rbac 移植

Signed-off-by: michaelzx <mail@zhangxiao.org>
Merge pull request #1 from michaelzx/rbac

rbac 移植