适用于WEB信息系统的访问控制模型RBACWIS

A New Model of Access Control for WEB Information System—RBACWIS

在对基于角色访问控制模型RBAC研究的基础上,针对WEB信息系统的特点提出1种全新的访问控制模型——RBACWIS。RBACWIS模型将访问控制从WEB信息系统的视图层和业务逻辑层中分离出来,实现访问控制的集中管理。彻底地解决了传统WEB信息系统中视图层和业务逻辑层中夹杂大量访问控制代码,使视图层更新困难和访问控制代码分散难以管理维护等问题。

In the paper,a new kind of access control modelRBACWIS(Role Based Access Control for Web Information System) is proposed,concentrating on the characters of web Information System.In the system,it uses the centralized access control module,so it separates the access control management from the view layer to the business layer.It solves the problems about the traditional web information system such as access control codes mixed in the view layer,which will lead to the difficulties of updating view layer and m...