基于Struts框架的访问控制策略

Access Control Strategy Based on Struts Framework

阐述了基于Struts结构的RBAC权限管理框架,分别在浏览器、web容器和数据库层采用协同的安全策略。在容器层实现了系统安全性和程序业务逻辑的彻底分离,有效的解决系统功能扩展时的安全问题。结果表明可以应对系统在开发、引用和升级过程中出现的各种变化,有效降低了系统运行期安全性维护的难度。

In this article it states the structure of RBAC Struts permissions management framework, in the browser,web containers ,database layer by layer and the security policy coordination. In containers layer achieved the complete separation between security system and procedures of business logic, the settlement system function effectively expand security issues. The results show that the system can cope with the development, use and promotion process and the various changes to reduce the difficulty of maintaining security in the system running period.