Resource access control method

Abstract

The invention discloses a resource access control method, which comprises the steps of inputting basic information of users; performing user validity authentication; obtaining the ID (Identity) of authenticated valid users in a role list; searching a control domain of a resource-permission structure list according to the ID of the users in the role list and in combination with role-permission assignment result information; if the users have resource access permissions, extracting permission character strings and corresponding resource permission lists to dynamically generate a permission-tree and initialize a window. The resource access control method has the advantages that the permissions can be better and dynamically assigned to roles to enable software system users to interact with the system intuitively, conveniently and quickly; the database query time is shortened, the space consumption is reduced, the dependence of the application system on super users is eliminated and the security of the system is effectively guaranteed.

Description

technical field [0001] The invention relates to a resource access control method, in particular to a resource access control method in B / S applications based on FLEX and .NET. Background technique [0002] Generally speaking, in the process of transferring information resources, the three most concerned issues are "which resources need to be protected", "which subjects can access the protected resources", and "what operations these authorized subjects can perform on the protected resources". "The three types of problems correspond to three types of resources, namely subject, object and authority. In essence, access control is to manage and restrict access to system resources through subjects, objects and control strategies to prevent illegal users from entering the system and destroying information resources. , illegal use and utilization of resource information for illegal activities. To solve the above problems, three types of access control technologies can be applied, i...

AI Technical Summary

Problems solved by technology

[0004] 1) In the authorization process, the workload of assigning roles to users and granting permissions to roles is still very large;

[0005] 2) There is a contradiction between the granularity of permissions and the number of roles in large-scale systems

[0006] 3) RBAC is essentially a passive security control model, lacking a flexible dynamic authorization mechanism

Images