CAJ | 학술논문

为解决系统用户社会属性或分工复杂的系统权限控制问题，在基于角色访问控制（RBAC ）的基础上提出了一种改进权限管理模型———基于表单域访问控制模型。模型引入了表单域访问控制策略，将传统角色访问控制的控制粒度由功能级控制扩展到数据级控制，权限管理的有效性得到保证。最后，运用面向切面编程（AOP）、自定义标签（Tag）以及 Ajax技术实现了模型的原型系统，并将该原型系统运用于教务管理系统的权限控制。结果表明，改进的设计实现，并有效提升了访问控制粒度。
위해결계통용호사회속성혹분공복잡적계통권한공제문제，재기우각색방문공제（RBAC ）적기출상제출료일충개진권한관리모형———기우표단역방문공제모형。모형인입료표단역방문공제책략，장전통각색방문공제적공제립도유공능급공제확전도수거급공제，권한관리적유효성득도보증。최후，운용면향절면편정（AOP）、자정의표첨（Tag）이급 Ajax기술실현료모형적원형계통，병장해원형계통운용우교무관리계통적권한공제。결과표명，개진적설계실현，병유효제승료방문공제립도。
To solve access control problem of complex social property or division ,a revised privilege management model is proposed based on role‐based access control(RBAC) — form‐based access control model .The model injects form‐based ac‐cess control strategy ,which extends the granularity of traditional role‐based access control by function‐level control to data‐level control ,guaranteeing the privilege management effectiveness .Finally ,aspect oriented programming (AOP) ,user‐de‐fined tags(Tag) and Ajax technology are used to implement the prototype system of the model ,and apply the the prototype of access control system in educational administration system .Results indicate that the revised model effectively reduce the invasive and coupling of the business system ,and effectively improved granularity of the access control .