An access control method, device, computer equipment and storage medium

Abstract

The embodiments of the present disclosure disclose an access control method, an apparatus, a computer device, and a storage medium. Wherein, the access control method includes: determining at least one role to which a target user belongs, where the target user is a user who initiates an access request for a target function; determining a first function code corresponding to the target function and at least one function to which each role is authorized corresponds If the second function code includes the first function code, the target function page corresponding to the target function is displayed. The technical solution of the embodiments of the present disclosure overcomes the problem that the existing role-based access control model uses URI to authorize roles, which is difficult to implement the authorization of system resources in a detailed manner, and easily causes authorization confusion. In the information system, under the premise of not causing confusion of authorization, the effect of authorization to system resources can be realized in more detail.

Description

technical field [0001] Embodiments of the present disclosure relate to the technical field of information security management, and in particular, to an access control method, device, computing device, and storage medium. Background technique [0002] In the enterprise information system, users' access to system functions and resources must be controlled according to the requirements of enterprise management, and users are only allowed to access the system within the scope of authorization. [0003] The existing permission model is RBAC (Role-Based Access Control, role-based access control) model, which usually uses the URI (Uniform Resource Identifier, Uniform Resource Identifier) ​​corresponding to system resources to identify an Internet resource name string) to authorize the role to achieve the effect of authorizing functions and resources to the personnel in the role. [0004] However, the existing RBAC model uses URI to authorize roles as a coarse-grained authorization...

AI Technical Summary

Problems solved by technology

[0004] However, the existing RBAC model uses URI to authorize roles as a coarse-grained authorization method. Although URI itself can be divided into fine details, it cannot clearly describe the function itself, and because of the absolute uniqueness of URI, there is no grouping The concept of the function aggregation in the system is also very descriptive. If the authorization is divided according to the fine-grained dimension, it will cause serious authorization confusion, especially when the function grouping form changes, the fine-grained URI authorization is even more difficult to deal with.

Therefore, it is difficult to use URI to authorize roles to meet the authority requirements of complex enterprise information systems.

Images