基于J2EE架构的多层次结合的权限拦截策略

随着企业信息系统向多用户,多应用方向发展,权限管理越来越复杂,传统的权限拦截方法已经不适应当前信息系统的需求,迫切需要一套高内聚、低耦合的权限拦截方法.详细分析了J2EE架构下的基于标签的表示层、基于过滤器的控制层和基于AOP的业务逻辑层的权限拦截的原理与优势,并将这几种方法整合,设计并实现了1种多层次结合的权限拦截策略,可以有效地嵌入基于J2EE的各种应用系统,实现独立透明的权限管理,而不必破坏系统原有的业务逻辑,最大程度地提高信息系统的开发效率.

Combined Authority-Interception Strategy Based on Multi-levels Frame of J2EE

With the development of enterprise information system in the direction of multiple users and multiple application,privilege management is becoming more and more complex and the traditional authority interception method can’t agree with the demand.Then a new high-cohesion and low-coupled authority-interception technology is urgently needed.Therefore,by laboring the authority-intercept theory in representation layer,control layer and business logic layer in the framework of the J2EE,a combined authority interception strategy is presented,which can be embedded in various applications system based on J2EE and realizes the independent jurisdiction management,without destroying the original business logic and maximize the information system efficiency of development.