Research And Application On An Improved Permission Management Framework

As more and more enterprises to develop their own web applications and theseapplications are mostly used in the B/S structure, so authentication and authorization is avery important process, the permission management system is developed to solve theseproblems. After years of research, the permission management has formed a more maturemodel. The universal permission management system which is based on B/S structuremakes the developers free from the repeated development, and they can focused on therealization of business requirements.Research of the permission management framework which based on the company’sinternal wireless network modeling system, at first, the framework analyzes andintroduces the model of RBAC which used in the permission management systemframework, then describes the workflows in the framework, including the single sign-onsystem, user management, role management, basic permission management and intelligentdistribution rights management and so on. Then proposes an improvement framework andstudy the difference with the traditional framework, which focuses on the JSP custom tagin each subsystem of access control technology and then use the technology of datamining algorithms to analyze the user’s rights. JSP custom tags improve the efficiency ofthe development to reduce code complexity; Spring AOP technique was used to recorduser actions, then uses clustering in the data mining algorithm to analyze the user’soperating, finally provides the advice to administrators and department managers.After research of the permission management system framework, the applicationwhich based on this framework is realized. The application is realized by SSH frameworkand designed by MVC and RBAC pattern. The application makes the roles and resourcesare isolated, and provide the all functions which mentioned above in the framework, hasunified permission management function.