Online Examination System: A Role-Based Web Platform for Secure and Efficient Assessments

This proposal presents the research and development plan for a Secure Online Examination System whose central technical contribution is a normalized, PostgreSQL-based Role-Based Access Control (RBAC) authorization architecture, expressed through an object-oriented, composition-driven domain model in Python. Rather than treating the examination system itself as the object of study, this proposal treats it strictly as an application context: a realistic environment in which a rigorous, reusable RBAC database design can be demonstrated, justified, and evaluated. The central academic argument of this proposal is: A normalized PostgreSQL RBAC database combined with an object-oriented, composition-based authorization model can provide a flexible, maintainable, and secure authorization foundation for an Online Examination System. This argument is developed through five interlocking contributions: (1) a five-table relational RBAC schema built around users, roles, permissions, and two junction tables; (2) a full entity-relationship analysis with normalization justification; (3) PostgreSQL data definition language (DDL) and representative seed data; (4) a layered Flask application architecture in which authorization logic is abstracted away from route handlers through an RBAC service and repository; and (5) a Python object-oriented domain model that favors composition of Role and Permission collections over subclassing of User. The proposal further specifies a security analysis, a use-case walkthrough, a unit-testing plan, and a twelve-week development timeline, all oriented around RBAC as the primary deliverable. Throughout, functional aspects of the examination system that are not required to demonstrate RBAC — grading logic, proctoring, and user-interface design — are deliberately kept out of scope, so that the proposal maintains a single, sustained technical focus.

04 Sep 2026 0 173