A business report data authority control method based on two-layer authority control

Abstract

The invention discloses a business report data authority control method based on double-layer authority control, which obtains various basic elements composed of business report data authority, and assigns corresponding keys to the basic elements, wherein the basic elements include Departments, roles, and personnel; calculate the corresponding authorized personnel range based on the outer authority algorithm, and store the constructed outer authority set in the alliance chain; calculate the intersection of the authorized personnel scope and the viewing scope of the obtained business report, and complete Build the inner permission set and store it in the private chain; obtain user information and corresponding keys, and obtain the intersection with the outer permission set and the inner permission set respectively, and control and display the business report , so that different people can view different data ranges under the same data item.

Description

technical field [0001] The invention relates to the technical field of data authority system development, in particular to a business report data authority control method based on double-layer authority control. Background technique [0002] In the data era, raw data can be presented in the form of business reports after being processed by back-end technology or big data technology, which can be in the form of statistical tables or statistical graphics. Users can guide management based on the data presented in charts and help with decision-making. [0003] At present, there are rights management through monitoring account login on the market, and different rights are granted according to different roles, or the most fine-grained personal rights management is achieved through hardware. However, the rights management only on the login side is relatively extensive and fine-grained to everyone. The post-development workload is very heavy, and it is relatively difficult to adjus...

AI Technical Summary

Problems solved by technology

[0003] At present, there are rights management through monitoring account login on the market, and different rights are granted according to different roles, or the most fine-grained personal rights management is achieved through hardware. However, the rights management only on the login side is relatively extensive and fine-grained to everyone. The post-development workload is very heavy, and it is relatively difficult to adjust permissions after personnel change roles. These permission controls are limited to the functional level, that is, users with viewing permissions can see the same data content, and it is impossible to control different people to see different data items. range effect

However, actual business report data has data viewing range requirements, that is, different people see the same data item but the range of data values ​​is different. Business reports in actual scenarios often distinguish data according to different jurisdictions. There is no permission control method for business report data to enable different people to view different data ranges under the same data item

Images