The management of permission in the Role-Based Access Control(RBAC) 2001 model is studied in this paper.Aiming at problems of this model,the conception of object_group is introduced into the traditional model of permission,and the model of permission base