摘要
文中从目前Web应用系统的变化趋势及其面临的安全问题出发,提出一种基于RBAC模型的访问控制方案。该方案以.NET环境为平台,以角色为中介,把用户和Web资源联系起来。在为Web资源分配角色的同时给用户分配角色,这样具有一定角色的用户就可以访问到该角色所许可的资源,从而实现了基于角色的访问控制。该方案简化了访问控制的操作,具有较大的灵活性,使系统的安全性得到提高。最后,给出了结论并指出需进一步研究的问题和改进方法。
According to the ever- changing trend of Web application systems and the ,security problems they face, provides a RBAC- based access control implementation for Web applications. With roles sitting in the middle of users and Web resources, users and Web resources are both allocated to different roles by using . NET platform, so a user with certain roles can access resources with the same ones. This kind of flexible implementation simplifies the operation of access control and promotes the system security. At the end of this paper, conclusion and improvements are given.
出处
《计算机技术与发展》
2006年第4期218-220,共3页
Computer Technology and Development
