Research And Application Of Role-Based Access Control Under The Struts Framework

Role_Based Access Control (RBAC) Model is nowdays the best and most popular access control model, it defines access authority of subject to object, and is the controller when the consumers accessing data resource enter into the application system by authenticating identity, and is the core technology and the effective measure of safely protecting the data information. Compared with traditional DAC and MAC models, it can provide better flexibility and scalability.Struts Framework is an open source framework of Apache fund and is an application architectures based on the Model-View-Controller (MVC) design paradigm, it adopts object oriented design and can be used to differentiate the data display logic and the operation logic and the transact logic, and it triumphantly solved the problem as hiberarchy confusion of center structure in page layout and so on, and it makes the project exploitation many excellence just like definitely divide the work, side-by-side exploitation, all-right reuse and expansibility and flexible mistake and exception management and so on. This thesis has an expert discussion on the framework and construction of special enterprise information system combined with the authority distributed characteristic of RBAC.This thesis introduces RBAC at first, then joins concept of Group into this model and expands it, and puts forward a suitable model of port, and carries on detailed analysis and design on this basis, realizes it under the Struts framework finally. This realization reduces the complexity of authorization management, reduces expenses and supports the security tactics of port in a flexible way. Through the research, the author hopes it can offer strong help for application study of this field.