本文通过研究RBAC(Role Based Access Control)的经典模型,针对Web资源访问的特点和安全问题,给出了Web系统安全管理模块的设计原则,然后以Spring Security作为框架,给出了安全管理模块的无侵入式的实现方法。
By researching the classic models of RBAC, the article introduces several discipline of designing the security management module of web systems, aiming for solving the security problems of the web system. The article also introduces a way of implementing the security management module by means of the structure of spring security.