基于命令模式的权限控制的设计与实现

THE DESIGN AND IMPLEMENTATION OF ACCESS CONTROL BASED COMMAND-MODEL

针对Web系统的特点及其对用户访问控制的特殊要求,笔者在RBAC（基于角色的访问控制）模型的基础上引入了命令模式,设计并实现了分级的、细粒度的权限管理子系统.基于设计模式中的命令模式,利用方法调用与方法执行分离的原则和采用集中调度控制所有方法执行的方式,设计出一种灵活的权限控制管理.实践证明此方案不仅可以满足大中型Web系统对权限管理的需求,而且能随组织结构或安全需求的变化而变化,具有很好的灵活性和可操作性.

Considering the characteristics of Web systems and access control for users special requirements, and introducing the command mode based on RBAC （Role Based Access Control） model based on the introduction of the command mode, design and implement a hierarchical, fine -grained access management subsystem . Based on design patterns in the command mode, method invocation and method execution using the principle of separation and centralized scheduling control method of execution, a flexible access control management is designed. This proven program not only meeting the mediumsized Web system requirements for rights management, but also changing with the organizational structure or security requirements change, has good flexibility and maneuverability.