RBAC模型在信息化平台建设的权限管理中的研究与应用

Research and Implementation of Access Control Management Based on RBAC of Informational Platform

阐述了基于角色的权限管理模型(RBAC~[1])在高等教育信息化平台中的运用,提出了RBAC的权限管理的解决方案。将RBAC模型应用到系统中增强了系统的安全性。系统采用三层架构~[2],基于Java平台实现,项目中使用了S2SH~[3]框架,RBAC模型的实现是基于Struts2的原有代码的重写,保证了技术上的可靠性,有效地解决了信息化平台中的遇到的权限和安全问题。

The authors present some kinds of technology regarding as access control of management based on RBAC~[1](role-based access control).In the advanced educational management system,we use RBAC to solve privilege problem,and the model-RBAC can enforce the security of the system.RBAC has realized the logic separation of the users and the access permission and reduced the complexity of the authorization management as well as the cost of the management.The model implemented by Java using S2 SH framework~[2].The entire system based on 3-tier architecture~[2].