Web信息系统中基于树型结构的RBAC模型设计与实现

DESIGN AND IMPLEMENTATION OF RBAC MODEL BASED ON TREE-STRUCTURE IN WEB MIS

介绍基于角色的安全访问控制(RBAC)基本模型,并根据所开发项目特点,在应用RBAC技术的基础上研究了基于树型结构下的B/S系统中权限控制方法。通过构建系统资源树,不仅实现了系统全局资源的安全访问控制、增加了系统的灵活性,而且简化了用户的权限分配操作。最后阐述该模型的具体实现。

Fundamental model of role-based access control（RBAC） is introduced, based ~n the RBAC technology application, in this paper we studied the method of user access control adopting the tree-structure in B/S system based on the characters of the project being developed. By constructing system resource tree, the secure access control of system＇s global resource is realised together with the improvement in system flexibility, and the distribution operation of user privilege is simplified as well. At last the concrete implementation of the model is addressed.