基于Ajax的通用Web系统权限管理的设计与实现

Design and implementation of general Web system authority management based on AJAX

在Web系统开发中,针对不同的业务功能及复杂权限的设置,需要重新编写权限控制代码,造成重复设计、开发的问题.基于RBAC模型,提出了采用Ajax技术实现一种通用的权限管理模块,使用此模块,无需编制代码,只需根据不同的系统需求由管理员设置相关的角色、用户和权限即可.该方案实现了权限控制和业务的分离,可以很方便地在其他Web系统中使用.

For security reason,different authority codes must be programmed for different business functions and authority setting in the development of different Web systems,which results in repeated designing and coding.For this reason,a general authority control module is designed using asynchronous javascript and XML technology based on RBAC.It is easy to use this module to manage authority by setting the related role,user and authority in different Web systems without any coding.The module realizes the separation of access control with business and can easily be reused in other Web systems.