A Design Method of Multi-Dimensional Authority Model for Matrix Management

Abstract

The present invention proposes a multi-dimensional authority model design method for matrix management, including the following steps: the system administrator grants information authority to users or roles through information management objects: after enabling the information management objects, the system administrator performs user or role Authorize information access rights, and bind metadata fields with management objects; in metadata, define the accessible range of information resources, and bind a data type of information resources to information resource objects; system administrators in the authorization interface , to grant access to data range permissions to each information management object of a user or role, and to control the scope of accessible resources by setting information management object values ​​or conditions. The present invention can not only handle vertical and vertical management and control of business documents, but also handle horizontal business collaboration of business documents, and use information management objects as information authority control dimensions to control information authority conveniently, quickly and accurately through information resource authorization of information management objects.

Description

technical field [0001] The invention relates to the technical field of authority management, in particular to a multi-dimensional authority model design method for matrix management. Background technique [0002] Traditional authority management method 1: authority means that the system (or organization) grants a specific user certain operating rights (or functions) to information resources (or objects); Have the right to prepare procurement plans, enter purchase orders, receive purchased materials, and pay suppliers. The specific implementation method is: separately define the user's operation authority to the information resources; this is one of the most important foundations of the information system data security. [0003] However, since the system administrator needs to individually authorize all operable information resources of all users, the workload is huge; [0004] Traditional rights management method 2: The concept of roles has been introduced internationally;...

AI Technical Summary

Problems solved by technology

[0007] (1) The definition of information isolation rules is too complicated and requires high skills for administrators;

[0008] (2) The definition of information segregation rules is not intuitive, it is not easy to easily track errors in empowerment, and there is a high risk of information leakage;

[0009] (3) When the time for data filtering and processing by SQL language is too long, the performance of the system is significantly reduced, which greatly reduces the user experience;

[0010] (4) When there are many information resources that require authority control, such as complex and diverse business documents, the workload of administrator empowerment is still very large

Images