The Design And Implementation Of Construction Contractor Management System In PetroChina

In cooperation with Northeastern University in 2011,PetroChina has decided to design and develop a construction contractors MIS,for better management of construction contractors to co-ordinate the project construction resources,standardize the order of construction market and improve service ability,based on related laws/regulations and the actural regurement.This paper discuss the design and implementation of the construction contractors MIS,focusing on the access control problem.Access control is based on identity authentication to decide whether he can access the resources according to whom logins the system.The purpose of the access control is to ensure that the system resources can be used legally.Users must access the system resources in their own scope of authorization.Among the traditional access control models,discretionary access control(DAC)model makes the authentication quite flexible because of permissions transferred,but it's difficult to manage all the users and it's not safe for the system.Even though mandatory access control(MAC)model can make the system much solider,it's more complicated for authorizing.So role-based access control(RBAC)model is the most widely used one,because it owns all the advantages between DAC and MAC.Role-based access control(RBAC)model introduces the roles between the users and the permissions.The user plays in which role,he will own the permissions that are authorized to him.When the conditions of employee change,the administrator can insert,delete or update the relationship between the user and the role,which improves the flexibility of the authorization.And the restriction principles make the system safer.This thesis designs and implements the permissions management subsystem of contractor management system,mainly aims at the characteristics of users'organization structure and combine RBAC96 model with ARBAC97 model.Firstly,this thesis comes up with distribution-centralized management,user-group and audit management based on RBAC model.Then the data tables and their mapping relationship are designed.Finally,this system is implemented using ASP.NET,C#and Sql Server 2005,etc.The system not only improves work efficiency,but also a certain extent eases the burden of the administrator.