Isu tiri kuvaka dhizaini-based access control modhi. Chikamu chekutanga, chekugadzirira

Ini parizvino ndinoshandira mutengesi wesoftware, kunyanya kuwana mhinduro dzekugadzirisa. Uye ruzivo rwangu "kubva muupenyu hwekare" hunobatanidzwa nedivi remutengi - sangano guru rezvemari. Panguva iyoyo, boka redu rekupinda mudhipatimendi rekuchengetedza ruzivo harigone kuzvirumbidza nehunyanzvi hukuru muIdM. Takadzidza zvakawanda mukuita, taifanira kurova mabumps akawanda kuitira kuti tivake nzira yekushanda yekutonga kodzero dzevashandisi mumasisitimu eruzivo mukambani.

Kubatanidza ruzivo rwangu rwemutengi rwakaomerwa neruzivo rwemutengesi uye kugona, ndinoda kugovana newe zvakanyanya nhanho-ne-nhanho mirairo: maitiro ekugadzira iyo-yakavakirwa-yakavakirwa nzira yekutonga modhi mukambani huru, uye izvo zvinozopa semhedzisiro. . Mirayiridzo yangu ine zvikamu zviviri: yekutanga iri kugadzirira kuvaka modhi, yechipiri iri kuvaka. Heino chikamu chekutanga, chikamu chekugadzirira.

NB Kuvaka muenzaniso wemuenzaniso, zvinosuruvarisa, kwete mhedzisiro, asi maitiro. Kana kuti, kunyangwe chikamu chemaitiro ekugadzira yekuwana yekudzora ecosystem mukambani. Saka gadzirira mutambo kwenguva yakareba.

Chekutanga, ngatizvitsanangure - chii chinonzi role-based access control? Ngatiti iwe une bhangi hombe rine makumi, kana kunyange mazana ezviuru zvevashandi (masangano), mumwe nemumwe wavo ane gumi nemazana ekodzero dzekuwana mazana emabhangi emukati eruzivo masisitimu (zvinhu). Zvino wedzera huwandu hwezvinhu nenhamba yezvidzidzo - iyi ndiyo diki nhamba yekubatanidza iwe yaunoda kutanga wavaka wozodzora. Zvinonyatsoita here kuita izvi nemaoko? Hongu kwete - mabasa akagadzirwa kugadzirisa dambudziko iri.

Basa seti yemvumo inodiwa nemushandisi kana boka revashandisi kuita mamwe mabasa ebasa. Mushandi wega wega anogona kuita rimwe kana mamwe mabasa, uye basa rega rega rinogona kuva nemvumo kubva kune imwe kusvika kune yakawanda inotenderwa kumushandisi mukati meiyo basa. Mabasa anogona kusungirirwa kune chaiwo zvigaro, madhipatimendi kana mabasa anoshanda evashandi.

Mabasa anowanzo gadzirwa kubva kune ega ega mvumo yevashandi mune yega yega ruzivo system. Ipapo mabasa ebhizinesi epasi rose anoumbwa kubva kumabasa ega ega system. Semuenzaniso, basa rebhizimisi "maneja wekwereti" rinosanganisira mabasa akasiyana-siyana mumasangano emashoko anoshandiswa muhofisi yevatengi vebhangi. Semuenzaniso, mune senge main automated banking system, cash module, electronic document management system, service maneja nevamwe. Basa rebhizimisi, sekutonga, rakasungirirwa kuhutano hwesangano - mune mamwe mazwi, kune seti yezvikamu zvekambani uye zvigaro mavari. Aya ndiwo magadzirirwo anoita basa repasi rose matrix (ini ndinopa muenzaniso mutafura pazasi).

