石油化工信息系统Web权限管理的研究

对Web权限控制进行了研究分析和应用，首先分析了进行权限控制的必要性；介绍了进行要限控制的几种实现形式，包括利用Web Server本身权限管理工具，通过在ASP／PHP页面中嵌入权限认证代码，或是将二者结合；最后，基于Apache服务器开发了图形化的权限管理系统，并已将它应用在Internet石化信息服务系统中。该软件可以方便地完成增删改用户／组，为用户／组设定权限，限制某些IP对本系统的访问等功能，并可以方便地移植到其他类似系统中。

Web Access Control on Petrochemical Information Service System

Web Access Control is analyzed and applied to information service system in this article. First, the need of Access Control is discussed. Second, a few of implementation methods are introduced . Web servers have access control functions by itself. In addition, we may insert some codes in ASP/PHP page to check access rights. CGI/ISAPI may use either or both of the above methods. As to Internet Petrochemical Information Service System, we design and complete a software to finish this job. It has a series of functions such as add, delete, edit users/groups' information, grant or revoke access to users/groups, allow or deny some IPs to access the information system, etc. It can also be applied to other similar information systems conveniently.