Implementation of Access Control Based on AOP and RBAC in ASP.NET MVC
Through the introduction of role, RBAC achieves the logic separation between users and permission, and reduces the complexity of user's permission management. By combining the characteristics of ASP.NET MVC framework, mappings user's permission to the Controllers and Actions, realizes system access control based on RBAC, simplifies the permission management of system. Meanwhile, by introducing AOP, intercepts the controller's action, decouples business logic and access control, the system is more advantageous to maintain and extend.