基于Asp.net的权限系统的设计与实现

在Web系统开发中,由于系统资源的差异性和对权限管理要求的复杂性导致产生一些问题,如同一个系统中不同的子业务设置不同的权限,从而需要对不同的子业务模块编写权限控制代码,而这些代码存在着重复设计冗余编写以致降低了Web系统的开发效率.针对上述问题,在ASP.net中已有的基于角色的访问控制部分上,结合RBAC授权模型进行系统扩展,设计并实现了一个可以在中小型Web应用系统中通用的权限管理系统子模块.该模块采用三层结构,实现了权限控制和业务的分离,可以很方便地在其他Web系统中使用.

Design and Implementation of Authorization System Based on Asp.net

In the development of Web system, some problems have been arised with the differences of system resources and the complexity of authority management requirements exist. For example, the different permissions need to be designed in different subsystem business of the same system, so the codes exists repetitive design redundancy. In view of the above question. The subsystem rights management of the universal small Web Application module system has been design and im- plementaion based on the role of the ASP. net access control and combined with the RBAC authorizaion model for system ex- pansion. Three layers of structure of the subsystem adopted and the separation of access control and business has been real- ized, so it may be ery convenient to use in other Web system.