文章对比分析了主流的访问控制模型,以基于角色的访问控制模型为基础,设计了适合云平台下CRM系统的访问控制机制,该机制增加了用户组、部门、资源、操作等实体。在优先通过角色授权的基础上,允许对用户直接授权,在权限设计中增加了用户权限直接授权,用户角色权限的动态授权等。本文还介绍了云平台下CRM系统的访问流程,并实现了云平台下CRM系统的访问控制。 Based on the role-based access control model, the article designs and implements the access control mechanism for the CRM system under the cloud platform. This mechanism adds user groups, departments, resources, operations and other entities. On the basis of giving priority to role authorization, it is allowed to directly authorize the user. In the authority design, direct authorization of user rights and dynamic authorization of user role rights are added. This article also introduced the CRM platform under the cloud platform to visit the process, and achieved under the cloud platform CRM system access control.