管道完整性管理系统的权限控制设计

Design of PIS access control

管道完整性管理系统(Pipeline Integrity Management System,PIS)作为油气管道行业的企业级管理信息系统,承担着保障油气管道安全平稳运行的重要任务。以PIS实际业务的应用情况为出发点,总结、分析其需求特点,结合基于角色的访问控制模型(Role-based Access Control,RBAC)基本思想,提出了一种适用于管道完整性管理系统的权限控制方法。通过权限逻辑配合业务逻辑、粗细粒度相结合的原则,实现了PIS中各种层级的权限控制。研究表明:该设计方法方便灵活、简单实用且扩展性强。通过PIS的验证发现,该权限控制方法能够较好地满足基于B/S架构的具有复杂业务功能的企业级管理信息系统对权限控制的要求。

As an enterprise-level management information system in oil and gas pipeline industry, pipeline integrity management system （PIS） plays an important role in guaranteeing safe and stable operation of oil and gas pipelines. In this paper, the demand characteristics were analyzed and summarized based on the application of PIS in actual business. And combined with the basic idea of RBAC, an access control method which is suitable for PIS was put forward. Various levels of access control in PIS were realized by coordinating access logic with business logic and combining coarse granularity with fine granularity. Studies show that this method is convenient and flexible, simple and practical, and has strong extensionality. After this method is applied in PIS, it is demonstrated that it can meet the access control requirements of enterprise-level management information system with complex business functions based on B/S framework.