A role based access control(RBAC) mechnism compliant REST principal, and support entrance control also.