Design And Implementation Of Intelligent Pipe Gallery Information Management System Based On RBAC

With the concept of "intelligent city" put forward by the state,the intelligent pipe gallery system has been popularized and developed.How to use the existing Internet of Things technology to realize the operation and management of pipe gallery and improve the efficiency and quality of pipe gallery has become one of the important research topics in the construction of "intelligent city".In order to improve the information management efficiency of intelligent pipe gallery,a design and implementation scheme of intelligent pipe gallery information management system based on RBAC has been proposed in this thesis.In this scheme,RBAC,AOP and interceptor are used to separate the relationship of user-role-permission.Role-tree and interceptor are designed to authenticate,and function interaction is designed by different permissions.Information management of users with different permissions is realized,which provides support for business functions of intelligent pipe gallery system and improves the performance of intelligent pipe gallery system.The main work is as follows:(1)The role-tree model of user-role-permission separation is proposed,which makes the user become a certain role to obtain the corresponding permission,realizes the separation of the user and the permission,and achieves the purpose of reducing the coupling of the system.(2)The function of login is designed and implemented.The session of the front and rear end is established and the login function is completed by Shiro framework.OAuth2 is used for login authentication and token generation.The advantage of this plan is to ensure the parallel development of the front and rear end of the system,reduce the system coupling,and improve the security of the system.(3)The function of permission management is designed and implemented,including operation permission and data permission.The operation permission is realized by interceptor.After the user logs in successfully,the user_id will be returned.The role-tree will be used to query to obtain the corresponding role of the user,and then the role's name will be intercepted during system operation,so that the role can only complete the operation corresponding to its permission.The data permission is realized by interceptor of mybatis.Under the premise of the operation permission,the fields need to be intercepted will be set.The execution results that conform to the corresponding data permission of the current user will be returned by disassembling and reorganizing SQL statements dynamically.Compared with the existing spring security technology,the advantage of this plan is that the interceptor doesn't rely on the spring framework,realizes lightweight development and reduces the complexity of the system.(4)The function of approval is designed and implemented by changing the status of unapproved plan information.It also provides the functions of viewing the approved plan information and approved results.Compared with the existing activity workflow,the advantage of this plan is to simplify the design of the approval process,avoid compatibility between BPMN file and development environment,and improve the efficiency of the system.(5)The function of user information management and group information management are designed and implemented,including creating,deleting,updating and querying user information and group information,assigning groups and roles to users,and adding and deleting users in the group,etc.They are realized by spring boot,mysql and mybatis.Compared with the existing springMVC technology,the advantage of this plan is that spring boot can realize automatic configuration,save the process of deploying war package in tomcat container,and improve the efficiency of the system.