User authority management method and device and storage medium

Abstract

The invention discloses a user permission management method. The method comprises the steps: selecting target role information for a user; establishing a role mapping relationship between the user andthe target role information; obtaining a function mapping relationship between the role information and the function point information, wherein the role information is used for representing classification information of users with the same authority, and the function point information is used for representing use authority of a service function; according to the role mapping relationship and thefunction mapping relationship, obtaining the use permission of the service function of the user. According to the user permission management method disclosed by the invention, permission control withfiner permission granularity can be provided, and the management efficiency and accuracy of the user permission are improved. The invention further provides a user permission management device and a storage medium.

Description

technical field [0001] The present invention relates to the technical field of user rights management, in particular to a user rights management method, device and storage medium. Background technique [0002] With the development of information technology, the management and control of user rights of users is also gradually developing towards informationization. [0003] In the prior art, the permission control methods of the system built for java are as follows: [0004] 1. In the interceptor, decide whether to allow access based on user identity information; 2. Use the authentication, authorization, encryption and session management functions provided by the Apache Shiro framework; 3. Use the Spring Security security framework. [0005] The inventor finds in the process of implementing the present invention that there are the following technical problems in the prior art: [0006] In the method of determining whether to allow access based on user identity information in...

AI Technical Summary

Problems solved by technology

[0007] Due to the many concepts involved in the Apache Shiro framework and the cumbersome configuration process, the method of using the authentication, authorization, encryption and session management functions provided by the Apache Shiro framework has low control efficiency;

[0008] The Spring Security security framework is based on Spring AOP and Servlet filters, which is highly intrusive to the system, and the configuration process is generally defined in the form of strings, which is prone to errors

Images