Web应用系统的授权管理机制

Authorization Mechanism of WEB Application System

Web应用系统授权管理机制将访问控制过程分为访问权限与角色相关联和角色与用户相关联2部分,实现用户与访问权限的逻辑分离。通过运行身份验证和Web应用系统间的授权定义和授权执行模块,设计出WEB应用系统的授权机制模型,并运用.NET开发该授权定义和执行模块,为实现Web应用系统的权限管理提供技术支持。

Access Control Process was divided into permission-role association and role-user association in authorization management mechanism of WEB application system. Logic separation of user and permission was realized. The authorization mechanism model of WEB application system was designed by running authorization definition module and authorization execution module between authentication and WEB application system. The authorization definition module and authorization execution module have been developed by using .NET development tool, for realizing authorization management of WEB applicafion system to provide the technioue supported.