Authorization method capable of displaying current authority states of all system users

Abstract

The invention discloses an authorization method capable of displaying the current authority states of all system users. The authorization method includes the steps that a form is selected; one element item of one element of the form is selected; all the system users in the system are displayed after the element item is selected, and the current authority state of the element item selected by each system user is displayed; the element items of one or more system users are authorized. After all the system users in the system are displayed, the current authority state of the element item selected by each system user is displayed, so that an authorization operator conducts modification on the basis conveniently to authorize the element items selected by the system users, and the authorization efficiency is improved.

Description

technical field [0001] The invention relates to an authorization method for management software systems such as ERP, in particular to an authorization method for displaying the current authority states of all system users. Background technique [0002] Role-based access control (RBAC) is the most researched and thoughtful database permission management mechanism in recent years. It is considered to be an ideal candidate to replace traditional mandatory access control (MAC) and discretionary access control (DAC). The basic idea of ​​role-based access control (RBAC) is to divide different roles according to different functional positions in the enterprise organization view, encapsulate the access rights of database resources in roles, and users can indirectly access database resources by being assigned different roles. [0003] There are often a large number of tables and views in large-scale application systems, which makes the management and authorization of database resourc...

AI Technical Summary

Problems solved by technology

The above two processing methods not only take a long time to authorize the role in the case of many role permissions, but also are prone to mistakes. The operation of the user is cumbersome and troublesome, and it is also easy to make mistakes and cause losses to the system user.

[0011] 2. It is difficult to remember the specific permissions contained in the role for a long time: If the role has many permission function points, it is difficult to remember the specific permissions of the role over time, and it is even more difficult to remember the permission differences between roles with similar permissions. To associate a new user, it is impossible to accurately determine how to choose the association

[0012] 3. Due to the change of user permissions, more and more roles will be created (if no new roles are created, the direct authorization to users will be greatly increased), and it is more difficult to distinguish the specific differences between the permissions of each role

[0013] 4. When transferring a post, if you want to assign many permissions of the transferred user to several other users, you must distinguish these permissions of the transferred user during processing, and then create roles to associate with the other users. users, such an operation is not only complicated and time-consuming, but also prone to errors

[0014] like Figure 4 As shown, in the authorization methods of the existing forms, if you select two or more employees and then select a form, the authorization status of the selected employees to the selected form cannot be displayed; similarly, if you select a form , and then select two or more employees, the authorization status of the selected employees for the selected form cannot be displayed

Makes it easy for the authorized operator to make mistakes when authorizing multiple users at the same time

[0015] For example, according to management needs, the company now needs to adjust the view / modify permission of the customer phone field on the customer form (for example, some users with viewing permission are adjusted to have no viewing permission, some users without viewing permission are adjusted to have viewing permission, and some Users without modification rights are adjusted to have modification rights, some users with modification rights are adjusted to have no modification rights, and some users’ rights are not adjusted), the existing method can only select users and forms in turn, or select forms and users in turn, Then authorize the customer phone field of the form. If you authorize users one by one, the workload will be huge and error-prone; if you choose multiple or all user authorizations, you can only authorize the customer phone field uniformly. Authorization means that all users who are selected have the same authority, and cannot perform differential authorization

Most importantly, it is impossible to display the previous authorization status of each user to the customer phone field. Without the previous authorization status of each user in the customer phone field as a reference, the authorized operator does not know the previous authorization status of these users to the customer phone field. It is easy for authorized operators to make mistakes in authorization

Images