角色-用户-权限控制设计与实现

Design and implementation of role-users-access control

重点阐述在基于.NET开发的客户关系管理CRM示例系统中设计并实施的一套高透明度、细粒度的角色-用户-权限控制方案。该方案不依赖于具体的实施平台,也不会对架构产生限制。使用XML文件记录角色与页面的映射关系,需要权限控制的页面主动请求检查器验证用户的角色。展示该方案的实施方法,并提出扩展方法及需要注意的问题。

This paper focuses on the design and implementation of a high degree of transparency,fine-grained role-usersaccess control scheme in a NET based on sample CRM system.This scheme doesn＇t depend on specific implementation platform,it won＇t have restrictions on the structure.Using XML document records the mapping relationship of roles and pages,the page needing access control initiatively requests page checker to verify the user＇s role.The paper shows the implementation method of the scheme, the expansion method and the issue needed to be pay attention to are proposed.