Method and device for setting data authority

Abstract

The invention discloses a data permission setting method and apparatus, which is used for realizing accurate and differentiated data permission control and achieving double purposes of unified control and differentiated permission types. The data permission setting method comprises the steps of creating a permission setting tree used for setting user data permissions in a plurality of application systems, wherein the permission setting tree comprises a preset root node containing the user data permissions in all the application systems, branches used for setting the user permission data in the application systems, and main nodes in the branches corresponding to the application systems, the branch corresponding to each application system further comprises multiple layers of sub-nodes, and the multiple layers of sub-nodes and a key value and an attribute of each sub-node are dynamically set by the application system; and setting the user data permission in the application system in the branch corresponding to any application system.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for setting data permissions. Background technique [0002] With the rapid development of informatization, there are more and more application systems for enterprises and institutions to divide labor to complete various businesses. The application systems are numerous and independent of each other, which brings many difficulties to the use and management of users. Therefore, each independent application It is the most basic requirement to integrate and realize unified user management to meet single sign-on. On the basis of unified user management, it is urgent for users to set unified function permissions and data permissions for each business system. However, in terms of data permissions, there is a huge obstacle in the unified setting. Because the data permissions of each business system vary with the needs of business applications and the difference...

AI Technical Summary

Problems solved by technology

[0008] In the prior art, each application system has various requirements for data classification and data permission setting according to business application needs, and the difference is huge. The unified user management system can only provide a simplified unified setting mode similar to table-field, which is difficult to meet Diversified data management and authorization control of various business systems severely limit the needs of business applications

For complex data control and authorization requirements, it can only be realized by each application system. The result is the separation of user management and data authorization, which is inconvenient for customers to use and error-prone. The application system needs to synchronize the data of the user management system and store it redundantly. , resulting in an increase in system design and development costs, increased difficulty and reduced reliability, and at the same time made unified user management lose a great deal

[0009] To sum up, in the prior art, when setting the data permissions of users in various application systems, only a simplified and unified setting mode similar to table-fields can be provided, which is difficult to satisfy diversified data management and authorization control. Moreover, if the user's data permissions are set by each application system, it is not only difficult, but also has low reliability, and at the same time makes unified user management useless.

Images