AOP在基于RBAC模型的Web系统中权限控制的实现

摘要

Permission control has an important role in the Web system. But the granularity of permission control of traditional RBAC model is larger. The permission refination will make the permission control code scattered in each of business function modules,which will increase development costs and decrease in readability,maintainability and reusability. To rectify those defects, gives a strategy that can refine the permission through using AOP technology. And through the actual program, it also describes the implementation of the strategy.%权限控制在Web系统中有重要的地位,而传统基于角色的访问控制(Role Based Access Control,RBAC)模型权限控制粒度较大,细化权限会使权限控制代码散乱于各业务功能模块,造成系统的开发成本增大,可读性、维护性和重用性降低.针对此不足提出了融入面向切面编程(Aspect Oriented Programming,AOP)技术细化控制权限的策略,并通过实际项目阐述该策略对权限控制的实现.