Zvakakosha kucherechedza kuti hazvibviri kuvaka 100% muenzaniso wekutevedzera, kupa kodzero dzose dzinodiwa kune vashandi venzvimbo imwe neimwe mune zvekutengeserana. Hongu, izvi hazvidiwi. Mushure mezvose, muenzaniso wemuenzaniso haugoni kumira, nokuti zvinoenderana nemamiriro ezvinhu anogara achichinja. Uye kubva kune shanduko mumabasa ebhizinesi rekambani, izvo, zvinoenderana, zvinokanganisa shanduko muhurongwa hwesangano uye kushanda. Uye kubva pakushaikwa kwekupa kwakazara kwezviwanikwa, uye kubva mukusatevedzera zvinotsanangurwa zvebasa, uye kubva pakuda purofiti pamutengo wekuchengetedza, uye kubva kune zvimwe zvinhu zvakawanda. Naizvozvo, zvinodikanwa kuvaka muenzaniso unokwanisa kuvhara kusvika 80% yezvido zvevashandisi zvekodzero dzakakosha kana dzapihwa chinzvimbo. Uye ivo vanogona, kana zvichidikanwa, kukumbira iyo yasara 20% gare gare pane akasiyana maapplication.

Chokwadi, ungabvunza kuti: “Hapana here chinhu chakadai se100% mienzaniso yokutevedzera?” Zvakanaka, sei, izvi zvinoitika, semuenzaniso, mune zvisingabatsiri zvimiro izvo zvisiri pasi pekuchinja nguva dzose - mune imwe sangano rekutsvaga. Kana mumasangano ehondo-maindasitiri akaoma ane hupamhi hwekuchengetedza, uko kuchengeteka kunouya pakutanga. Zvinoitika mune yekutengeserana chimiro, asi mukati megadziriro yekupatsanurwa kwakasiyana, basa rayo rakanyatsomira uye rinofanotaurwa maitiro.

Mukana mukuru we-role-based management ndiko kurerutsa kwekodzero dzekupa, nekuti huwandu hwemabasa hwakanyanya kushoma pane huwandu hwevashandisi veiyo ruzivo system. Uye izvi ndezvechokwadi kune chero indasitiri.

Ngatitorei kambani yekutengesa: inoshandisa zviuru zvevatengesi, asi vane kodzero dzakafanana muhurongwa N, uye basa rimwe chete richagadzirwa kwavari. Kana mutengesi mutsva achiuya kukambani, anobva angopihwa basa rinodiwa muhurongwa, uhwo hwatova nemasimba ese anodiwa. Zvakare, nekudzvanya kumwe chete unogona kushandura kodzero dzezviuru zvevatengesi kamwechete, semuenzaniso, wedzera sarudzo nyowani yekugadzira rondedzero. Iko hakuna chikonzero chekuita chiuru chekushanda, kubatanidza kodzero itsva kuakaundi yega yega - ingo wedzera iyi sarudzo kune basa, uye ichaonekwa kune vese vatengesi panguva imwe chete.

Imwe bhenefiti yebasa-based management ndiko kubviswa kwekupihwa kwemvumo isingaenderane. Ndiko kuti, mushandi ane rimwe basa muhurongwa haakwanisi panguva imwe chete kuva nerimwe basa, kodzero dzayo dzisingafaniri kusanganiswa nekodzero mune yekutanga. Muenzaniso unoshamisa ndeye kurambidzwa kwekubatanidza mabasa ekupinza uye kutonga kwekutengeserana kwemari.

Chero ani zvake anofarira kuti basa-based access control rakauya sei anogona
nyura munhoroondo
Kana tikatarisa nhoroondo, iyo IT nharaunda yakatanga kufunga nezve nzira dzekudzora nzira kumashure mu70s yezana ramakore rechiXNUMX. Kunyangwe zvikumbiro zvaive nyore kare ikako, sezvazvino, munhu wese ainyatsoda kubata mazviri. Ipa, shandura uye udzore kodzero dzevashandisi - kungoita kuti zvive nyore kunzwisisa kuti mumwe nemumwe wavo ane kupi. Asi panguva iyoyo pakanga pasina maitiro akafanana, maitiro ekutanga ekugadzirisa maitiro akanga ari kugadzirwa, uye kambani imwe neimwe yakavakirwa pamafungiro ayo nemitemo.

Mazhinji akasiyana ekutonga mamodheru ave kuzivikanwa, asi haana kuoneka nekukurumidza. Ngatigarei pane vakabatsira zvikuru mukusimudzira nzvimbo iyi.

