企业级信息系统权限控制机制设计与实现.PDFVIP

所属栏目：计算机应用  企业级信息系统权限控制机制设计与实现  1  1,2  1,2  1 王科 纪姗姗  刘芳  李春旺   1 (中国科学院国家科学图书馆，中国科学院， 北京 100190) 2 (中国科学院研究生院，中国科学院， 北京 100049) 摘 要：提出了一种具备较高通用性的权限系统的设计方案与实现方法，可以应用于企 业级信息系统、社区系统与门户系统。相对于传统的以角色作为用户权限标识的方法，添加 了组别、全局角色与组内角色、权限客体类型等元素，使得用户与资源能够更合理的进行管 理与组织，并允许以不同权限判断逻辑进行权限判断。陈述了新方案的形式化定义，以及具 体的应用实例，实现方案与技术。最终提出一种适用于本权限方案的缓存策略，实验与实际 应用证明其可以大幅度提高权限判断系统的效率。  关键词：信息系统  门户系统 角色 组别 权限控制  中图分类号: TP391 文献标识码: A  Enterprise Information System Access Control Mechanism Design and  Implementation  Wang Ke1 Ji Shanshan1,2 Liu Fang1,2 Li Chunwang1 1 (National Science Library, Chinese Academy of Sciences, Beijing 100190, China) 2 (Graduate School, Chinese Academy of Sciences, Beijing 100049, China) Summary: Design and realization resolution plan of a kind of extremely universal access system which can be applied to the enterprise information applications, community system and portal system is put forward. Compared with the traditional role-based permission control method, group, global role, group role, access object types and other elements is added to this scheme, users and resources can be more reasonable in management and organization and different logic for permissions judgment is allowed to used in it. Then, the formal definition of this method, as well as a specific of application, implementation scheme and technologies is described. Finally a kind of cache strategy for this application is put forward, and the efficiency improvement of the permissions system is proved by the experiment and practical application. Keywords: Information System, Portal System, Role, Group, Permission Control 0 引言  当前，企业信息化不断发