【摘要】 有效的用户管理和访问控制是网络中各种资源稳定、可靠地运行,以及受控、合法地被使用的保障。本文对现行的Web安全认证和访问控制中存在的问题进行了分析,并在对基于角色访问控制模型分析基础上,结合实际需求,给出一种可行的访问控制解决方案并实现了一个基于角色的Web资源访问控制系统。该访问控制系统基于J2EE体系结构,系统架构清晰、跨平台、易管理,具有良好的可扩展性和可维护性。更多还原

【Abstract】 Effective user management and access control ensure that resources can run stablely,reliablely,and can be used rightfully.This paper analyzes role-based access control model.Based on access control requirement,A new feasible security solution is provided for the problems existing in the authentication and authorization on web application.As a result,a access control system is implemented by using the role-based access control model.Based on J2EE architecture,The system has well-structure,across platform,easy management,expansibility and maintainability.更多还原