基于对象属性约束权限控制研究与实现  

Research and Implementation of Constraint Access Control Based on Object Attribute

作　　者：曾锡山[1] 陈振洲[1] 

机构地区：[1]华南师范大学计算机学院,广州510631

出　　处：《华南师范大学学报（自然科学版）》2016年第2期111-115,共5页Journal of South China Normal University(Natural Science Edition)

基　　金：广东省科技计划项目(2013B010401022);广州市科技计划项目(2014Y2-C0123)

摘　　要：授权控制是软件设计中一个比较难处理的问题,目前大多授权研究均基于用户授权方法,未涉及授权后实现技术.上述授权技术通常采用简单限制或允许某些菜单、命令功能操作,授权控制方式简单、粒度大而且不灵活.文中提出一种基于对象属性的约束访问控制方法,通过对软件最小控制单位(对象属性)进行约束,很好解决上述问题;该方法具有授权管理方便以及实现简单等特点,并极大提高软件开发效率和复用程度.In software design,authorization control is a very difficult problem. Most authorization research is based on user authorization method,in which no implementation technology is involved after authorization. These authorizations usually employ simple restrictions or allow some menu and command function operation. Authorization control method is simple,coarse and inflexible. A constraint access control method based on object attribute is proposed. Through some constraints on the smallest control unit of software,object attribute,the method can solve the problems above. At the same time,the method has characteristics such as it has convenient authorization management and is easy to be implemented and also it can greatly improve the efficiency of software development and reuse degree.

关 键 词：角色 对象属性 控制粒度 约束管理 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]