基于RBAC模型的权限管理系统的设计与实现  

Design and Implementation of RBAC-based Permission Management System

作　　者：王勇 吕明久[1] 陈莉[1] 程祺 WANG Yong;LYU Mingjiu;CHEN Li;CHENG Qi(Air Force Early Warning Academy,Wuhan 430019,China)

机构地区：[1]空军预警学院,武汉430019

出　　处：《江苏工程职业技术学院学报》2024年第3期15-20,共6页Journal of Jiangsu College of Engineering and Technology

摘　　要：基于“用户-角色-权限”的RBAC(基于角色的访问控制,Role-Based Access Control,简称RBAC)模型设计了一个权限管理系统。系统使用UML统一建模语言将用户表、角色表、权限表的表信息转换至数据库模型,使用MySQL数据库,采用前后端分离架构,前端使用Vue框架,后端使用SpringBoot框架,通过树形转换、动态创建与获取、按钮权限校验等关键技术实现了控制用户访问权限、降低权限管理复杂度、提升系统安全性等功能。经测试,系统后续的扩展和维护便捷。A permission management system was designed based on the“user-role-menu”RBAC(Role-Based Access Control)model.UML(Unified Model Language)was used to convert the information of user,role and menu into a database model to which MySQL was applied.The front-end and back-end were separated from each other,using Vue and SpringBoot respectively.With key technologies such as tree conversion,dynamic creation and retrieval,and button verification,the system was able to control the permission of users’access,reducing the complexity of permission management,and enhancing the system’s security.After testing,the system was found convenient for future expansion and maintenance.

关 键 词：权限管理 RBAC模型 WEB系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]