Design And Implementation Of Authority Management Module Based On Cloudstack

With the rapid development of the Internet industry and the market competition becoming increasingly fierce, Cloud Computing technology are more and more widespread. Taking Cloud Computing as its development strategy, some telecom operators give full play to the advantage in resources such as Network, Storage. Based on CloudStack, at present, the professional company develops a cloud computing management platform, which has been widely applied to the telecom operator’s public cloud and private cloud. Considering the need for Cloud Platform to get the resources in public cloud and private cloud together safely and the diversity of user types in the Cloud Platform, it is necessary to design an authority management module to determine which resources can be managed or used for different users and which operation can be done on the resources for users.The main content of this paper is to make some innovative design and redevelopment on the basis of CloudStack.In other words, combining with the features of the telecom operator’s resources, operations and organizational structures, this paper aims at designing an authority management module. This module can be divided into two submodules:authority-decentralized management and domain-decentralized management. Authority-decentralized management is about the control of operation authority. It refines all operation authorities which are provided with cloud platform users. And domain-decentralized management is about the control of access authority. It mainly solves the problem as follows:one domain can manage and use one or more resources; limit the range where the resources can be managed and used by domain. Main research is as follows:1. A domain-decentralized management model is proposed. Its core idea is to build relationship between domains and resources throw domain-authorizing. The relationship performs as the management relationship and usage relationship between domains and resources.2. Role-Based Access Control(RBAC) model is analyzed and a authority-decentralized management model is proposed according to the features of CloudStack’s organizational structures. As an improvement of RBAC model, the model builds relationship between Permissions and Accounts throw Roles. If an account is bound to one role when it is created, all users which belong to the account can get the permissions which are assigned to the role.3. The two submodules are designed in database, business logic and user interface and so on, and are implemented in JAVA.4. The result of test to the authority management module shows that the functional requirements is basically satisfied. The interface is simple and is easy to operate or manage.