Design and implementation of fine-grained RBAC module based on AOP
Shao Qifen · Journal of Beijing Jiaotong University · 2013
According to the shortage of the core RBAC model in implementing B/S enterprise applications without refining permission control granularity based on operating characteristic and lacking of access control for fine-grained data,a fine-grained RBAC model extended in the operating dimensions was presented and a formal description for the model was given. Concerning the problemsof existing enterprise applications of the authenticating logic cross-cutting the business logic, the implementation of the fine-grained RBAC model based on AOP and annotation was discussed. This paper modularized the authenticating logic, and decoupled the business logic and the permission common service. Furthermore, we also improved the reusability, maintainability and scalability of permission management module.