File processing method and device, non-volatile storage medium, and processor

Abstract

The present application discloses a method and device for processing files, a non-volatile storage medium, and a processor. The method includes: determining the user's access rights to files stored on a shared file platform; setting temporary permissions for the user to process files using a clipboard based on the access rights, wherein the clipboard is a tool for the user to operate files; and using the clipboard to process files based on temporary permissions. The present application solves the technical problem of security risks in existing shared file management.

Description

Technical Field

[0001] The present application relates to the field of file management, and specifically, to a file processing method and device, a non-volatile storage medium, and a processor. Background Art

[0002] Figure 1 It is a schematic diagram of a cloud office system. Figure 1 As shown, the cloud office system is based on the VGTP image transmission protocol, and mainly includes a zero terminal (with a built-in VGTP-R terminal, referred to as the R terminal) and a cloud server terminal (with a built-in VGTP-S terminal, referred to as the S terminal). Among them, the R terminal is used to receive images from the cloud desktop, and at the same time transmit the local mouse and keyboard information back to the cloud, and the cloud is injected into the cloud desktop corresponding to the current R terminal. The cloud desktop is generated by the virtual machine / physical machine (VM / PM) allocated by the cloud server to the current zero terminal; the S terminal is an image acquisition and encoding module running in the cloud virtual operating system, and is also responsible for the injection function of user input data. The cloud server is generally based on the IAAS architecture and is a server with a strong virtual host. It can provide management functions for multiple virtual machines through the hypervisor and provide a hardware environment for the operation of VM / PM.

[0003] In the above cloud office scenario, a user can usually log in to the corresponding VM / PM by entering a user name and password in a zero terminal, and then perform the required office operations in the virtual machine.

[0004] In many units, in order to manage shared files in a unified and secure manner, some public or confidential files are usually placed in shared folders or shared file servers. Different types of users can access different files. For example, some files are shared by the entire unit and can be viewed by everyone, or some files are only open within a department and can only be viewed by members of the department.

[0005] Currently, in the management of shared files, restrictions are only set on whether files can be accessed according to different user identities. For accessible files, users can save the information by copying documents in addition to being unable to modify them. Therefore, the existing shared file management still has security risks.

[0006] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0007] The embodiments of the present application provide a file processing method and device, a non-volatile storage medium, and a processor to at least solve the technical problem of security risks in existing shared file management.

[0008] According to one aspect of an embodiment of the present application, a file processing method is provided, including: determining a user's access rights to files stored on a shared file platform; setting temporary permissions for the user to process the file using a clipboard based on the access rights, wherein the clipboard is a tool for the user to operate the file; and using the clipboard to process the file based on the temporary permissions.

[0009] Optionally, access permissions include: the names of files that the user has access to, and the user's operating permissions for the files that the user has access to; operating permissions include: prohibiting copying of images and text in files, allowing copying of images and text in files, prohibiting copying of images in files and allowing copying of text in files, and allowing copying of images in files and prohibiting copying of text in files.

[0010] Optionally, temporary permissions are set for users when using a clipboard to process files based on access permissions, including: if the access permission is to prohibit copying images and text in the file, setting the temporary permission to prohibit using the clipboard to copy images and text in the file during the process of using the clipboard to process the file; if the access permission is to allow copying images and text in the file, setting the temporary permission to allow using the clipboard to copy images and text in the file during the process of using the clipboard to process the file; if the access permission is to prohibit copying images in the file and allow copying text in the file, setting the temporary permission to only allow using the clipboard to copy text in the file during the process of using the clipboard to process the file; if the access permission is to allow copying images in the file and prohibit copying text in the file, setting the temporary permission to only allow using the clipboard to copy images in the file during the process of using the clipboard to process the file.

[0011] Optionally, processing the file using the clipboard according to the temporary permissions includes: managing the content of the file written to the clipboard according to the temporary permissions.

