Abstract: For the enterprises characterized by high-coupling jobs and crossing businesses‚it is difficult to implement the administration of information system privilege by utilizing the traditional access control strategies based on user or role．In this paper‚according to the basic theory of the RBAC （Role-based Access Control）‚a mult- i layered TRBAC （Tree Role-based Access Control） model was presented and a role-based privilege administration scheme was imple-mented in the application layer．The practical example indicates that the TRBAC simplifies the configuration rules of user‚role and permission‚and makes the privilege management more convenient．

Key words:  tree role, access control, privilege management, database application system