基于Java EE的权限控制模型的分析和设计

The Analysis and Design of the Java EE-based Access Control Model

权限控制是信息系统中控制安全性的重要组成部分.在基于Java EE架构的分层体系结构的企业应用中,使用AOP(面向切面)的思想将安全控制代码和业务代码进行解耦合,从而实现了一种可扩展、易维护的权限控制模型.

Access control is an important part in the security of the information system. In the Java EE-based hierar- chical entrepreneurial application, through AOP the coupling and decoupling of the access control code could realize an ac- cess control model which is more extensible and easier to maintain.