Method and system of controlling data access permission

Abstract

The invention discloses a method and a system of controlling data access permission. According to an embodiment of the invention, a terminal receives a user-triggered operation instruction for visiting a management platform of a virtual machine, so that an access control strategy, which is stored by the management platform of the virtual machine, is obtained; the terminal generates a corresponding access mapping manner according to the access control strategy; the terminal controls the access permission of a user to the operating virtual machine on the management platform of the virtual machine based on the access mapping manner; in comparison with the prior art, as for a processing manner that data in a VDI (Virtual Device Interface) is only read and written or is totally unable to read and write, the embodiment of the invention has the beneficial effect of configuring the data access permission for the VDI according to the actual requirements, the application range of the operating virtual machine in the VDI is enriched, and the interactivity of a person and a machine is improved.

Description

technical field [0001] The present invention relates to virtualization technology, in particular to a method and system for controlling data access authority based on VDI (Virtual Desktop Infrastructure, virtual desktop infrastructure). Background technique [0002] The application of the VDI solution can centrally manage the data of each PC (Personal Computer, personal computer) and further improve the data security. Therefore, the application of the VDI solution will become more and more extensive. When applying the VDI solution, all data controlled by the enterprise are stored in the VDI virtual data center. When users transfer data between inside and outside the virtual data center, the common practice is to use the scheme of disk or device mapping; this processing method makes it possible to copy data between inside and outside the virtual data center, or not to copy data between each other. For some requirements such as only allowing data to be copied into the virtual...

AI Technical Summary

Problems solved by technology

When users transfer data between inside and outside the virtual data center, the common practice is to use the disk or device mapping scheme; this processing method makes it possible for the inside and outside of the virtual data center to either copy data to each other, or not to copy data to each other

For some requirements that only allow data to be copied into the virtual data center but not reverse copy, or only allow data in the virtual data center to be read but not allowed to copy data into the virtual data center, the above solutions cannot meet the requirements

Images