摘要： 介绍了基于角色的访问控制理论和Spring的框架,给出了一个以角色为基础、基于Spring的访问控制系统框架及实现。设计方案将各种资源抽象成URL和MODTHOD,采用Filter技术集中管理,从而实现应用逻辑与安全逻辑分离的目的。

关键词: 角色, 访问控制, Spring

Abstract: This paper introduces an access control theory based on role and Spring frame,it also gives out the realization and frame of the access control system based on role and Spring. The design scheme abstracts various kinds of resources into URL and MODTHOD,the design scheme also uses Filter technology to manage centrally,in this way the application logic and the security logic have been separated.

中图分类号: 

• TP393.08