Abstract: This paper introduces the fine-grained task and role-based access control model (FGTRBAC) according to the weaknesses of the current role-based access control in Web application.The practice shows that the model can control to access the pages, the operations and the items in pages in Web application and use workflow and task method to implement the constraint of time relationship.