基于Struts框架的访问控制策略  

Access Control Strategy Based on Struts Framework

作　　者：龚安[1] 刘华山[1] 牛秋丽[1] 罗琳[1] 

机构地区：[1]中国石油大学计算机与通信工程学院,东营257061

出　　处：《微计算机应用》2008年第5期61-64,共4页Microcomputer Applications

摘　　要：阐述了基于Struts结构的RBAC权限管理框架,分别在浏览器、web容器和数据库层采用协同的安全策略。在容器层实现了系统安全性和程序业务逻辑的彻底分离,有效的解决系统功能扩展时的安全问题。结果表明可以应对系统在开发、引用和升级过程中出现的各种变化,有效降低了系统运行期安全性维护的难度。In this article it states the structure of RBAC Struts permissions management framework, in the browser,web containers ,database layer by layer and the security policy coordination. In containers layer achieved the complete separation between security system and procedures of business logic, the settlement system function effectively expand security issues. The results show that the system can cope with the development, use and promotion process and the various changes to reduce the difficulty of maintaining security in the system running period.

关 键 词：权限管理 RBAC STRUTS 树形菜单 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]