通用、动态权限管理模型的设计与实现

The Design and Implementation of General and Dynamic Privilege Management Model

针对B/S系统的权限管理问题,提出了一种通用、动态权限管理模型。模型中为用户分配账号,为账号分配角色,为角色分配权限,从而使用户间接的获得权限,实现了用户和权限的逻辑分离。模型中的权限管理粒度精细,不仅有功能模块级别的菜单权限,而且有页面上按钮级别的动作权限和页面上显示信息级别的数据权限,能随用户需求的变化而动态的改变,具有很好的灵活性、安全性和通用性。

According to B/S system privilege management problem, a general and dynamic privilege management model is put forward. In model for user assignment account, for account assignment role, for role assignment privilege, thus causes the user indirectly to obtain the privilege, has realized the user and the privilege logical separation. In model privilege management granularity is fine, not only has the function of the module level menu privilege, but also has the function of the button level on the page action privilege and the information level of the page data privilege. It can along with the user demand change the dynamic change, with good flexibility, Safety and versatility.