Yekutanga uye pamwe iri nyore modhi ndeye Discretionary (selective) yekuwana kutonga (DAC - Discretionary access control). Uyu modhi unoreva kugovaniswa kwekodzero nevatori vechikamu muchirongwa chekuwana. Mushandisi wega wega ane mukana kune zvakati zvinhu kana mashandiro. Muchidimbu, pano seti yezvidzidzo zvekodzero inoenderana neseti yezvinhu. Iyi modhi yakawanikwa ichichinjika zvakanyanya uye yakanyanya kuoma kuchengetedza: rondedzero yekuwana inopedzisira yave yakakura uye yakaoma kudzora.

Yechipiri muenzaniso ndeye Inosungirwa kupinda kutonga (MAC - Inosungirwa kuwana kutonga). Zvinoenderana nemuenzaniso uyu, mushandisi wega wega anowana mukana kune chimwe chinhu zvinoenderana nekupihwa kwakapihwa kune imwe nhanho yekuvanzika kwedata. Saizvozvo, zvinhu zvinofanirwa kuiswa muzvikamu zvinoenderana nedanho razvo rekuvanzika. Kusiyana neyokutanga inoshanduka modhi, iyi, pane zvinopesana, yakave yakanyanya kuomarara uye inorambidza. Kushandiswa kwayo hakuna kurongeka kana kambani iine akawanda akasiyana ruzivo zviwanikwa: kuitira kusiyanisa kuwana kune akasiyana zviwanikwa, iwe uchafanirwa kuunza akawanda mapoka asingapindire.

Nekuda kwekusakwana kuri pachena kweidzi nzira mbiri, nharaunda yeIT yakaramba ichigadzira mamodheru anochinjika uye panguva imwe chete yakawanda kana pasi pasi rose kutsigira marudzi akasiyana ehurongwa hwekutonga kuwana kwesangano. Zvino zvakabva zvaonekwa yechitatu basa-based access control modhi! Iyi nzira yakaratidza kuti ndiyo inonyanya kuvimbisa nokuti haidi chete mvumo yekuzivikanwa kwemushandisi, asiwo mabasa ake ekushanda mumagadzirirwo.

Yekutanga yakatsanangurwa zvakajeka chimiro chemuenzaniso yakatsanangurwa nemasayendisiti eAmerica David Ferrailo naRichard Kuhn kubva kuUS National Institute of Standards and Technology muna 1992. Ipapo izwi rakatanga kuoneka RBAC (Role-based access control). Izvi zvidzidzo uye tsananguro yezvikamu zvikuru, pamwe nehukama hwavo, zvakagadzira hwaro hweiyo INCITS 359-2012 standard, iyo ichiri kushanda nhasi, yakabvumidzwa neInternational Committee on Information Technology Standards (INCITS).

Chiyero chinotsanangura basa se "basa rebasa mukati mesangano rine mamwe semantics ane chekuita nezvechiremera nebasa rakapihwa mushandisi akapihwa basa." Gwaro rinogadza zvinhu zvakakosha zveRBAC - vashandisi, zvikamu, mabasa, mvumo, mashandiro uye zvinhu, pamwe nehukama uye kubatana pakati pavo.

Chiyero chinopa hudiki hunodiwa chimiro chekuvaka muenzaniso - kubatanidza kodzero kuita mabasa uyezve kupa mukana kune vashandisi kuburikidza neaya mabasa. Nzira dzekugadzira mabasa kubva kuzvinhu uye mashandiro anotsanangurwa, humambo hwemabasa uye nhaka yemasimba inotsanangurwa. Mushure mezvose, mune chero kambani kune mabasa anobatanidza masimba ekutanga anodiwa kune vese vashandi vekambani. Izvi zvinogona kuve kuwana email, EDMS, corporate portal, nezvimwe. Mvumo idzi dzinogona kuverengerwa muchikamu chimwe chete chinodaidzwa kuti "mushandi", uye hapazove nechikonzero chekunyora kodzero dzese dzakakosha kakawanda mune rimwe nerimwe redanho repamusoro. Zvakakwana kungoratidza hunhu hwenhaka yebasa re "mushandi".

