学分制系统中授权管理的设计与实现

Design and Implementation of Authorization Management for Credit System

针对学分制管理系统用户级别多、控制复杂、难管理等问题,设计并实现了一种授权管理子系统.该系统基于RBAC思想进行设计,能有效防止权限滥用和越权访问,实现了职责分离和权限最小化原则,降低了授权管理的复杂性,是解决网络信息系统授权管理的一种有效方案.

Aiming at the problems of complexity and difficulty of access control,an authorization management sub-system for credit system,referred to as CSAM,is presented.The proposed method can prevent from abusing privileges and exceeding authority accesses.Further more,the principles of separation of duty and the minimum privilege are realized.So,it provides a good solution to management information systems.