Design and Implementation of Authorization Management System Based on RBAC

Abstract:

Authorization Management is one of the key components in Management Information Systems (MIS) for the security consideration. The adopting of Role-Based Access Control (RBAC) approach makes Authorization Management more efficiency and security. In this paper, we present a way to manage user’s privilege by constructing user’s function menu in the tree pattern based on RBAC in web-oriented system. The architecture of the Authorization Management System, the design of the database, the constructing of dynamic resource tree and the verification of user’s privilege are mainly introduced. The development of the system is under MyEclipse IDE and using MVC pattern.

• Periodical: Advanced Materials Research (Volumes 532-533)
• Pages: 586-590
• DOI: https://doi.org/10.4028/www.scientific.net/AMR.532-533.586
• Online since: June 2012
• Authors: Fang Zhao, Lei Wang, Xuan Tian
• Keywords: Authorization Management, Interceptor, Privilege, RBAC

References

[1] Ravi Sandhu, in: Future Directions in Role-Based Access Control Models, Lecture Notes in Computer Science( 2001), pp.22-26.

DOI: 10.1007/3-540-45116-1_4

[2] Dongwan Shin, Gail-Joon Ahn, in: A role-based infrastructure management system: design and implementation, Concurrency Computat.: Pract. Exper ( 2004), p.1121–1141.

DOI: 10.1002/cpe.807

[3] R.S. Sandu, E.J. Loyne, et al, in: Role-Based Access Control Models, IEEE Transaction on Computer(1996).

[4] David F. Ferraiolo, D. Richard Kuhn and Ramaswamy Chandramouli: Role-Based Access Control, Artech House(2003), pp.65-88.

[5] SunXin: Java Web Development, Beijing: Electron & Industry Publisher(2003).