Gare gare, chiyero chakawedzerwa nehutsva hwekuwana hunhu hune hukama nekugara kuchichinja nharaunda. Iko kugona kuunza static uye dynamic kurambidzwa kwakawedzerwa. Static izvo zvinoreva kusagoneka kwekubatanidza mabasa (iyo yakafanana yekuisa uye kutonga kwemaitiro ataurwa pamusoro). Zvirambidzo zveDynamic zvinogona kutsanangurwa nekuchinja ma paramita, semuenzaniso, nguva (yekushanda / isiri-yekushanda maawa kana mazuva), nzvimbo (hofisi / imba), nezvimwe.

Zvakasiyana, zvinofanira kutaurwa nezvazvo attribute-based access control (ABAC - Attribute-based access control). Iyo nzira yakavakirwa pakupa mukana uchishandisa hunhu hwekugovana mitemo. Iyi modhi inogona kushandiswa yakaparadzana, asi kazhinji inoshingairira iyo yemhando yemhando yepamusoro: hunhu hwevashandisi, zviwanikwa uye zvishandiso, pamwe nenguva kana nzvimbo, zvinogona kuwedzerwa kune rimwe basa. Izvi zvinokutendera kuti ushandise mashoma mabasa, suma zvimwe zvirambidzo uye kuita kuti kupinda kuve kushoma sezvinobvira, uye nekudaro kunatsiridza kuchengetedzeka.

Semuenzaniso, accountant anogona kubvumidzwa kuwana maakaundi kana akashanda mune imwe dunhu. Ipapo nzvimbo yenyanzvi ichafananidzwa neimwe kukosha kwereferensi. Kana kuti iwe unogona kupa mukana kumaakaundi chete kana mushandisi apinda kubva kune mudziyo unosanganisirwa pane rondedzero yevanotenderwa. Kuwedzera kwakanaka kune muenzaniso, asi isingawanzo shandiswa pachayo nekuda kwekudiwa kwekugadzira mitemo yakawanda uye matafura emvumo kana zvirambidzo.

Rega ndikupe muenzaniso wekushandisa ABAC kubva ku "hupenyu hwekare". Bhengi redu raive nemapazi akati wandei. Vashandi vemahofisi evatengi mumapazi aya vakaita mashandiro akafanana, asi vaifanira kushanda muhurongwa uhwu chete nemaakaundi munharaunda yavo. Chekutanga, takatanga kugadzira mabasa akaparadzana edunhu rega rega - uye pakanga paine akawanda mabasa akadaro ane kudzokorora kushanda, asi nekuwana maakaundi akasiyana! Zvino, nekushandisa hunhu hwenzvimbo kumushandisi uye nekuisanganisa neakaundi akasiyana eakaundi kuti aongorore, isu takadzikisa zvakanyanya huwandu hwemabasa muhurongwa. Nekuda kweizvozvo, mabasa akasara ebazi rimwe chete, iro rakadzokororwa kune zvigaro zvinoenderana mune mamwe matunhu ese ebhangi.

Iye zvino ngatitaurire pamusoro pematanho anodiwa ekugadzirira, pasina izvo zvisingagoneki kuvaka muenzaniso wekushanda.

Danho 1. Gadzira muenzaniso wekushanda

Iwe unofanirwa kutanga nekugadzira inoshanda modhi - gwaro repamusoro-soro rinotsanangura zvakadzama mashandiro edhipatimendi rega rega uye chinzvimbo chega chega. Sezvo mutemo, ruzivo runopinda mairi kubva kumagwaro akasiyana-siyana: tsanangudzo yebasa uye mitemo yezvikamu zvega - madhipatimendi, zvikamu, madhipatimendi. Iyo inoshanda modhi inofanirwa kubvumirana nemadhipatimendi ese anofarira (bhizinesi, kutonga kwemukati, chengetedzo) uye kubvumidzwa nemanejimendi ekambani. Gwaro iri nderechii? Kuitira kuti mutevedzeri agone kuzvireva. Semuenzaniso, iwe uchavaka muenzaniso unoenderana nekodzero dziripo dzevashandi - kuburitswa kubva kuhurongwa uye "kuderedzwa kusvika kune yakafanana denominator". Zvadaro, pakubvumirana pamusoro pemabasa akagamuchirwa nemuridzi webhizimisi wegadziriro, unogona kutarisa kune imwe nzvimbo mumuenzaniso wekushanda, pamusana pekuti iyi kana iyo kodzero inobatanidzwa mubasa racho.

