在基于Web访问的管理信息系统中,系统的安全性问题至关重要。而采用基于角色访问控制(RBAC)模型可以有效地解决系统安全性问题。结合“化学药品管理”系统设计与实现,详细论述角色访问具体的安全机制,通过限制系统中各种角色对系统的操作,有效地解决了Web页面安全访问和控制数据库的问题。 In the Web-based management information system, the security of the system is very important. The use of role-based access control (RBAC) model can effectively solve the system security issues. Combining with the design and implementation of “chemical management” system, this paper discusses in detail the specific security mechanism of role access and effectively solves the problem of Web page security access and database control by restricting the operation of various roles in the system.