基于基本RBAC模型的权限管理框架的设计与实现

Design and Implementation of Privilege Management Framework Based on Core RBAC Model

基于角色的访问控制(RBAC,Role Based Access Control)最直观的描述就是权限被授予角色,角色被授予用户,权限是访问资源的唯一凭证,用户与权限没有直接关联。将采用基本RBAC模型以及JavaEE(Java Platform,Enterprise Edition,Java企业级应用)的一些主流选型,设计并实现由用户登录模块、各种管理操作模块组成的具有用户管理、角色管理以及权限管理功能的框架结构。

The most intuitive description of RBAC is that permissions are granted to roles,and roles are granted to users.The permissions are the only credits to access resources,but users can＇t directly associate with permissions.With core RBAC and some mainstream selections in JavaEE,design and implement the privilege management framework which consists of user login modules and a variety of management operations modules that can manage users,roles and privileges.