Authorization control method and authorization server

Abstract

The embodiment of the invention discloses an authorization control method and an authorization server. The method comprises the following steps of: respectively establishing a role list and an authority list for the role and authority of a current system, wherein the role and authority belonging to the same subsystem of the current system have the same source identifier; when receiving a command sent by a management terminal for carrying out authorization on the role, obtaining the source identifier of the role according to the command; searching the authority list to obtain the authority of which the source identifier is consistent with that of the role; and returning the obtained authority to the management terminal. In the embodiment of the invention, through the resource identifiers ofthe role and the authority, the authority of the same subsystem, to which a certain role belongs, can be selected for the role from all the authorities of the current system and only return the authority of the same subsystem; and as the extent of authority of the subsystem is far smaller than that of the current system, the burden of a system administrator is reduced and the authorization speedis increased.

Description

technical field [0001] The application relates to the field of computer technology, in particular to an authorization control method and an authorization server. Background technique [0002] In the existing Internet application system, a simple level control method is usually used to control the authorization of the user, that is, for some content in the application system, as long as the user reaches the system preset level, he has the authority to operate the content. This level control method is also called role / authority control method. Taking the forum system as an example, by assigning certain permissions to the moderator (role), the moderator will associate several users who use the forum to control their rights. [0003] In the prior art, all permissions in the authorization system are pre-stored in the permission list of the server. The authorization system may need to authorize roles in multiple forums through the server. When the server receives the When issuing...

AI Technical Summary

Problems solved by technology

[0004] During the research and practice of the existing technology, the inventor found the following problems in the prior art: when authorizing roles in the prior art, due to the large number of permissions stored in the permission table, when a specific forum When the user authorizes, the server directly returns all permissions to the authorization interface for the administrator to choose, thus increasing the burden on the administrator; especially for large-scale Internet application systems, this authorization method of directly returning all permissions will reduce the authorization cost. speed

Images