An authority control model based on RBAC
Min Zhu, Lei Yan, Lin Ji · 2011
Traditional access control based on user or role is difficult to coincide with the actual management mode. In this paper RBAC technologies were introduced. Design and implementation of authority management components were discussed according to RBAC model and theory. The authority management components were implemented in way of Struts+Spring+Hibernate framework. In end of this paper system test was carried on. The test results showed that confidentiality of information on OA system and correctness of accessing resource are both improved by authority management based on role. It makes system security mechanism more flexibility.