Switchover of Access Control Policy for Content Management Information System

In order to solve the switchover from a content management information system based on role-based access control (RBAC) model to a SOA architecture, the access control part needs to turn into the attribute-based access control (ABAC) model more suitable for distributed architecture. This paper comparatively studies two authorization models of both RBAC model and ABAC model, and analyzes how to turn existing information systems from the RBAC model into ABAC model. The result presented in this paper indicates that the smooth transition from RBAC model to ABAC model can be achieved, rather than demolishing and reconstructing.