基于角色权限管理扩展模型的设计与实现

基于角色权限管理模型对于大规模授权具有优势,但缺少了对一个用户授权的灵活。提出了合理可行的改进模型。采用J2EE经典的开源工具实现了这个扩展型基于角色权限管理模型。在保留角色授权的同时,增加了给某个用户单独授权的机制。扩展模型很好的丰富了基于角色权限管理模型的授权方式。

Design And Implementation of Extended Model Based on Role-Based Access Control

The role-based access control model has the superiority regarding on the large-scale authorization,but it lacks of flexibility for one user authorization.This article analyzes the shortcomings of role-based access control model and proposes a reasonable and workable better model.It makes the implement for extended role-based access control model using common open tools of J2EE.The new model reserves the role-based access control authorization,at the same time it also increases a single user authorization system.This model enriches the way of authorization.