Access Control Of Enterprise Resource Planning System For Mechanical Manufacturing Enterprise

With the deeply application of information technology in product manufacturing, informationalization has become one notable feature of the modern enterprise. The ERP system has been used by many departments of the enterprise, and it manages most of important manufacturing resources. So many enterprises regard ERP as the kernel of informationalization. But if the problem of access control could not be solved effectively, the application effects will be discounted seriously.Based on the traditional access control technologies and the theories of ERP, the application characteristics of ERP system and the demands of the access control were listed separately; at the same time the limitations of the classical model used in the ERP system were analyzed. Aiming to establish the model of access control available the ERP system, a comprehensive access control model was proposed. In the model, the organization management, object-authority management and authorized management, i.e. allowing users to be authorized directly, redefining the authority scope of the three main types, hierarchically managing the objects and clearing the objects' authority of inheriting, correctly handling dynamic authority of the subject, designing solutions to the conflicts of authorities, were improved. For the distributed departments of the enterprises, the administrative model was also proposed.On the basis of the management thoughts of the model, the implement framework including three parts such as identity authentication, access control system and structure of the database were put forward in the access control system. The identity authentication was a prerequisite for access control, the access control system was the core mechanism of the system, and the database was to provide date support. In order to further describe the realization of access control model, Use Case Diagram, Dynamic Diagrams, and the Class Diagram of UML were given to show some important aspects of the system.Finally, the scheme was realized and applied in Wuzheng Group, and good results were obtained. The comprehensive access control model not only simplifies implementation of authority, but also realizes fine-grained access control.