Abstract: A role-based access control model is analyzed and the related concepts are defined. The implemented model and algorithms are presented. A new feasible security solution is provided for the problems existing in the authentication and authorization on web application. As a result, a web security management system is implemented by using the role-based access control model. The system has sound, stable and valid performances of application in real environments.