进行访问控制，甚至深入到非常细粒度的实例级别。
This example shows that you can control, even down to a very fine-grained instance level, access to individual resources if you needed to.
访问控制表让您定义细粒度的文件许可权。
Access control lists let you define fine-grained permissions for files.
属性可以在查询中使用，并且可用于建立细粒度的访问控制。
Properties can be used in queries, and can be used to establish fine-grained access control.
DL不支持细粒度的用户访问控制。
The DL does not support fine-grained, per user access control.
NFSVersion4的主要特性之一就是它对增强型安全方案的支持，该方案允许更强的身份验证、细粒度的访问控制以及加密的数据通信。
One of the major features of NFS Version 4 is its support for enhanced security schemes, which allow stronger authentication, fine-grained access control, and encrypted data traffic.
从理论上而言，这可以使用可用于通用soa交互的任何机制，这些控制将得到一个用户名，此用户名可随后用于进行更为细粒度的访问控制。
In theory this can use any of the mechanisms described for general SOA interactions and these controls will result in a user name which can then be used for the finer grained access controls.
添加到ACL的每个用户或组可以具有不同的活动权限，从而可对任何用户可用的访问权限类型进行适当的细粒度控制。
Each user or group that is added to the ACL can have a different set of active permissions, enabling very granular control over exactly what type of access is available to any user.
DB 2对数据库访问的性能和安全特性施加细粒度的控制—因此需要更细致的处理。
DB2 gives fine-grained control over performance and security characteristics of database access-and demands correspondingly careful attention.
访问控制：细粒度的访问控制可能是必须的，通过一个数据库查找原语或对特定于应用程序的授权服务的调用实现。
Access control: Fine-grained access control might be necessary via a database lookup primitive, or a service invoke to an application specific authorization service.
这尤其适合非常复杂、并且要求对用户能够访问哪些功能进行细粒度控制的应用程序。
This makes it ideal for Web applications that have a high degree of complexity, and that require fine-grained control over which user has access to which function.
这允许基于用户限制操作，从而提供更细粒度的用户访问控制。
This allows actions to be restricted on a per-user basis, allowing fine-grained control over which user can access which action.
应用程序可能需要强制实行附加的、更细粒度的控制，以进一步严格控制对受保护资源的访问。
An application may need to impose additional, finer-grained controls that further restrict access to protected resources.
第二个层次更加细粒度，在数据级别来控制访问——往往通过URL。
Level 2 is more fine-grained, controlling access to the data level - typically the URL.
Solaris10 中的RBAC的优点在于，它通过提供对管理任务（可在以后进行分配）的细粒度控制最小化了对根访问的需求。
The advantage of RBAC in Solaris 10 minimizes the need for root access by providing fine-grained control over administrative tasks that can then be assigned.
这些灵活性需要支持控制访问权限的转移，执行细粒度的访问控制和撤消之前许可的访问权限。
The policy flexibilities include controlling migrated access permissions, performing fine grain access control and revoking permitted access permission.
应用推荐