Abstract: Proposed in this paper is a new algorithm of access control labeling on an XML document based on the authorization tree The algorithm improves the performance effectively through avoiding matching authorizations, solving the authorization conflict and labeling at every node of the XML tree Meanwhile, a flexible and user configurable mode of solving the authorization conflict is proposed And the mode is integrated into the authorization tree algorithm seamlessly