B/S结构权限管理的研究与实现

Privilege Management Research and Practice under B/S Structure

摘要: 在B/S结构的应用系统中，权限管理功能有着广泛的应用。由于需求的不同权限管理功能有不同的设计和实现方式，RBAC (基于角色的访问控制)作为一种比较成熟的模型，为权限管理的设计和实现方式提供了参考。基于Web环境下资源标示的唯一性和权限控制算法，并参考RBAC和学习多种权限管理的实现，总结出一种简单实用的权限管理实现方式。

Abstract: In this B/S structure of the application system, privilege management used broad. According to the different requirements, privilege management functions have different ways of design and im-plementation, and RBAC (Role Based Access Control) provides a common way to achieve guidance, RBAC based on the uniqueness of the next B/S URL environmental resources, the use of access control algorithm and role-core to achieve the user’s permission to perform operations managed by the role to perform operations.