基于Java规则引擎的Acegi域对象安全扩展  

Enhancing Acegi security for domain objects based on java rule engine

作　　者：闵联营[1] 罗强[1] 

机构地区：[1]武汉理工大学计算机科学与技术学院,武汉430063

出　　处：《华中师范大学学报（自然科学版）》2009年第2期211-216,共6页Journal of Central China Normal University：Natural Sciences

基　　金：湖北省科技攻关项目(2005AA101C08)

摘　　要：企业应用程序都需要一套完善、灵活、高效的安全措施来保证其完整性和安全性。Acegi安全框架正被越来越广泛地应用于基于Java EE平台的企业应用系统中。本文分析了Acegi在域对象实例访问控制方面支持企业复杂的访问控制之不足,提出应用Java规则引擎来实现控制访问的业务逻辑,给出了使用基于规则引擎的开源产品JBoss Rules来扩展Acegi域对象安全的一种实现方案。实验表明该方案能提高对域对象实例的访问控制,降低业务逻辑与Acegi安全框架的耦合,且易于实施,保证系统运行的性能,有推广应用的前景。Security is crucial for the successfulness of an enterprise application. Aeegi Security has been more and more widely applied to the development of Java EE based enterprise applications. This paper discusses the Acegi security framework and its weakness in domain object access control, introduces the Java rule engines to realize controlling business logic access, and proposes a solution to enhance the Acegi security for domain objects by using a rule-engine-based open source product JBoss Rules. The experiments show that the solution can improve the Acegi security for domain objects and mitigate the coupling between the business logic and the Acegi security framework, as well as maintain a good system performance and easy to be implemented.

关 键 词：ACEGI 规则引擎 JBOSS Rules 域对象实例安全 ACL 

分 类 号：TP312[自动化与计算机技术—计算机软件与理论]