Nhanho 2. Isu tinoongorora masisitimu eIT uye togadzira chirongwa chekuisa pamberi

Pachikamu chechipiri, iwe unofanirwa kuitisa ongororo yeIT masisitimu kuti unzwisise kuti kuwana kwavari kwakarongwa sei. Semuenzaniso, kambani yangu yezvemari yakashanda mazana ehurongwa hwemashoko. Masisitimu ese aive nerumwe rudaviro rwekuita-based manejimendi, mazhinji aive nemamwe mabasa, asi zvakanyanya pabepa kana mudhairekitori rehurongwa - akange ave echinyakare, uye kuwana kwairi kwaipihwa zvichibva pane izvo chaizvo zvikumbiro zvemushandisi. Sezvingatarisirwa, hazvigoneke kuvaka muenzaniso mumazana akati wandei kamwechete; iwe unofanirwa kutanga pane imwe nzvimbo. Isu takaita ongororo yakadzama yemaitiro ekutonga kwekuwana kuti tione chiyero chekukura kwayo. Munguva yekuongorora, maitiro ekuisa ekutanga masisitimu eruzivo akagadzirwa - kutsoropodza, kugadzirira, zvirongwa zvekubvisa, nezvimwe. Nerubatsiro rwavo, takaisa mutsetse kusimudzira / kuvandudzwa kwevatevedzeri veaya masisitimu. Uye takabva tabatanidza mienzaniso muchirongwa chekubatanidzwa neIdentity Management mhinduro kuti iite otomatiki kutonga kwekuwana.

Saka unoona sei kukosha kwehurongwa? Zvipindure wega mibvunzo inotevera:

• Iyo sisitimu yakabatana nemaitiro ekushanda ayo epakati mabasa ekambani anotsamira paari?
• Ko kukanganisa kwehurongwa kuchakanganisa kuvimbika kwemidziyo yekambani?
• Ndeipi yakanyanya kubvumidzwa nguva yekudzika kweiyo system, inosvika pazvisingabviri kudzoreredza chiitiko mushure mekuvhiringidzwa?
• Kutyorwa kwekuvimbika kweruzivo muhurongwa kungatungamira kumhedzisiro isingadzoreki, zvese zvemari uye mukurumbira?
• Kutsoropodza kubiridzira. Kuvapo kwekushanda, kana kusina kudzorwa zvakanaka, kunogona kutungamirira kune zviito zvehunyengeri zvemukati / kunze;
• Ndezvipi zvinodiwa nemutemo uye mitemo yemukati uye maitiro ezvirongwa izvi? Pachave nefaindi kubva kune vanodzora kana vasina kutevedzera?

Mukambani yedu yezvemari, takaita ongororo yakadai. Management yakagadzira nzira yeAccess Rights Ongororo yekuongorora kuti vatarise vashandisi varipo nekodzero kutanga mune iwo masisitimu eruzivo aive padanho repamusoro pekutanga. Bazi rinoona nezvekuchengetedzwa kwenyika rakapihwa semuridzi wechirongwa ichi. Asi kuti uwane mufananidzo wakazara wekodzero dzekuwana mukambani, zvaive zvakafanira kusanganisa IT nemadhipatimendi ebhizinesi mukuita. Uye pano kukakavara, kusanzwisisana, uye dzimwe nguva kunyange kuparadza kwakatanga: hapana anoda kusiya mabasa avo emazuva ano uye kubatanidzwa mune zvimwe, pakutanga, zvisinganzwisisike zviitiko.

