Access authority control method, device and system

Abstract

The embodiment of the invention provides an access permission control method, an access permission control device and an access permission control system. The access permission control method comprises the following steps that first user information and first visit object information transmitted through an application programming interface when application program invokes the application programming interface are obtained; when a first user corresponding to the first user information does not have the access permission of system resources indicated by the first visit object information, virtual resources are visited according to the first visit object information to generate the first visit result, and in addition, the first visit result is returned to application program through the application program interface. The access permission control method, the access permission control device and the access permission control system provided by the embodiment of the invention have the advantages that when users do not have the access permission of the system resources, the normal operation of the application program can be ensured through visiting the virtual resources, the abnormal exit is avoided, and the operation reliability of the application program and the flexibility of user permission setting are greatly improved.

Description

technical field [0001] The embodiments of the present invention relate to the field of operating systems, and are particularly applicable to the field of mobile operating systems, and in particular, relate to a method, device and system for controlling access rights of an operating system. Background technique [0002] Role-based access control is a common access control strategy, which statically configures the scope of user permissions by setting the relationship between user-role-permission. In the permission configuration process, first define multiple roles, different roles have different access permissions, divide users into multiple user groups, and set the roles of each user group to realize the control of user access permissions. [0003] However, if the user's permissions are modified during the application process, such as canceling the access to system resources, the application may not run normally due to the inability to access system resources, and may even ca...

Images