User permission management method and system

Abstract

The invention provides a user permission management method and a user permission management system, which aim to solve the problem of complex user permission management. The user permission management method comprises the following steps that primary account numbers are created for all two-stage systems by a client end of a first-stage system administrator; the primary account numbers are respectively sent to client ends of two-stage system administrators of all of the two-stage systems by the client end of the first-stage system administrator, permissions of the client ends of all of the two-stage system administrators are set, and the permissions of the client ends of all of the two-stage system administrators include creation or management of respective two-stage system users and role assignment of the respective two-stage system users; the client ends of all of the two-stage system administrators are used for creating or managing the respective two-stage system users and assigning roles for the respective two-stage system users under the corresponding primary account numbers. By using the user permission management method provided by the invention, in the conditions of multiple users and complex user permissions, hierarchical management is realized, so that the administration authority is clear, and the problem of complex user permission management can be preferably solved.

Description

technical field [0001] The invention relates to the technical field of computer web application systems, in particular to a user authority management method and system. Background technique [0002] Nowadays, most computer web application systems use authentication and user authorization to protect resources from safe operation. Identity verification refers to checking whether the identity information is consistent with the system information, and generally adopts the user name + password method. User authorization refers to checking whether a verified user is allowed to operate a specific resource, usually checking whether the user has relevant roles or relevant permissions, and then performing a comprehensive comparison. [0003] Identity verification in the system is relatively easy to implement, and the difficulty lies in how to carry out effective authorization. At present, the most commonly used mode is RBAC (Role-Based Access Control, role-based access control). The...

AI Technical Summary

Problems solved by technology

[0005] The object of the present invention is to propose a user authority management method and device for complex user authority issues in similar BOSS systems

Images