Multi-tenant authority control method and system

Abstract

The embodiment of the invention discloses a multi-tenant authority control method and system, and the method comprises the steps: judging a user type of a user according to user account information sent by a client, and sending a user type token and user information to the client, so that the user carries out the operation according to the user information; according to a user operation request sent by the client, calling a multi-tenant authority control model to judge whether the role of the user and the tenant relationship identifier have the authority of operating the identifier in a database, and returning a judgment result to the client; and according to a data calling request sent by the client, calling a multi-tenant authority control model to judge whether the role of the user and the tenant relationship identifier have the authority of the data identifier in a database, and if so, calling corresponding data and returning the data to the client. The client and the server can perform multi-permission inspection on user requirements, so that unauthorized operation is prevented, and data redundancy of a database is reduced while security is improved.

Description

technical field [0001] The embodiments of the present application relate to the field of computer technology, and in particular to a multi-tenant authority control method and system. Background technique [0002] With the development of industrial informatization, authority control and user access security issues are becoming more and more important. [0003] Usually, for general business systems, the permission model generally adopts the traditional RBAC (Role-Based Access Control, role-based access control) model, while for multi-tenant industrial systems, the permission system designed by the traditional RBAC model It will make the role table data redundant, and the scope of data isolation is limited, so it is impossible to realize the data isolation of the same user in different tenants. However, the existing industrial system only authenticates the user's authority through the server. This kind of authentication method is too single, and it is easy to be operated by u...

AI Technical Summary

Problems solved by technology

[0003] Usually, for general business systems, the permission model generally adopts the traditional RBAC (Role-Based Access Control, role-based access control) model, while for multi-tenant industrial systems, the permission system designed by the traditional RBAC model It will make the role table data redundant, and the scope of data isolation is limited, so it is impossible to realize the data isolation of the same user in different tenants

However, the existing industrial system only authenticates the user's authority through the server

This authentication method is too simple, easy to be operated by unauthorized persons, and has potential security risks

Images