oa-privilege system based on function point

Objective: To design a universal independent authority management system.

Original intention: Many rights management systems are coupled with the business, can not be separated, resulting in a lot of confusion, so that management trouble. If you separate out the Rights Management Section and provide a simple, specific access interface, you will greatly reduce complexity.

Current situation and demand: At present, the OA of B/s structure is in the mainstream of the market. b/s structure is most suitable for most enterprises, which can greatly facilitate the use of customers. This structure is characterized by the submission of requests to the server. Each request can be considered independent. The requests are not coupled.

Solution Idea:
1, according to the above situation, we can divide the system function into "function point"------called "Access function point" (similar to multi-level menu, the customer does not have access to the function will not appear in the menu, so cannot access).
2, in each "Access function point", and then Set "function point"------called "Operation function Point" (such as: for ' news ', we may have a variety of actions: browsing, adding, modifying, deleting, and no operator without ' add ' permission, which will not appear in its action list. This part has a lot of uncertainty ( For example: The operation may have other unforeseen circumstances, how to achieve universal?
3, "data points" belong to the business logic, not within the scope of this discussion.

Specific programmes:

Conclusion: