An authority control model based on RBAC

Traditional access control based on user or role is difficult to coincide with the actual management mode. In this paper RBAC technologies were introduced. Design and implementation of authority management components were discussed according to RBAC model and theory. The authority management components were implemented in way of Struts+Spring+Hibernate framework. In end of this paper system test was carried on. The test results showed that confidentiality of information on OA system and correctness of accessing resource are both improved by authority management based on role. It makes system security mechanism more flexibility.