RBAC role permission design ideas, rbac role design ideas_PHP tutorial

1) It has the functions of creating users, modifying users and deleting users: Administrator

2) Has the function of creating and deleting roles: Administrator

<span> </span>

<span> </span>

<span> </span>

<span> </span>

<span> </span>

Static_User field name

Type

<span> </span>

<span> </span>

<span> </span>

<span> </span>

<span> </span>

<span> </span>

<span> </span>

<span> </span>

using System.Web.Services;

using System.Web.Services.Protocols;

<span> </span>

// AuthHeader class extends from SoapHeader

public class AuthHeader : SoapHeader {

public string Username;

public string Password;

}

<span> </span>

public class HeaderService : WebService {

public AuthHeader sHeader;

...

[WebMethod(Description="This method requires a custom soap header set by the caller")]

[SoapHeader("sHeader")]

public string SecureMethod() {

<span> </span>

if (sHeader == null)

return "ERROR: Please supply credentials";

else

return "USER: " sHeader.Username;

<span> </span>

}

HeaderService h = new HeaderService();

AuthHeader myHeader = new AuthHeader();

myHeader.Username = "username";

myHeader.Password = "password";

h.AuthHeader = myHeader;

String result = h.SecureMethod();

public class ClientClass {

public static void Main() {

GenericIdentity ident = new GenericIdentity("Bob");

GenericPrincipal prpal = new GenericPrincipal(ident,

      Console.WriteLine(data.numOfAccesses);

      ChannelServices.RegisterChannel(new TcpChannel());

      RemotingConfiguration.RegisterActivatedClientType(

typeof(HelloServiceClass), "tcp://localhost:8082");

      HelloServiceClass service = new HelloServiceClass();

      if(service == null) {

          Console.WriteLine("Could not locate server.");

          return;

      }

      // call remote method

      Console.WriteLine();

      Console.WriteLine("Calling remote object");

      Console.WriteLine(service.HelloMethod("Caveman"));

      Console.WriteLine(service.HelloMethod("Spaceman"));

      Console.WriteLine(service.HelloMethod("Bob"));

      Console.WriteLine("Finished remote object call");

      Console.WriteLine();

      //Extract the returned data from the call context

      LogicalCallContextData returnedData =

         (LogicalCallContextData)CallContext.GetData("test data");

      Console.WriteLine(data.numOfAccesses);

      Console.WriteLine(returnedData.numOfAccesses);

   }

}

using System;

using System.Text;

using System.Runtime.Remoting.Messaging;

using System.Security.Principal;

public class HelloServiceClass : MarshalByRefObject {

   static int n_instances;

   int instanceNum;

   public HelloServiceClass() {

      n_instances ;

      instanceNum = n_instances;

      Console.WriteLine(this.GetType().Name " has been created.

             Instance # = {0}", instanceNum);

   }

  ~HelloServiceClass() {

      Console.WriteLine("Destroyed instance {0} of

HelloServiceClass.", instanceNum);     

   }

   public String HelloMethod(String name) {

      //Extract the call context data

      LogicalCallContextData data =

          (LogicalCallContextData)CallContext.GetData("test data");     

      IPrincipal myPrincipal = data.Principal;

      //Check the user identity

      if(myPrincipal.Identity.Name == "Bob") {

         Console.WriteLine("nHello {0}, you are identified!",

myPrincipal.Identity.Name);

         Console.WriteLine(data.numOfAccesses);

      }

      else {

         Console.WriteLine("Go away! You are not identified!");

return String.Empty;

}

<span> </span>

// calculate and return result to client

return "Hi there " name ".";

}

}

1) class UserInfoMng() User information management class, which includes methods:

l CreateUserInfo(string UserName string UserPwd) Create user information and call the stored procedure CreateUserInfo(@UserName,@UserPwd)

l ModifyUserInfo(string UserName string UserPwd) Modify user information and call the stored procedure ModifyUserInfo(@UserName,@UserPwd)

l DeleteUserInfo() Delete user information and call the stored procedure DeleteUserInfo

(@UserID)

2) class UserAuthentication() User authentication class, used to set user roles and permissions, including methods:

l CreatePermissionInfo(string PermissionName string Permissi-

-onNote) Create permission information and call the stored procedure CreatePermissionInfo

(@PermissionName,@PermissionNote)

l CreateRoleInfo(string RoleName string RoleNote) Create role information and call the stored procedure CreateRoleInfo(@RoleName,@RoleNote)

l DeleteRoleInfo() Delete role information and call the stored procedure DeleteRoleInfo

(@RoleID)

l GrantUserRole(string UserID string RoleID string UserRoleNote) Grants the user role and calls the stored procedure GrantUserRole(@UserID,@RoleID,

@UserRoleNote)

l DeleteUserRole() Delete the user role and call the stored procedure DeleteUserRole

(@UserRoleID)

l GrantRolePermission(string RoleID string PermissionID string RolePermissionNote) Grants role permissions and calls the stored procedure GrantRolePermission(@RoleID,@PermissionID,@RolePermissionNote)

l DeleteRolePermission() Delete the granted role permissions and call the stored procedure

DeleteRolePermission(@RolePermissionID)

1) Permission settings

class PermissionInfoMng() User permission information management class, including methods:

l CreatePermissionInfo() Create permission information

2) User Management

class UserInfoMng() User information management class, including methods:

l CreateUserInfo() Create user information

l ModifyUserInfo() Modify user information

l DeleteUserInfo() Delete user information

3) User authorization management

class RoleInfoMng() role information management class, including methods:

l CreateRoleInfo() Create role information

l DeleteRoleInfo() Delete role information

class UserRoleMng() User role management class, including methods:

l    GrantUserRole() Grants user role

l DeleteUserRole() Delete user role

class RolePermissionMng() Role permission management class, including methods

l    GrantRolePermission() Grants role permissions

l DeleteRolePermission() Delete role permissions

4) User authentication management

class Authentication() User authentication class, including methods:

l Login(string UserName string UserPwd) User login authentication. After user authentication, a TicketID is assigned to the user, otherwise the TicketID is null

l Logout() The user logs out normally