本文对基于角色的访问控制(Role.Based Access Control)模型进行了研究,并针对Web系统的特点和安全性等问题,提出了相应的设计原则。最后,对应具体项目,采用Flea PHP作为框架,设计并实现了一种专用的扩展权限管理模型。
The article researches models based on RBAC, and then introduces several design principles, aiming to solve the security problems of a web system. Finally, the article designs an extended privilege management model in a real project using the structure of FleaPHP.