基于角色控制的教学权限访问系统的设计与实现

研究和探讨了实际应用中的用户权限及访问控制设计及实现问题.以一个教学管理网上系统的权限访问系统实现为例,通过建立一个权限控制矩阵来划分用户的权限访问级别,并结合了动态菜单自动生成、页面跳转限制控制、以及分级打开数据库数据等应用实现方案.实践表明,基于角色访问控制的权限访问控制系统能严格地控制与防止用户接触与其身份角色不相关的数据信息,有效地避免用户的非法操作,从而切实地提高系统的可用性和健壮性.

Design and Implementation of Role-based Access Control in a Teaching System

This paper discusses how to design and implement a security subsystem, which based on the Role-based Access Control technology. By taking a teaching web system as a practical example, the paper establishes an access control matrix, so dynamic menu, page jump, and data access control are loaded. The experimental shows that, the system can controls the access authorized data, and to avoid the illegality access. The practicability and robust in the system is evident.