Design of Authentication and Authorization Management System Based on Acegi

The traditional authentication and authorization system is difficult to reuse.On the basis of Acegi extension and AOP application,the paper specifies the design of security system which can dynamically change the permissions during the run-time.The system configures filter chains to implement authentication and the interceptor to complete the authorization.It realizes the unification of a variety of authentication mechanisms with simple management permission and flexible resources controlling.