Research And Implementation Of J2EE Enterprise Application And Its Security Framework

Enterprise applications refers to applications and solutions that deployed for commercial organizations and large enterprises. An ideal enterprise applications platform should be upgrading easily, reliable, safe, and have a flexibility architecture.J2EE(Java 2 Platform Enterprise Edition)is an architecture that defined the standard for developing Platform independent, transplantable, multi-user and secure enterprise applications. It use B/S model instead of C/S model, simplifies the maintenance and deployment of enterprise applications. Along whit the development of J2EE, many open-source framekworks emerge which are focus on specific aspect in system, such as transaction, security etc. We can only concentrate on development of business logic.Acegi is a framework based on Spring AOP technology, it works independently against business logic of the system and can provide security services deployed. Acegi can be intergrated with mass Web frameworks perfectly. So we can establish Acegi security syste in the enterprise system based J2EE and provide authentication service and authorization service.The main work is as follows:First, introduce the J2EE architecture and two open-source framework: Struts and Spring.Secondly, having been research some available information access control strategies, especially RBAC. We improve the RBAC model so that it can be suitable for data permission access control.Thirdly, we introduce the AOP in detail and the Acegi Security framework which is based Spring AOP.Finally, we adopt the Acegi Security framework, and extend its functions, as a result we make the Acegi can work with its config build on a database.