NB Makambani mahombe ane maitiro eIT akagadziridzwa anogona kunge achijairana neiyo IT yekuongorora maitiro - IT general controls (ITGC), iyo inokutendera kuti uone zvikanganiso muIT maitiro uye kumisikidza kutonga kuitira kuti uvandudze maitiro zvinoenderana neakanakisa maitiro (ITIL, COBIT, IT. Utongi nezvimwe.) Ongororo yakadai inobvumira IT nebhizinesi kunzwisisa zviri nani uye kugadzira nzira yekuvandudza yakabatana, kuongorora njodzi, kugadzirisa mitengo, uye kugadzira nzira dzinoshanda dzekushanda.



Imwe yenzvimbo dzekuongorora ndeyekuona maparameter ekunzwisisa uye kwemuviri kuwana kune ruzivo masisitimu. Takatora data yakawanikwa sechikonzero chekuwedzera kushandiswa mukuvaka muenzaniso wekutevedzera. Nekuda kwekuongorora uku, takave nerejista yeIT masisitimu, umo maparamita avo ehunyanzvi akatemerwa uye tsananguro dzakapihwa. Uye zvakare, kune yega yega sisitimu, muridzi akaonekwa kubva kune bhizinesi gwara mune izvo zvayaifarira yaishandiswa: ndiye aive nebasa remabhizinesi maitiro ayo iyi system yakashanda. Maneja webasa reIT akagadzwa zvakare, ane mutoro wekuita tekinoroji yezvinodiwa zvebhizinesi kune chaiyo IS. Masisitimu akaomesesa ekambani nemaitiro avo ehunyanzvi, mazwi ekutumwa nekubvisa, nezvimwewo zvakanyorwa.Izvi zvimiro zvakabatsira zvakanyanya mukugadzirira kugadzirwa kwemuenzaniso.

Danho 3 Gadzira nzira

Chinokosha chekubudirira kwebhizimisi chero ripi zvaro ndiyo nzira yakarurama. Naizvozvo, kuvaka muenzaniso uye kuita ongororo, isu tinofanirwa kugadzira nzira yatinotsanangura kudyidzana pakati pemadhipatimendi, kumisa mutoro mumirau yekambani, nezvimwe.
Kutanga iwe unofanirwa kuongorora ese aripo magwaro anosimbisa nzira yekupa kuwana uye kodzero. Nenzira yakanaka, maitiro anofanirwa kunyorwa pamatanho akati wandei:

• general corporate zvinodiwa;
• zvinodiwa zvenzvimbo dzekuchengetedza ruzivo (zvichienderana nenzvimbo dzemabasa esangano);
• zvinodiwa zvetekinoroji maitiro (mirayiridzo, kuwana matrices, nhungamiro, zvinodikanwa zvekugadzirisa).

Mukambani yedu yezvemari, takawana akawanda magwaro echinyakare; taifanira kuuya nawo zvinoenderana nemaitiro matsva ari kuitwa.

Nekurongeka kwekutungamira, boka rekushanda rakagadzirwa, iro raisanganisira vamiriri kubva kuchengetedzo, IT, bhizinesi uye kutonga kwemukati. Kurongeka kwakaratidza zvinangwa zvekugadzira boka, gwara rekuita, nguva yekuvapo uye avo vane mutoro kubva kudivi rega rega. Uye zvakare, isu takagadzira nzira yekuongorora uye maitiro ekugadzira muenzaniso wekuyemurika: ivo vakabvumirana nevamiriri vese vane mutoro wenzvimbo uye vakatenderwa nevatungamiriri vekambani.

Zvinyorwa zvinotsanangura maitiro ekuita basa, mazuva ekupedzisira, mabasa, nezvimwe. - vimbiso yekuti munzira inoenda kune chinangwa chinodiwa, icho pakutanga chisingaoneki kune wese munhu, hapana achave nemibvunzo "sei tichiita izvi, nei tichizvida, nezvimwe." uye hapazovi nemukana we "kusvetuka kubva" kana kunonoka kuita.

