Abstract: Access control is the main strategy for prevention and protection of network security and the access control technology based on management area has a great significance in forestry web application security. This paper analyzes the needs for management area based access control in the forest resource management. A set of access control scheme based on RBAC is designed to support the user authorization with management area. At last, an access control system was developed and applied to a web-based afforestation design system,in which the users access the system resources restricted by the management area. The application of the access control system can meet the needs of the secure data sharing in forest resource management.

Key words: access control, management area, geocoding