基于Acegi的通用权限框架的设计与实现  

The Design and Implementation of Universal User Authority Management System Based on Acegi

作　　者：王宇飞[1] 

机构地区：[1]北京邮电大学网络技术研究院,北京100876

出　　处：《软件》2013年第7期46-50,共5页Software

摘　　要：用户权限管理对于企业级WEB应用而言十分重要,使用Acegi这样的开源框架实现用户权限的管理具有简便、灵活等各种优势。不过开发企业级应用时,由于不同应用对权限模块有着不同的要求,所以需要一个可以兼容多个WEB应用的通用权限框架,使得开发人员将精力主要放在业务的开发上,从整体上降低开发成本。为了实现这个目标,需要在Acegi权限框架的基础上进行相应的扩展。本文介绍了Acegi的相关概念以及优缺点,分析了在企业级WEB应用中扩展Acegi安全框架实现通用权限的管理的方法,并且针对具体的项目进行了设计,实现了基于Acegi的通用权限框架。User authority management is very important for an enterprise web application. Using some open source frameworks such as Acegi to implement the user authority management will have many advantages. But when we develop enterprise web applications, every application may has different requirements for user authority management. In order to lower the cost of development and let the developers focus on business development, a universal user authority management system which is compatible with several applications is needed. To achieve this goal, Acegi framework should be expanded. This paper introduces some concepts about Acegi, analyses the method to expand Acegi framework in enterprise web applications and implement a universal user authority management which is based on Acegi.

关 键 词：SPRING ACEGI 通用权限 RBAC 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]