摘要
针对传统基于角色的访问控制(RBAC)实现方法在企业应用中存在的不足,将面向切面(AOP)的设计思想引入到RBAC系统的设计中,通过将系统的权限验证模块封装成单独的模块,与核心业务模块解耦合,在调用核心业务模块时借助动态AOP框架将权限验证模块在运行时动态地织入,从而实现一种通用的、可维护的、易扩展的权限验证系统。
In order to improve the application of role-Based access control in enterprises, an aspect-oriented programming design concept to RBAC system is introduced in this paper. By uncoupling the system authorization module from core business modules to an encapsulation, and dynamically embedding the authorization module under AOP framework when core business modules are called, we realize a universal, maintainable and extendable authorization system.
出处
《计算机安全》
2009年第5期43-45,共3页
Network & Computer Security
