Design And Implementation Of Fine-grain Access Control Based On Policy Attribute

In the rapid development of the information technology today, enterprise’sinformation platform also more and more depending on the network, and Java Webapplication system also has become a enterprise processing daily business center platform.Web system in the development process, Web system access control especially Web pagethe access control of resources have pretty much everything is to repeat writing, and incompiling Web design personnel and security administrator’s work always are interrelated,unable to realize independent work, now also is not about in the Web page of theintegration of security strategy authoritative research. Although there are many securityindustry development framework, but there are not enough to control such as particle sizerefinement, unable to realize the design and control management page of the solution ofthe coupling, does not support more security strategies.Based on PA-BAC (Policy Attribute Based Access Control), will Access Controlstrategy to Attribute to the form of the fine grain association web Access object Attributeof the strategy, and make the model supports multiple security strategy. Put forward theview control concept, made more security strategy of decision-making rules, and forPA-BAC in practical application are given the consideration module mechanism. Finally,based on the strategy of attributes in access control model, the model based on themodular and achieve a has security function of the tag library Struts plug-in. DevelopmentJava Web application system, can direct introduction in the system the plug-in, systemconfiguration of the convenient for users as long as, can be realized in view of thedifferent of the main body of the visit wysiwyg(what you see is what you get) function.