Nhanho 4. Gadzirisa maparameter eiyo iripo yekuwana control model

Isu tiri kugadzira inonzi "system passport" maererano nekutonga kwekuwana. Muchidimbu, iyi igwaro remibvunzo pane yakatarwa ruzivo system, iyo inorekodha ese algorithms ekudzora kuwana kwairi. Makambani akatoita IdM-kirasi mhinduro angangove akajairana nemibvunzo yakadai, sezvo ndipo panotangira kudzidza kwemasystem.

Mamwe ma paramita nezve sisitimu uye varidzi akayerera mugwaro remibvunzo kubva kuIT registry (ona nhanho 2, odhita), asi matsva akawedzerwa:

• maitirwo emaakaundi (zvakananga mudura re database kana kuburikidza nesoftware interfaces);
• kuti vashandisi vanopinda sei muhurongwa (vachishandisa imwe account kana kushandisa AD account, LDAP, nezvimwewo);
• ndeapi mazinga ekuwana iyo sisitimu anoshandiswa (chishandiso nhanho, nhanho yehurongwa, kushandiswa kwehurongwa hwe network faira zviwanikwa);
• tsananguro uye maparameter emaseva ayo anomhanyisa system;
• ndeapi maitirwo eakaunti manejimendi anotsigirwa (kuvharira, kutumidza zita, nezvimwewo);
• ndeapi algorithms kana mitemo inoshandiswa kugadzira iyo system user identifier;
• hunhu hupi hunogona kushandiswa kumisikidza kubatana nerekodhi yevashandi muhurongwa hwevashandi (zita rizere, nhamba yevashandi, nezvimwewo);
• zvese zvinogoneka account hunhu uye mitemo yekuzvizadza kunze;
• Ndedzipi kodzero dzekuwana dziripo muhurongwa (mabasa, mapoka, kodzero dzeatomu, nezvimwewo, pane kodzero dzakaiswa kana kuti dzevakuru);
• nzira dzekugovera kodzero dzekuwana (nechinzvimbo, dhipatimendi, kushanda, nezvimwewo);
• Ko iyo hurongwa ine mitemo yekuparadzaniswa kwekodzero (SOD - Segregation of Duties), uye inoshanda sei;
• sei zviitiko zvekusavapo, kutamiswa, kudzingwa, kuvandudza data revashandi, nezvimwe zvinogadziriswa muhurongwa.

Rondedzero iyi inogona kuenderera mberi, ichitsanangura akasiyana ma paramita uye zvimwe zvinhu zvinosanganisirwa mukuita kutonga kwekuwana.

Nhanho 5. Gadzira tsananguro yakanangana nebhizinesi yemvumo

Chimwe chinyorwa chatinozoda pakuvaka muenzaniso ibhuku rekutaura pamusoro pemasimba ese anogona (kodzero) anogona kupihwa kune vashandisi mune yeruzivo system ine tsananguro yakadzama yebasa rebhizinesi rinomira kumashure kwayo. Kazhinji, zviremera muhurongwa zvakavharidzirwa nemamwe mazita ane mavara nenhamba, uye vashandi vebhizinesi havagone kuziva kuti chii chiri shure kwezviratidzo izvi. Zvadaro vanoenda kubasa reIT, uye ikoko ... ivowo havagoni kupindura mubvunzo, somuenzaniso, pamusoro pekodzero dzisingawanzoshandiswa. Ipapo kumwe kuongorora kunofanira kuitwa.

Zvakanaka kana patova nerondedzero yebhizinesi kana kunyangwe paine musanganiswa wekodzero idzi mumapoka nemabasa. Kune mamwe maapplication, yakanakisa maitiro ndeyekugadzira chirevo chakadaro padanho rekusimudzira. Asi izvi hazviitike kazhinji, saka tinoenda zvakare kudhipatimendi reIT kuti titore ruzivo nezve kodzero dzese dzinogoneka uye nekudzitsanangura. Gwaro redu rinozopedzisira riine zvinotevera:

• zita rechiremera, kusanganisira chinhu chinoshandiswa nekodzero yekuwana;
• chiito chinobvumirwa kuitwa nechinhu (kuona, kuchinja, nezvimwewo, mukana wekudziviswa, semuenzaniso, nenharaunda kana neboka revatengi);
• mvumo kodhi (kodhi uye zita reiyo system basa / chikumbiro chinogona kuitwa uchishandisa mvumo);
• tsananguro yechiremera (tsanangudzo yakadzama yezviito muIS kana uchishandisa chiremera nemhedzisiro yavo pakuita;
• Mvumo mamiriro: "Inoshanda" (kana mvumo yakapihwa kune angangoita mushandisi mumwechete) kana "Isiri kushanda" (kana mvumo isingashandiswe).

