Privilege Management System For Fangzheng Corporation

With the rapid development of the economy, the societyprospers daybyday. Which differs from the past is that the information and the servicehave already become the most important factors that relate to theenterprises'competitive power and the survivability.Information-oriented has already become the life of the enterprise, whichdecides the development of the enterprise. Under such condition, theManagement Information System is invented. Accompany with thenetwork techniques rapid development, safety problem of the informationbecomes increasingly outstanding. The development of the Electroniccommerce and electronics governmental affairs system not only needs theprotection for the system's resources, but also needs the max services forproviding to the users. All these require the system to have functions of:Which users can visit the information of the system, what information isvisited, what authority the users own to the data that he visits. This relatesto the important aspects of network safety: privilege management andcontrol of visiting. To build a strong and healthy privilege managementsystem is very important for managing the information system. Privilegemanagement system is one of the most important sub-system of themanagementinformationsystem.According to the practical requirement of FangZheng Corporation, thispaper intends to develop a role-based privilege management system. Thissystemisusedforauthorizingtheusers andprograms.Providingthem withthe relative authority which is independent to the specific visiting tragic.And this not only simplifies the development of the system, but alsoenhancesthesafetylevelofthesystem.Here we introduce an important concept to the privilege managementsystem—RBAC (Roles-Based Access Control). It is raised for resolving the problem of complexity and safety in a large system. The characteristicof RBAC is providing the users with different roles by authorizing differentauthority to roles. The system makes decision according to the roles of theusers and access control tragic. For large system, RBAC access control canreduce the complexity and cost.FangZheng privilege management system composes of two sub-systems:organization management system and role-authority management system.Organization management system implements the management oforganizations, employees and positions. In this sub-system, one can add anew organization, employee and position; one can delete an existedorganization, employee and position; one can also check the information oforganization, employee and position.Role-authority sub-system implements the following functions: controlof role, menu, function and logic. Including: adding a new role, menu,function and logic; deleting an existed role, menu, function and logic;distributing roles to employees; distributing authorities to roles. Employeeswith different authorities can visit different resources of the system.This paper consists of six chapters:Chapter1—In this chapter we introduce the development background ofprivilege management system; we also give an overview of this system.Chapter2—In this chapter we introduce the relevant concept andtechnology , design tools and environment.Chapter3—We describe the architecture of FangZheng privilegemanagement system.Chapter4—In this chapter we describe the analysis and the design ofsystem, including the design of database.Chapter5—In this chapter we describe design and realizing of somefunctions.Chapter6—In this chapter we summarizes the problems of the system. The realization of the privilege management system is an intact softwaredevelopment course , it involves program theory and implementationmethod of software project, And has combined the OO developmenttechnology and design philosophy. It also contains the most work flowinvolved in the daily work of enterprise basically, and has realized the basicfunction of privilege management.