User authority allocation method and user authority control method

Abstract

The invention provides a method for controlling user rights. The method comprises the following steps: a user role is correspondingly acquired from a preset user role mapping relational table; the resource access right of the role is picked up, and the resource access right is defined by a regular expression, recorded in a right definition file, and marked by an exclusive resource code; the resource access request from the user is intercepted, and the resource code of the resource is acquired; by matching the resource code with the resource access right of the role, if matched, the resource is returned to the user; and if not matched, the resource access request from the user is refused. In the inserting mode, the method can be applied to e various system structural frames; moreover, the method also has the advantages of wide application range, flexible definition, and obvious lowering of system development and operation costs.

Description

technical field [0001] The present invention relates to the field of user authority control, in particular to a method and device for assigning user authority, and a method and device for user authority control. Background technique [0002] In the application system development, it is a very important function to add permission control function to the application system so that different users have different resource access permissions. In the existing technology, the permission control function of the application system is often tightly coupled with each resource access module, that is, adding corresponding permission check codes for each resource access module, mixing program functions and permission checks together, obviously in this In this way, it is difficult to expand and modify the authority control function, and only a single resource type can be protected. [0003] In this case, the existing Tomcat solves the above problems by providing Realm support. Realm is s...

AI Technical Summary

Problems solved by technology

[0004] However, Tomcat Realm must be defined in the configuration file of the web server software Tomcat, so it only supports web applications based on the B / S architecture, and relies heavily on the web server software Tomcat, and can only be applied to web applications deployed on Tomcat Correspondingly, Tomcat Realm only supports permission control for web application URLs

Moreover, when it defines which URLs a certain role can access, there are only two ways: URL list and * wildcard, so the permission definition of Tomcat Realm is relatively simple

Images