| Powerful access control is becoming one of the major needs in scientific project management systems these days. Because the requirements are becoming more and more sophisticated and highly discipline specific, no existing access control tool is available that developers could adopt directly. This thesis proposes a general and flexible security administration module that can be easily integrated into scientific project management systems, especially if they are based on a 3-tier architecture. The module is based on role-based access control (RBAC) technology to provide flexibility and extensibility. In order to control access on the level of individual table tuples, a new concept, named condition, is introduced. Aspect-oriented programming (AOP) technology is adopted to integrate the access control component into the 3-tier framework. A concrete implementation is performed on the prototype project management system Exp-DB using AspectJ. |
