摘要
针对在大型企业应用系统中权限控制由于通过存取控制列表(ACL)机制实现而导致用户操作权限维护复杂的问题,设计了一个权限管理系统.以角色存取控制(RBAC)机制为基础,以服务科学、管理与工程(SSME)理论做指导,采用J2EE领域Struts2-Guice-JPA集成框架实现权限管理系统设计及功能模块.系统测试与应用效果表明:该权限管理系统较好地实现以角色为基础完成权限控制,大幅度降低了维护成本.
In large enterprise application systems,access control is often achieved by access control list （ACL） mechanism,causing user operation authority maintenance complex. Aiming at this problem, an authority management system is designed. Under the guide of SSME （Service Science, Management and Engineering） theory, design and functional modules of the authority management system is realized adopting Struts2-Guice-JPA integration framework of J2EE field, on the basis of role-based access control （RBAC） mechanisms. System testing and application results show that access control is completed preferably based on the role by this authority management system, and the cost of maintenance is reduced greatly.
作者
刘晓天
顾大明
宋巍
朱耀琴
LIU Xiao-tian GU Da-ming SONG Wei ZHU Yao-qin(Department of Mechanical and Electrical Engineering, Yaneheng Institute of Industry Technology, Yancheng 224005, China College of Computer Science and Technology, Nanjlng University of Science and Technology, Nanjing 210094, China)
出处
《东北师大学报（自然科学版）》
CAS
CSCD
北大核心
2016年第4期68-72,共5页
Journal of Northeast Normal University(Natural Science Edition)
基金
国家自然科学基金资助项目(61202003)