[0012] Optionally, the content of the file written to the clipboard is managed according to temporary permissions, including: if the temporary permission is to prohibit the use of the clipboard to copy pictures and text in the file, perform one of the following operations: delete the pictures and text in the file written to the clipboard or refuse to respond to the paste operation using the clipboard; if the temporary permission is to allow the use of the clipboard to copy pictures and text in the file, respond to the paste operation using the clipboard; if the temporary permission is to only allow the use of the clipboard to copy text in the file, perform one of the following operations: delete the pictures in the file written to the clipboard or only paste the pictures of the file written when the clipboard is used to paste; if the temporary permission is to only allow the use of the clipboard to copy pictures in the file, perform one of the following operations: delete the text in the file written to the clipboard or only paste the text of the file written when the clipboard is used to paste.

[0013] Optionally, before managing the content of the file written to the clipboard according to the temporary permissions, the method further includes: determining whether the content of the file written to the clipboard is a binary stream; if the determination result is yes, determining that the content of the file written to the clipboard is a picture.

[0014] Optionally, determining the user's access rights to files stored on the shared file platform includes: obtaining an account used by the user to log in to the shared file platform; and determining the user's access rights to files stored on the shared file platform based on the account.

[0015] According to another aspect of an embodiment of the present application, a file processing device is also provided, including: a determination module for determining a user's access rights to files stored on a shared file platform; a setting module for setting temporary permissions for a user to process files using a clipboard based on the access rights, wherein the clipboard is a tool for a user to operate files; and a processing module for processing files using the clipboard based on the temporary permissions.

[0016] According to another aspect of the embodiments of the present application, a non-volatile storage medium is provided, the non-volatile storage medium including a stored program, wherein when the program is running, the device where the non-volatile storage medium is located is controlled to execute the above file processing method.

[0017] According to yet another aspect of the embodiments of the present application, a processor is provided, which is used to run a program stored in a memory, wherein the above file processing method is executed when the program is run.

[0018] In an embodiment of the present application, the user's access rights to files stored on a shared file platform are determined; temporary permissions are set for the user to process the file using a clipboard based on the access rights, wherein the clipboard is a tool for the user to operate the file; the file is processed using the clipboard based on the temporary permissions, by setting a more detailed access policy for the user, and implementing this access policy based on the control of the clipboard in the VM / PM, thereby achieving the technical effect of allowing different users to have different copy permissions for shared files, thereby ensuring the security of the shared file content, and further solving the technical problem of security risks in existing shared file management. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0020] Figure 1 It is a schematic diagram of a cloud office system;

[0021] Figure 2 A method for processing a file according to an embodiment of the present application;

[0022] Figure 3 is a schematic diagram of a cloud gaming server according to an embodiment of the present application;

[0023] Figure 4 It is a structural block diagram of a file processing device according to an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0025] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0026] According to an embodiment of the present application, an embodiment of a method for processing a file is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0027] Figure 2 A method for processing a file according to an embodiment of the present application is as follows: Figure 2 As shown, the method comprises the following steps:

[0028] Step S202, determining the user's access rights to files stored on the shared file platform;

[0029] According to an optional embodiment of the present application, step S202 determines the user's access rights to files stored on the shared file platform, including the following steps: obtaining the account used by the user to log in to the shared file platform; and determining the user's access rights to files stored on the shared file platform based on the account.

[0030] Figure 3 is a schematic diagram of a cloud gaming server according to an embodiment of the present application, such as Figure 3 As shown, the cloud game server includes a file sharing platform. When a user logs in to the file sharing platform through VM / PM, the file sharing platform determines the file access rights of the current user based on the user account. In actual implementation, the administrator sets the file access rights of each user and saves the records in the file sharing platform.

[0031] Step S204, setting temporary permissions for the user to process the file using the clipboard according to the access permissions, wherein the clipboard is a tool for the user to operate the file;

[0032] The determined file access rights are sent to the current VM / PM. After receiving the file access rights, the VM / PM sets the temporary rights of the current clipboard according to the file access rights. Temporary rights refer to the period during which the user accesses the file sharing platform. By managing and controlling the user's content copying rights during this period, the file information security on the file sharing platform is ensured.

[0033] Step S206: Process the file using the clipboard according to the temporary permissions.

[0034] Currently, when a user accesses a shared file, VM / PM controls the copied content according to the temporary permissions of the clipboard.

