石油化工信息系统Web权限管理的研究

Web Access Control on Petrochemical Information Service System

对Web权限控制进行了研究分析和应用。首先分析了进行权限控制的必要性 ;介绍了进行权限控制的几种实现形式 ,包括利用WebServer本身权限管理工具 ,通过在ASP/PHP页面中嵌入权限认证代码 ,或是将二者结合 ;最后 ,基于Apache服务器开发了图形化的权限管理系统 ,并已将它应用在Internet石化信息服务系统中。该软件可以方便地完成增删改用户 /组 ,为用户 /组设定权限 ,限制某些IP对本系统的访问等功能 ;并可以方便地移植到其他类似系统中。

Web Access Control is analyzed and applied to information service system in this article. First, the need of Access Control is discussed. Second, a few of implementation methods are introduced . Web servers have access control functions by itself. In addition, we may insert some codes in ASP/PHP page to check access rights. CGI/ISAPI may use either or both of the above methods. As to Internet Petrochemical Information Service System, we design and complete a software to finish this job. It has a series of functions such as add, delete, edit users/groups' information, grant or revoke access to users/groups, allow or deny some IPs to access the information system, etc. It can also be applied to other similar information systems conveniently.