一种细粒度数据权限控制框架
作者:
作者单位:

作者简介:

通讯作者:

基金项目:

国家自然科学基金资助项目(62162038)


A fine-grained data permission control framework
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
    摘要:

    SaaS作为一种热点服务模式,其服务框架的权限控制方面存在数据粒度粗及配置灵活度不足等问题。为此,在RBAC模型的理论基础之上,结合SaaS的特点提出了一种细粒度数据权限控制模型(fine-grained data permission control,FDPC)。该模型首先将数据对象与企业组织结构映射成不同粒度的数据权限;其次依据企业授权业务需求,采用将功能权限集合和数据权限集合中的对象两两组合的方式,形成组合权限对象,并将其分配给不同角色,从而达到灵活授权和细粒度数据控制的目的;最后选用Spring Security和MyBatis框架,依据AOP切片原理,采用结构化查询语句拼接方式,对FDPC模型进行实现,构建权限控制框架。通过在实际业务系统中应用,结果表明该框架合理可行,有效地提高了权限控制的灵活性。

    Abstract:

    As a hot service mode, SaaS has some problems such as coarse data granularity and insufficient configuration flexibility in the permission control of its service framework. Therefore, a fine-grained data permission control model (FDPC) was proposed based on the theory of the role based access control (RBAC)model and the characteristics of SaaS. Firstly, data objects and enterprise organizational structure were mapped by the model into data permissions of different granularities. Secondly, the method of combining the objects in the functional permission set and the data permission set in pairs to form a combined permission object was adopted according to the business requirements of enterprise authorization. Different roles were assigned to achieve the purpose of flexible authorization and fine-grained data control. Finally, Spring Security and MyBatis frameworks were selected. According to the AOP slicing principle, the FDPC model was implemented by structured query statement splicing and the authority control framework was constructed. Through the application in the actual business system, results show that the framework is reasonable and feasible, and the flexibility of authority control is effectively improved.

    参考文献
    相似文献
    引证文献
引用本文

邓斌,丁家满,姜瑛,贾连印,江虹.一种细粒度数据权限控制框架[J].上海理工大学学报,2023,45(6):636-644.

复制
分享
文章指标
  • 点击次数:
  • 下载次数:
历史
  • 收稿日期:2022-04-25
  • 最后修改日期:
  • 录用日期:
  • 在线发布日期: 2023-12-28