Permission control method and device based on interceptor, computer equipment and medium

Abstract

The invention relates to the technical field of databases and block chains, discloses a permission control method and device based on an interceptor, computer equipment and a medium, and solves the technical problem that more complex code configuration needs to be performed due to the fact that user access SQL logic and business SQL logic are coupled together in a traditional scheme. The method comprises the following steps: intercepting an original SQL request of a front end through an interceptor, wherein the original SQL request comprises a data query range; in response to the original SQL request, obtaining a data permission object corresponding to the current login user; analyzing the data permission object to obtain permission factors of the user, wherein the permission factors comprise service table permission and table field permission owned by the user; comparing and judging the permission of the service table and the query range of the original SQL request; when the query range of the query request is within the service table permission, changing an SQL query logic segment of the original SQL request according to the table field permission to obtain a target SQL request; and releasing the target SQL request to a database, and enabling the database to respond to the target SQL request to execute data query.

Description

technical field [0001] The present application relates to the technical fields of database and block chain, and in particular to an interceptor-based authority control method, device, computer equipment and storage medium. Background technique [0002] Business permissions are different from functional permissions, also known as data permissions. Under the actual organization or personnel structure of an enterprise, people with different authority have different business authority to the system. For example, a claim manager can see all the claims in the claim business system, but a claim specialist can only see some of the claims or claims under his own name. Business permissions can even be fine-grained to the fields in the table, such as some sensitive fields in the claim record, such as the amount of the claim, etc. For people with different powers, whether they can see the fields can be different . [0003] The inventor found through research that if a complex query t...

AI Technical Summary

Problems solved by technology

[0004] The embodiment of the present application provides an interceptor-based authority control method, device, computer equipment, and storage medium to solve the technical problem that the authority control scheme of the traditional solution is strongly related to business logic, and the development work is relatively cumbersome.

Images