基于SSH2架构的Java Web通用权限管理的设计  

The Design of the Java Web General Privilege Management based on An SSH2 Framework

作　　者：韩江[1] 

机构地区：[1]黑龙江交通职业技术学院,黑龙江齐齐哈尔161000

出　　处：《智能计算机与应用》2014年第2期114-116,共3页Intelligent Computer and Applications

摘　　要：权限管理是Java Web应用程序开发中的重要一部分,是程序安全运行的基础。本文设计和实现了一个适用于SSH2架构的通用权限管理设计框架,设计中对用户权限的控制分成三类,结合了基于角色的权限控制模型的优点,通过角色将用户和权限进行关联,并对角色URL地址的访问进行控制,从而实现了对用户权限的控制,框架实现复杂度低,可根据实际需要进行调整,具有可扩展性和易维护性。Privilege management is an important part in Java Web application development,and also is the foundation of the safe operation of the program. A general privilege management design framework is designed and implemented in this paper which is applicable to an SSH2 framework. The user in the design of access control is divided into three categories,and combining the advantages of role- based access control model,it is associated with users and privilege through the role. After it,the paper takes the access control of role URL address,so as to realize the control of the user privilege.Framework implementation in the paper may be adjusted according to actual needs,has low complexity and good scalability and maintainability.

关 键 词：角色 权限管理 SSH2架构 URL地址 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]