CAJ | 학술논문

信息系统涉及用户隐私数据时，权限访问控制是系统成功的关键因素。在建的柳州市高级专家信息系统使用了一种简单灵活的权限设置方案，结合ASP．NET中的授权模型，可实现系统运行时自定义角色和动态授权，并为用户数据提供字段级保护以及保护范围。
신식계통섭급용호은사수거시，권한방문공제시계통성공적관건인소。재건적류주시고급전가신식계통사용료일충간단령활적권한설치방안，결합ASP．NET중적수권모형，가실현계통운행시자정의각색화동태수권，병위용호수거제공자단급보호이급보호범위。
When a MIS (Management Information System) web site involves users' privacy data, Access Control is a key factor of ensuring system success. This paper introduces authorization model in ASP.NET and puts forward to a simple and flexible solution giving users convenience to create and authorize custom roles in application runtime, the solution also provides field-level privacy protection and enables users to establish privacy scope, and makes system more flexible on the premise of restricting access control.