用户权限控制在SSMBSS中的设计与实现

Design and Implementation of User Access Control in SSMBSS

在Web开发中，权限往往是一个极其复杂的问题，针对不同的应用，需要根据项目的实际情况和具体架构，在维护性、灵活性、完整性等多个方面比较、权衡。本文简要介绍了在Struts和Hibernate框架下基于角色的权限管理（KBAC）思想．提出了自定义标签和Struts标签相结合的方式，提高了系统的灵活性和安全性，达到MVC很好的分离。

In Web developing, access control is a more comprehensive problem, you should measure in agility, integrality ,maintenance and so on, according to different applications using framework and project conditions in practice. The text introduce Role Based Access Control （Pd3AC） in Struts and Hibernate framework briefly, mentioned the way of associate with user-defined tags and Struts tags, so as to increase the system agility security and separate the MVC mode.