Dynamic rights management system based on improved RBAC model and Spring Security framework

Abstract

The invention discloses a dynamic rights management system based on an improved RBAC model and a Spring Security framework. The system firstly transfers the concept of "inheritance" on the user groupmodule to the role module, merges the user group module and the role module to some extent, then modifies the definition of website resources in the RBAC model, adopts the control of the method in theweb server controller to satisfy the most application scenarios, and finally adds a user additional permission association table and a user shielding permission association table to increase the flexibility of permission configuration in conjunction with the Spring Security framework. The invention can quickly mark resources of the website through the annotation control method, realize the dynamic rights management scheme based on the improved RBAC model through database management, and can be conveniently integrated into the mainstream Java background server with high flexibility, which greatly reduces the workload of webmasters.

Description

technical field [0001] The invention belongs to the technical field of computer software background servers and management systems, and in particular relates to a dynamic authority management system based on an improved RBAC (Role-Based Access Control) model and a Spring Security framework. Background technique [0002] In recent years, with the continuous advancement of computer technology and the continuous development of Internet technology, Internet applications and Internet management platforms have penetrated into various fields of life and production, and the scale of Internet applications and Internet management platforms has become larger and larger. With the application of Internet applications and management platforms becoming wider and wider, the scale is getting larger and larger, the number of users is also increasing, and the scale of system resources is also increasing. In practical applications, specific resources must only have specific resources. user acce...

AI Technical Summary

Problems solved by technology

[0005] The Chinese patent with the publication number CN107194269A provides an RBAC-based cipher machine and access control method, but there are two problems in this patented technology: the first problem is that there is no hierarchical inheritance relationship between roles, which will greatly increase the maintenance of the system administrator. workload; the second problem is that the resources to be protected in the system are relatively single; and the website server is different, and the resources of the website server are various and huge in quantity, so it is still a problem to be solved to organize and mark the resources of the website server. The application of the solution is very narrow and the versatility is not strong

[0006] The Chinese patent with publication number CN107707572A provides a role-based WEB security access control method, which realizes complete website authority control and is also an implementation of the RBAC model; in order to ensure complete control of website resources, the control method needs Instantiate the system resource table into multiple specific tables, but the instantiation of the system resource table into multiple specific tables needs to be implemented according to a specific system, which leads to the degree of coupling between the rights management method and the actual system Very high, the design and implementation of the system resource table may be very different in different systems, and the portability and versatility of the method are not strong

Images