基于 MVC 架构的网站 RBAC 访问控制框架设计与实现xx 科技学院毕业设计论文姓名：xxx专业：计算机科学与技术指导老师：xxx摘 要一个实际的商务网站系统除了需要关注于功能需求之外，还需要考虑很多非功能性需求，安全性就是其中一个非常重要的方面。访问控制是几乎所有的应用系统都不可缺少的一部分。本文从 MVC 架构商务管理系统的需求出发，首先分析了几种访问控制的优缺点，在此基础上提出了利用 RBAC 模型来进行系统的访问控制。并将其用于某一具体的商务系统中，给出了实现过程。关键词：MVC、RBAC、访问控制、角色、权限。AbstractWhen functional requirements are chiefly paid attention to by people in a commercial application system, many nonfunctional requirements are also taken into account. Security is one of the most important aspects of the nonfunctional requirements. Access control almost is a necessary part in all application systems. This paper analyses the requirements of comprehensive commercial information management system based on MVC. It analyses the merits and demerits among the common access controls, and proposes process access control based on RBAC model. Finally, it describes how to realize the model in a material commercial system.Key words： MVC，RBAC，Access Control， Role，Permission. 目录引 言.......................................................................................................................................................1第一章 课题背景......................................................................................................................................21.1 MVC 概述........................................................................................................................................21.2 RBAC 模型概述..............................................................................................................................31.2.1 RBAC 原理简介.........................................................................
