对于不同的主体组，管理员常常需要使用不同的规则集合。
Administrators are often required to have a different set of rules for different group of principals.
可以将一个角色授予多个组或用户(主体)；一个组或主体可以具有映射到它的多个角色。
One role might be granted to multiple groups or users (principals); one group or principal may have multiple roles mapped to it.
ACL将权限集授予主体或组——但是，权限的目标和范围是什么？
An ACL grants sets of permissions to principals or groups — but what are the targets or scope of the permissions?
应用推荐