Abstract: In multi-domain autonomous collaborative environment，the resource providers of database have the ultimate authority over their resources to decide how to access their database resource and what granularity is，and the security administrators of domain user located manage user roles.Apparently，directly mapping user role to permission of other autonomous domains is not reasonable in multi-domain collaborative environment.In this paper，four lay RBAC（4-RBAC） model and its implement for database access is proposed in multi-domain autonomous collaborative environment.Mapping resource role to permission and defining resource role are done by the resource provider in the domain resource located.Then domain user located has to negotiate with domain resource located to map user role to resource role.The scheme in this paper is simple and reasonable.It is separation of duty and guarantee for database’s security.