中文摘要：

针对现有大部分应用系统需要通用访问控制模块及访问检测被分散在应用系统各个部分中的问题,分析了访问检测的独立性和非集中性特征,提出一种将接口抽取方法与关注点分离思想结合的可插拔访问控制框架,给出接口抽取法的形式化定义、插拔配置的方法和步骤、访问控制判定实现过程,解决了各领域重复开发访问控制模块及部署时给应用系统带来的代码冗余、难以维护重用的问题。最后给出考试系统中的一个应用实例。

英文摘要：

Many application systems need access control module. However, it has not a general access control module which is accepted by peoples, access detection operations often spread out in various parts of application systems. The paper presented a pluggable framework for access control （PFAC） used the thought of interface extraction method with separation of concerns, gave the formalized definition of extraction method and processes of configurations of framework. PFAC solvecd problems which lead to the development of duplicate access control module, redundancy and difficult reuse of code. Finally, implemented the framework by using Java language, and gave an application in examination system.