Design of Access Control System for Web Application
Luo Junmin · Journal of Xi'an Technological University · 2008
The traditional access control technics as DAC and MAC are not suitable for web environment,because RBAC/Web model has low efficiency.The author analyzed the RBAC model and the reference implementation of RBAC/Web,put forward an idea of achieving high-performance of access control for web application by the combination of RBAC and component technology.The methods of RBAC database design,validation and ARS activation,page component design are described.It's proved by project that the means described in this paper solved the inefficient problem of RBAC/Web,and met the demands of access control for middle scale and small scale web applications.