The most intuitive description of RBAC is that permissions are granted to roles, and roles are granted to users. The permissions are the only credits to access resources, but users can’t directly associate with permissions. With core RBAC and some mainstream selections in JavaEE, design and implement the privilege management framework which consists of user login modules and a variety of management operations modules that can manage users, roles and privileges.