基于元数据与角色的煤矿综合信息管理系统权限控制模型设计与实现

分析了现有煤矿信息管理系统中权限控制策略的不足,指出基本的账户控制策略不仅功能简单,且在系统运行过程中无法修改权限,而基于角色的访问控制策略缺少对系统数据的区分,不利于系统的扩展与维护;提出了基于元数据与角色的权限控制模型,通过对用户可访问元数据范围的配置与限制,实现了对用户功能权限和数据权限的管理,并通过元控件实现了权限管理的模块化设计与开发,减少了代码重复率和逻辑复杂度。该模型已应用于多个煤矿综合信息管理系统中,具有很好的灵活性和可操作性。

Design of an access control model based on meta-data and role for integrated information management system of coal mine and its implementation

Shortcomings of access control strategy in existing information management systems of coal mine were analyzed,and some views were pointed out that basic functions of account control strategy was simple in function and immutable in right during system running,and role-based access control strategy was lack of distinction of system data,which led to difficulty of system development and maintenance.An access control model based on meta-data and role was proposed,which implemented right management of user functions and data through configuring and limiting scope of accessing meta-data.Modular design and development of right management were realized by meta-control which reduced code repetition and logic complexity.The model has been used in a couple of integrated information management systems of coalmine and shows good flexibility and operability.