A Middleware Implementation Of RBAC Model And Its Application In B/S Mode Project

Access control helps to improve system security through strict control of accessing resource within system, and garrentee only authorized users can store/retrieve specific objects.This paper present a middleware implementation of access control model, and applied it to a B/S mode enterprise application.RBAC introduced Role into Access Control concept, changing the link between users and resources from direct connections to indirect connections.This method makes access control management more reliable and feasible.Although RBAC is widely accepted by different areas and industries, we still found that it should be modified to meet the real requirements of projects. Especially when we try to applied it in our B/S mode applications, we found we had to devide rights into two parts:l)rights of resources;2)rights of functions, in order to ease our design, implementation and system maintance.Middleware may be a good way to implement RBAC in B/S applications,especicially based on Java EE middleware technology.Java EE help us to make development of B/S mode application more faster, more effective and more reliable.In our practice, we implement a relative stand alone RBAC model and use it in different B/S mode applications.Of course,we got the welcome from our clients.