一种面向应用的基于访问权限的动态控制方法

信息安全是当今的热点问题之一,它又可分为数据库管理系统安全、操作系统安全、网络安全等。在MIS等应用软件中,常利用菜单进行访问控制。这种方法很容易实现,一般是利用程序逻辑直接控制,或将控制信息预先生成且保存在数据库中。然而,在系统需求发生变化或开发其它的系统时,一般要重复开发这些控制逻辑。该文介绍了一种在数据库中存储权限控制信息,并利用深度优先算法遍历菜单从而进行权限控制方法。这种方法弥补了上述不足,从而实现了软件的重用,提高了软件开发效率。

An Application-oriented Access-based Dynamic Control Method

Information security,which includes DBMS security,OS security and network security and etc,is one of the hottest issues today.A mostly used simple method in MIS is taking advantages of menus to implement access control.It can be realized easily by program logic or information pre-preserved in database.However,it often needs to rewrite the logics or modify the access control information stored in the database when requirement alter.In this paper,an access control method is introduced,which uses both the access information stored in database and deep-first search method to implement the access control.The method can make up the defects mentioned above,then the software reuse can be implemented,the efficiency of development can be improved.