The Design And Implementation Of Role-Base Access Control System For JSP

Along with the Internet technique becoming mature, the computer science continuously developing and the extend of resources share further strengthening, the network have already become an essential method which people obtain knowledge, information in our daily life.And the following issue concerns information systems security is also increasingly prominent。At the beginning of1990s, NIST’s Ferraiolo raised based on RBAC system, which it an effective way to solve information systems security, the RBAC technology applies true system gradually. But because the underlying database not unified, system jurisdiction control design and realization not unified and so on reasons, thus when we design a new system, we also rewrite the code of access control, the code can’t be reused. That usually is a bottleneck of the efficiency which hard to enhance and a reason of system bug.Because the code of access control usually similitude, according to abstract the underlying database, cooperate with powerdesigner to design database struct chart, based JSP platform, the paper issued a scheme which based on Role Access Control System, and make it become an all-purpose module join in the system, and made the system can assign different permission to different role or user, and realize system access control. The system based on Java as the main development language, MyEclipse as a development tool, Tomcat as the web server, then puts forward the feasible scheme, realize the unification of underlying database, access interception, access configure and access tag etc. the software will be get well used in web development.