【摘要】 为了实现Web信息系统的细粒度访问控制,研究了MVC(Model-View-Controller)构建模式,然后分别从视图层和控制层上考虑客体的结构和形式,在NISTRBAC的基础上提出了OHRBAC(Object Hierarchy RBAC)模型,并基于该模型分别利用JSP标签技术和AOP技术实现了视图层和控制层的细粒度访问控制,并抽象出Java Web信息系统中细粒度访问控制的一般解决方案,该方案安全性高、操作方便、可以快速部署、可扩展、可伸缩。更多还原

【Abstract】 In order to realize the fine-grained access control in Web information system,in this paper it studied the Model-View-Controller(MVC)architectural pattern,analyzed the structure and the modality of the objects on View and Control levels,then proposed an extended model named OHBAC which is based on the NIST RBAC,and realized the fine-grained access control on View and Control levels based on this model by using JSP tag and AOP technology on the J2EE platform.At the end of this paper,a general solution for fine-grained access control in Java Web information system is Abstract ed,it is a safe,deploy effective,extensible and flexible scheme.更多还原