基于 SSH2架构的 Java Web 通用权限管理的设计

摘要

权限管理是 Java Web应用程序开发中的重要一部分，是程序安全运行的基础。本文设计和实现了一个适用于 SSH2架构的通用权限管理设计框架，设计中对用户权限的控制分成三类，结合了基于角色的权限控制模型的优点，通过角色将用户和权限进行关联，并对角色URL地址的访问进行控制，从而实现了对用户权限的控制，框架实现复杂度低，可根据实际需要进行调整，具有可扩展性和易维护性。%Privilege management is an important part in Java Web application development , and also is the foundation of the safe operation of the program .A general privilege management design framework is designed and implemented in this paper which is applicable to an SSH 2 framework.The user in the design of access control is divided into three categories , and combining the advantages of role -based access control model , it is associated with users and privilege through the role.After it, the paper takes the access control of role URL address , so as to realize the control of the user privilege . Framework implementation in the paper may be adjusted according to actual needs , has low complexity and good scalability and maintainability .