System and method for realizing data authority control based on metadata in big data environment

Abstract

The invention relates to a system for realizing data authority control based on metadata in a big data environment. The system comprises: a metadata management module used for acquiring metadata information in the big data environment from different databases through a built-in adapter; a authority configuration module which is used for configuring authority marks of metadata for different roles;and an authority service module which is used for generating an authority service interface according to the stored authority information and providing authority authentication service to the outside.The invention further relates to a method for realizing metadata-based data permission control in the big data environment. The system and the method for realizing data authority control based on metadata in the big data environment are adopted; the problem of data permission control of different types of databases is solved, meanwhile, a large amount of encoding time for data acquisition is saved, the complexity of data permission control is reduced, the problems that cross-system data permission control cannot be performed and the permission control process cannot be effectively monitored at present are solved, and unified control of data permission is realized.

Description

technical field [0001] The present invention relates to the field of computer software, in particular to the field of data authority control, and specifically refers to a system and method for realizing data authority control based on metadata in a big data environment. Background technique [0002] With the continuous development of government and enterprise informatization, the number of systems and the amount of data continue to increase, and security issues have become an issue that needs to be focused on in the process of informatization construction, and authority control is particularly important. [0003] Generally speaking, authority control includes functional authority control and data authority control. Data authority control includes data operation authority, report access authority, statistical index operation authority, etc. Compared with function authority control, data authority control has more detailed and complex At the same time, the databases used by di...

AI Technical Summary

Problems solved by technology

[0008] In the existing technology, for data authority control, data operation authority, report access authority, and statistical index access authority need to obtain data tables, fields, reports and statistics respectively through coding Index information, and then configure and save the relationship. The implementation method is complicated and difficult to operate. At the same time, because the databases used by different business systems may be different, it is necessary to perform coding adaptation for different database types. When new ones need to be done For authority-controlled data, customized processing is required. In addition, the existing data authority control method is only applicable to this system, and the data authority of third-party systems accessing this system cannot be controlled, and the scalability is poor and the later maintenance costs High, it is difficult to achieve unified control over multi-source heterogeneous data permissions

Images