Authorization processing method and device

Abstract

The invention discloses an authorization processing method and device. The method includes organizing to-be-authorized resource nodes into a tree-shaped structure or a hierarchy structure; performing appointed authorization on an operation set selected from the to-be-authorized resource nodes; letting subordinate nodes of the resource nodes subjected to appointed authorization in the tree-shaped structure or the hierarchy structure inherit the operation set of the authorization resource nodes. In related prior art, at least one among the problems of inflexible authorization method, indirection authority display and huge amount of authorization number exists in role authorization. The invention provides the flexible authorization method, provides direct authority display and achieves preferable authority storage.

Description

technical field [0001] The present invention relates to the communication field, in particular to an authorization processing method and device. Background technique [0002] In the telecommunication network management system, role-based access control (Role-Based Access Control, RBAC for short) is generally used for user access control, that is, the authority is assigned to a role, and the user has the authority of the role by associating with a certain role. When a user logs in to the system, since the user is associated with a certain role, only the resources restricted by the role can be allowed to operate, so as to achieve the purpose of access control. The process of creating roles and associating roles to users is called authorization. The RBAC model provides the flexibility of permission control. Permissions are abstracted to roles, and users are no longer directly granted permissions, but are granted permissions through roles. Users and roles form a many-to-many ma...

AI Technical Summary

Problems solved by technology

[0008] Through the above steps, the role authorization method in the related technology solves the problem of massive resources and operation authorization by establishing an operation set and a resource set, but there are also some problems in the above method, for example, 1. When the resource changes, it cannot automatically Obtain or cancel operation permissions, for example: when resources are added, the added resources cannot automatically obtain permissions, and the resource set must be manually modified to add new resources to the resource set; when resources are deleted, the deleted resources cannot automatically cancel permissions, The resource set must be manually modified to delete resources from the resource set; 2. It is impossible to visually display the permissions granted by each resource on the resource tree

Because the operation set is granted to the resource set instead of a single resource, it is impossible to visually display the operation set granted to each resource on the resource tree; 3. When the number of resources is huge, such as when the number of resources reaches 100,000, Each resource set needs to persist a large amount of data

Once the number of resource sets is large, the entire data volume becomes very large, basically unable to cache in memory, and must be read through the database, resulting in low authentication efficiency

[0009] Therefore, in related technologies, at least one of the following problems exists when performing role authorization: the authorization method is not flexible, the permission display is not intuitive, and the problem of a huge number of permissions

Images