J2EE平台下权限管理的研究与实现  

Research and implementation of privilege management in J2EE platform

作　　者：赵志明[1] 江楠[1] 王力斌 

机构地区：[1]郑州轻工业学院计算机与通信工程学院,河南郑州450002 [2]河南移动通信有限责任公司郑州分公司集中维护中心,河南郑州450001

出　　处：《郑州轻工业学院学报（自然科学版）》2009年第3期9-12,共4页Journal of Zhengzhou University of Light Industry:Natural Science

摘　　要：在外籍教师管理信息系统中利用J2EE平台在MVC模式及Struts+Spring+Hibernate整合框架下实现了基于RBAC模型的权限控制:通过访问权限被赋予角色,用户再被授予适当的角色,从而克服了自主访问控制及强制访问控制的缺点,简化了授权管理,提高了访问控制的灵活性和系统的安全性.The use of J2EE platform under MVC and Struts ＋ Spring ＋ Hibernate integration framework in foreign teacher management information system RBAC based access control was realized. By giving access privilege to the role, the user was granted the appropriate role, which simplified the privilege management, increased flexibility of access control, thus overcome their weaknesses of discretionary access control and mandatory access control. It improved the security and flexibility of the system.

关 键 词：基于角色的访问控制 权限管理 J2EE STRUTS SPRING HIBERNATE 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]