论文部分内容阅读
将基于角色的访问控制RBAC模型应用到Web系统中,对所有原子按钮、链接、操作请求进行统一编号命名,每个条目标记为一个原子权限,通过控制对角色原子权限的分配达到用户对系统资源的细粒度访问控制,表现为根据合法用户角色动态生成权限菜单进行系统资源访问。应用Struts过滤功能,将用户的页面请求同用户的角色权限信息进行比对来实施权限审查,提高系统安全性。实践证明,本系统权限管理设计合理、角色配置灵活便捷,具有应用价值。
The RBAC model based on role-based access control is applied to the Web system. All atomic buttons, links and operation requests are numbered in a unified way. Each entry is marked as an atomic authority. By controlling the allocation of atomic authority to a user, The fine-grained access control, manifested in accordance with the role of legitimate users dynamically generate permissions menu for system resource access. Apply Struts filtering, the user’s page request with the user’s role permissions information to compare the permissions to review, improve system security. Practice has proved that the system design authority management authority, flexible and convenient role configuration, with application value.