[0035] Through the above steps, by setting more detailed access policies for users and implementing such access policies based on the control of the clipboard in VM / PM, it is achieved that different users have different copy permissions for shared files, thereby ensuring the technical effect of the security of shared file contents.

[0036] According to an optional embodiment of the present application, the above-mentioned access rights include: the names of files that the user has the right to access, and the user's operating rights for the files that he has the right to access; the operating rights include: prohibiting copying of pictures and texts in files, allowing copying of pictures and texts in files, prohibiting copying of pictures in files and allowing copying of texts in files, and allowing copying of pictures in files and prohibiting copying of texts in files.

[0037] File access permissions include not only which files the current user can access, but also the user's permissions to operate the files they can access. The permissions include: cannot be copied and can be copied. For the copying situation, different permissions are further set, including: can only copy text, can only copy pictures, and can copy text and pictures. Therefore, in general, users may have four permissions for the files they can access: cannot copy pictures and text, can copy pictures and text, can only copy pictures, and can only copy text.

[0038] In this step, the file sharing platform can query the local user permission record to determine the user's file access permissions.

[0039] According to another optional embodiment of the present application, step S204 is executed to set temporary permissions for users to use the clipboard to process files based on access permissions, which is achieved by the following method: if the access permission is to prohibit copying pictures and text in the file, the temporary permission is set to prohibit using the clipboard to copy pictures and text in the file during the process of using the clipboard to process the file; if the access permission is to allow copying pictures and text in the file, the temporary permission is set to allow using the clipboard to copy pictures and text in the file during the process of using the clipboard to process the file; if the access permission is to prohibit copying pictures in the file and allow copying text in the file, the temporary permission is set to only allow using the clipboard to copy text in the file during the process of using the clipboard to process the file; if the access permission is to allow copying pictures in the file and prohibit copying text in the file, the temporary permission is set to only allow using the clipboard to copy pictures in the file during the process of using the clipboard to process the file.

[0040] Specifically, if the current user's access permission is that images and text cannot be copied, then the temporary permission of his clipboard is that copying images and text is prohibited during access to the file sharing platform; if the current user's access permission is that images and text can be copied, then the temporary permission of his clipboard is not restricted in any way; if the current user's access permission is that only images can be copied, then the temporary permission of his clipboard is that only images can be copied during access to the file sharing platform; if the current user's access permission is that only text can be copied, then the temporary permission of his clipboard is that only text can be copied during access to the file sharing platform.

[0041] It should be noted that when the user logs out of the file sharing platform, the temporary permissions of the clipboard are also cancelled.

[0042] In some optional embodiments of the present application, when executing step S206, the clipboard is used to process the file according to the temporary permissions, which is achieved by the following method: the content of the file written to the clipboard is managed according to the temporary permissions.

[0043] According to an optional embodiment of the present application, if the user's access permission is to copy images and text, the clipboard content will not be controlled when the user accesses a shared file; if the user's access permission is not to copy images and text, the user will be prohibited from pasting image and text content; if the user's access permission is to only copy images, the user will be allowed to paste images, but will be prohibited from pasting text; if the user's access permission is to only copy text, the user will be allowed to paste text, but will be prohibited from pasting images.

[0044] In other optional embodiments of the present application, the content of the file written to the clipboard is managed according to temporary permissions, including: if the temporary permission is to prohibit the use of the clipboard to copy pictures and text in the file, perform one of the following operations: delete the pictures and text in the file written to the clipboard or refuse to respond to the paste operation using the clipboard; if the temporary permission is to allow the use of the clipboard to copy pictures and text in the file, respond to the paste operation using the clipboard; if the temporary permission is to only allow the use of the clipboard to copy text in the file, perform one of the following operations: delete the pictures in the file written to the clipboard or only paste the pictures of the file written when the clipboard is used to paste the operation; if the temporary permission is to only allow the use of the clipboard to copy pictures in the file, perform one of the following operations: delete the text in the file written to the clipboard or only paste the text of the file written when the clipboard is used to paste the operation.

[0045] In this step, the content pasted by the user using the clipboard is controlled in the following ways:

[0046] When the user writes copied content into the clipboard, the type of the written content is detected (image and / or text).

