An organizational structure chart generating method based on one-to-one correspondence of roles and users, and an applying method

Abstract

The invention provides an organizational structure chart generating method based on one-to-one correspondence of roles and users, and an applying method. The generating method comprises the steps of: S1, establishing new departments and selecting higher departments for the new departments if existing departments exist; S2, creating new roles, selecting a department for the new roles and authorizing the roles according to work content of the roles; S3, creating employees, writing the names of the employees, generating a unique user for each employee, and associating each user with one or more roles, wherein one role can only be associated with a unique user in the same period; S4, generating an organizational structure chart according to the hierarchical relationship between departments, the belonging relationship between the roles and the departments, the association relationship between the users and the roles and the association relationship between the users and the employees, wherein user information displayed in the organizational structure chart includes the names and the roles of the users. The organizational structure chart can display the names and the roles of employees and each role is only associated with one employee, so that the responsibility of each employee can be known clearly.

Description

technical field [0001] The invention relates to a method for generating an organizational chart, in particular to a method for generating and applying an organizational chart based on roles one-to-one for users. Background technique [0002] Role-based access control (RBAC) is the most researched and thoughtful database permission management mechanism in recent years. It is considered to be an ideal candidate to replace traditional mandatory access control (MAC) and discretionary access control (DAC). The basic idea of ​​role-based access control (RBAC) is to divide different roles according to different functional positions in the enterprise organization view, encapsulate the access rights of database resources in roles, and users can indirectly access database resources by being assigned different roles. [0003] There are often a large number of tables and views in large-scale application systems, which makes the management and authorization of database resources very com...

AI Technical Summary

Problems solved by technology

The above two processing methods not only take a long time to authorize the role in the case of many role permissions, but also are prone to mistakes. The operation of the user is cumbersome and troublesome, and it is also easy to make mistakes and cause losses to the system user.

[0011] 2. It is difficult to remember the specific permissions contained in the role for a long time: If the role has many permission function points, it is difficult to remember the specific permissions of the role over time, and it is even more difficult to remember the permission differences between roles with similar permissions. To associate a new user, it is impossible to accurately determine how to choose the association

[0012] 3. Due to the change of user permissions, more and more roles will be created (if no new roles are created, the direct authorization to users will be greatly increased), and it is more difficult to distinguish the specific differences between the permissions of each role

[0013] 4. When transferring a post, if you want to assign many permissions of the transferred user to several other users, you must distinguish these permissions of the transferred user during processing, and then create roles to associate with the other users. users, such an operation is not only complicated and time-consuming, but also prone to errors

In the existing organization chart, only the name of the user is usually displayed when the user is displayed, and the responsibilities of each employee can only be roughly understood when making a selection; The corresponding user is not unique, and when making a selection, you can only roughly understand the responsibilities of each employee

In the case of an employee concurrently holding other jobs, it is not possible to distinguish the employee by position. In addition, if you only want to select a certain position of the employee, you cannot choose

Images