Application study of role-based access control under J2EE mode
Liu Xiao-bao · Journal of Computer Applications · 2006
By using the container-based security mechanism of J2EE,the system security of J2EE can be managed by RBAC(Role-based Access Control) without code modification of J2EE components.RBAC was realized simply by the deployment descriptor configure of J2EE container.RBAC security strategy,executed to protect J2EE system resource based on the security truss of container,was picked up from deploy descriptor.Because the development of J2EE component separates from security,the developers of components can be Absorbed in the businesses logic of components.Therefore,the cost of system development and maintenance will fall down,and the components become transplantable.