Nhanho 6 Isu tinodhawunirodha data nezve vashandisi uye kodzero kubva kumasisitimu uye tozvienzanisa neyevashandi sosi

Padanho rekupedzisira rekugadzirira, iwe unofanirwa kudhawunirodha data kubva kune ruzivo masisitimu nezve vese vashandisi uye kodzero dzavanadzo parizvino. Pane zviviri zvinogoneka pano. Chekutanga: dhipatimendi rekuchengetedza rine mukana wakananga kune sisitimu uye ine nzira yekurodha mishumo yakakodzera, izvo zvisingawanzo kuitika, asi zviri nyore kwazvo. Chechipiri: tinotumira chikumbiro kuIT kuti tigamuchire mishumo mune inodiwa fomati. Chiitiko chinoratidza kuti hazvigoneke kusvika pakubvumirana neIT uye kuwana data rinodiwa kekutanga. Izvo zvinodikanwa kuita nzira dzinoverengeka kudzamara ruzivo rwagamuchirwa mune inodiwa fomu uye fomati.

Ndeipi data inoda kudhawunirodwa:

• Zita reakaundi
• Zita rakazara remushandi warinopihwa
• Chimiro (chinoshanda kana chakavharwa)
• Zuva rekugadzira account
• Zuva rekupedzisira kushandiswa
• Rondedzero yekodzero/mapoka/mabasa aripo

Saka, takagamuchira kudhawunirodha kubva kuhurongwa nevashandisi vese uye nekodzero dzese dzavakapihwa. Uye ivo vanobva vangoisa parutivi ese akavharika maakaundi, sezvo basa rekuvaka remuenzaniso richaitwa chete kune vanoshanda nesimba.

Zvino, kana kambani yako isina otomatiki nzira dzekuvharisa kupinda kwevashandi vakadzingwa (izvi zvinowanzoitika) kana ine patchwork otomatiki isingashande nemazvo nguva dzose, unofanirwa kuziva yese "mweya yakafa." Tiri kutaura nezveakaunti yevashandi vakatodzingwa, avo kodzero dzechimwe chikonzero dzisina kuvharwa - dzinoda kuvharwa. Kuti tiite izvi, tinofananidza iyo data yakakwidzwa neyevashandi sosi. Kuburutswa kwevashandi kunofanirwawo kuwanikwa pachine nguva kubva kubazi rinochengeta dhatabhesi revashandi.

Kusiyana, zvakakosha kuisa parutivi maakaunti avo varidzi vasina kuwanikwa mudura revashandi, vasina kupihwa chero munhu - kureva, asina muridzi. Tichishandisa runyorwa urwu, isu tichada zuva rekupedzisira kushandiswa: kana ichangoburwa, tichazofanira kutsvaga varidzi. Izvi zvinogona kusanganisira maakaundi evekunze makondirakiti kana masevhisi maakaundi asina kupihwa chero munhu, asi ane chekuita nechero maitiro. Kuti uzive kuti maakaundi ndeaani, unogona kutumira tsamba kumadhipatimendi ese uchivakumbira kuti vapindure. Kana varidzi vawanikwa, tinoisa data pamusoro pavo muhurongwa: nenzira iyi, maakaunti ese anoshanda anoonekwa, uye mamwe akavharwa.

Pakangoburitswa marekodhi asina basa uye maakaundi anoshanda chete asara, tinogona kutanga kuvaka muenzaniso weimwe nzira yeruzivo. Asi ndichakuudza pamusoro paikoku munyaya inotevera.

Munyori: Lyudmila Sevastyanova, maneja wekusimudzira Solar inRights

Source: www.habr.com