Web系统中分级用户安全管理的设计与实现-通信与信息系统专业论文.docxVIP

华 华 中 科 技 大 学 硕 士 学 位 论 文 II II Abstract Network is playing a more and more important role in our work and study. The “research management database” has a very important significance to improve information management status of the current social scientific management. Due to a wide range of users of the system, complex hierarchical relationships, rich business resources, a high demand of security module is required. This paper uses the Java programing language, based on the SSH frameworks, in close connection with the security requirements, selects account-role-right structure and the Spring Security framework to design and realize, and builds a simple, scalable and flexible security module. In consideration of system users’ characteristics and actual demand, this paper designs security management for hierarchical users. To meet the complex requirement of users, it designs the authentication based on passport. For the requirement of security module, it designs the system log based on Struts intecptor or log, and supports the search and statistic of log. This paper based on the SSH framework and Spring Security framework, reduce the coupling of the code, and improve the efficiency of the development, realizes the security module that are useable and can be extended, and supplies the interface that can be read and maintained. Keywords：Web Security; Authentication and Authorization; Hierarchical management; Passport; System Log III III 目 录 摘 要 I HYPERLINK \l _bookmark0 Abstract II HYPERLINK \l _bookmark1 目 录 III HYPERLINK \l _bookmark2 缩略语 V HYPERLINK \l _bookmark3 1 绪论 1 HYPERLINK \l _bookmark4 1.1 课题背景及来源 1 HYPERLINK \l _bookmark5 1.2 课题目的及意义 2 HYPERLINK \l _bookmark6 1.3 本文的组织结构 2 HYPERLINK \l _bookmark7 2 相关技术简介 4 HYPERLINK \l _bookmark8 2.1 Java EE 体系 4 HYPERLINK \l _bookmark9 2.2 服务端框架 5 HYPERLINK \l _bookmark10 2.3 前端技术 7 HYPERLINK \l _bookmark11 2.4 本章小结 9 HYPERLINK \l _bookmark12 3 分级用户安全管理设计 10 HYPERLINK \l _bookmark13 3.1 用户