Authority control method base on resource granularity

Abstract

The invention relates to the technical field of resource operation authority control, in particular to an authority control method base on resource granularity. The authority control method comprises the following steps: an administer conducts pre-authorization on a specific role according to a resource type; then, when an authorized user conducts operation on the resource, an authority control system confirms whether the user has operation authority or not; if the user has operation authority, the authority control system continues to detect whether the user is the creator of the resource or not, otherwise, the authority control system detects whether the user acquires operation authority of the resource through authorization or not; if the operation user is confirmed to be the creator of the resource, the user conducts operation on the resource, otherwise, the user accesses the authority control system to detect whether the user acquires operation authority of the resource through authorization or not; if the detection result shows that the user acquires operation authority of the resource through authorization, the user is permitted to conduct operation on the resource, otherwise, the user is refused to conduct operation. The authority control method solves the problem that operation authority control of resource in cloud computing environment is tedious, and can be applied to authority control of virtual machine resource granularity in cloud computing.

Description

Technical field [0001] The invention relates to the technical field of resource operation authority control, in particular to a resource granularity authority control method. Background technique [0002] In a resource management system, a role-based authority control system is usually used, which can only restrict users' operations on a certain function. The granularity of this restriction method is too coarse and is only suitable for simple information systems. When different users of the same role have different control rights to the same resource; for example, in a cloud computing environment, all ordinary users can control the cloud host Control, but different users can only control the cloud host they purchased. At this time, this method is not applicable. Generally, a rigid judgment of the user name is added on the basis of the role-based permission control system. The implementation steps are as follows: [0003] 1. Like the traditional role-based permission control syste...

AI Technical Summary

Problems solved by technology

[0012] The technical problem solved by the present invention is to provide a permission management method based on resource granularity, which solves the problems of reducing a large number of permission configuration tasks, flexibly configuring permissions according to actual business needs, and adapting to flexible use scenarios.

Images