RBAC模型在权限控制中的研究与实现

Research and Implementation of RBAC Model in the Privilege Control

学术界对于权限管理已经做了大量的研究工作并提出了许多种模型,其中基于角色的访问控制(RBAC)模型是近来广泛流行的模型之一,现在已经比较成熟.本文介绍了RBAC模型,分析了当前比较流行的Acegi框架.依据RBAC模型理论,采用AOP思想,利用基于Spring的Ace-gi安全系统,设计了一套权限控制方案,从而简化了系统中的认证和授权管理.

A considerable researches have been carried on privilege management and various models have been propose, among which the role-based access control （RBAC） is the most prevalent one and it has become mature. RBAC modal is introduced, and today＇s popular acegi framework is analyzed in this paper. An integrated privilege control method is designed, using AOP thinking and acegi security system based on Spring, so that authentication and authorization management are simplified.