Web环境下基于角色的访问控制策略及实现

Role Based Access Control and Implementation Under Web Environment

针对Internet环境下Web系统的安全，提出了一种改进的、更加完善的RBAC方案，采用ASP.NET技术，根据用户所属角色的权限自动生成功能模块，屏蔽不安全操作。将局域网用户和广域网用户区别开来制定访问权限，提高了应用系统的安全性。

This article provideds a perfecter RBAC model according to the Internet environment. By using the technology of ASP.NET,it can automatically product functional menus,which can avoid unsecured operation. Furthermore, the Intranet user and the Internet user must be distinguished from each other when making up the access controlling privilege. As a result of it, the application systems security is greatly improved.