<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>授权模型 on 知识铺的博客</title>
    <link>https://index.zshipu.com/geek001/tags/%E6%8E%88%E6%9D%83%E6%A8%A1%E5%9E%8B/</link>
    <description>Recent content in 授权模型 on 知识铺的博客</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>zh-CN</language>
    <lastBuildDate>Wed, 02 Sep 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://index.zshipu.com/geek001/tags/%E6%8E%88%E6%9D%83%E6%A8%A1%E5%9E%8B/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>AI代理权限失控后：RBAC角色爆炸逼你转向ABAC</title>
      <link>https://index.zshipu.com/geek001/post/20260902/AI%E4%BB%A3%E7%90%86%E6%9D%83%E9%99%90%E5%A4%B1%E6%8E%A7%E5%90%8ERBAC%E8%A7%92%E8%89%B2%E7%88%86%E7%82%B8%E9%80%BC%E4%BD%A0%E8%BD%AC%E5%90%91ABAC/</link>
      <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
      <guid>https://index.zshipu.com/geek001/post/20260902/AI%E4%BB%A3%E7%90%86%E6%9D%83%E9%99%90%E5%A4%B1%E6%8E%A7%E5%90%8ERBAC%E8%A7%92%E8%89%B2%E7%88%86%E7%82%B8%E9%80%BC%E4%BD%A0%E8%BD%AC%E5%90%91ABAC/</guid>
      <description>AI代理项目第一次出现“这件事代理不该做到”时，团队通常的做法是把support_engineer拆成tier1和tier2。几次迭代后角色膨胀到四十个且互相重叠，没人能说清每个角色的含义。这正是RBAC该转向ABAC的节点，但多数团队会把它当成带属性的RBAC继续堆叠。 角色爆炸</description>
    </item>
  </channel>
</rss>