[0047] If the user's access permission is to not copy images and texts, the current user's written content will be deleted from the clipboard (making the subsequent paste unsuccessful); or, the user's paste operation will not be responded to. The difference between these two methods is that the first method directly deletes the content to be pasted from the clipboard, and then the user's paste operation is performed normally, but since the content in the clipboard is empty, the paste is unsuccessful; the second method does not process the clipboard content, but when the user initiates a paste operation later, the operation is not responded to, so the paste is unsuccessful.

[0048] If the user's access permission is to only copy images, the text content currently written in the clipboard is deleted and the image content is retained, so that only the image content can be pasted during subsequent pasting; or, when the user initiates a paste operation, only the image content is pasted without pasting text. This method does not require deleting the clipboard content.

[0049] If the user's access permission is to only copy text, the currently written image content is deleted from the clipboard and the text content is retained, so that only text content can be pasted during subsequent pasting; or, when the user initiates a paste operation, only text is pasted without pasting the image. This method does not require deleting the clipboard content.

[0050] According to an optional embodiment of the present application, before managing the content of the file written to the clipboard according to temporary permissions, it is also necessary to determine whether the content of the file written to the clipboard is a binary stream; if the judgment result is yes, it is determined that the content of the file written to the clipboard is a picture.

[0051] The function of the clipboard is provided by a class. This class allows input types including but not limited to: plain text, binary stream (picture), html / rich text format, file index. Therefore, when writing content to the clipboard, it can be determined whether the content is a binary stream. If it is a binary stream, it is determined that the written content is a picture.

[0052] Figure 4 is a structural block diagram of a file processing device according to an embodiment of the present application, such as Figure 4 As shown, the device comprises:

[0053] A determination module 40, for determining the user's access rights to files stored on the shared file platform;

[0054] See also Figure 3 When a user logs in to the file sharing platform through VM / PM, the file sharing platform determines the file access rights of the current user based on the user account. In actual implementation, the administrator sets the file access rights of each user and saves the records in the file sharing platform.

[0055] A setting module 42, for setting temporary permissions for users to process files using a clipboard according to access permissions, wherein the clipboard is a tool for users to operate files;

[0056] The determined file access rights are sent to the current VM / PM. After receiving the file access rights, the VM / PM sets the temporary rights of the current clipboard according to the file access rights. Temporary rights refer to the period during which the user accesses the file sharing platform. By managing and controlling the user's content copying rights during this period, the file information security on the file sharing platform is ensured.

[0057] The processing module 44 is used to process the file using the clipboard according to the temporary authority.

[0058] Currently, when a user accesses a shared file, VM / PM controls the copied content according to the temporary permissions of the clipboard.

[0059] Through the above-mentioned device, by setting more detailed access policies for users and implementing such access policies based on the control of the clipboard in VM / PM, it is achieved that different users have different copy permissions for shared files, thereby ensuring the technical effect of the security of shared file contents.

[0060] It should be noted that Figure 4 The preferred implementation of the illustrated embodiment can be found in Figure 2 The relevant description of the illustrated embodiment will not be repeated here.

[0061] An embodiment of the present application further provides a non-volatile storage medium, the non-volatile storage medium including a stored program, wherein when the program is running, the device where the non-volatile storage medium is located is controlled to execute the above file processing method.

[0062] The above-mentioned non-volatile storage medium is used to store programs that perform the following functions: determine the user's access rights to files stored on the shared file platform; set temporary permissions for the user to process files using the clipboard based on the access rights, wherein the clipboard is a tool for the user to operate files; and use the clipboard to process files based on temporary permissions.

[0063] An embodiment of the present application further provides a processor, which is used to run a program stored in a memory, wherein the above file processing method is executed when the program is running.

[0064] The above-mentioned processor is used to run a program that performs the following functions: determining the user's access rights to files stored on a shared file platform; setting temporary permissions for the user to process files using a clipboard based on the access rights, wherein the clipboard is a tool for the user to operate files; and using the clipboard to process files based on temporary permissions.

[0065] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0066] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0067] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0068] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0069] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0070] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the relevant technology or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk, etc. Various media that can store program codes.

[0071] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A method for processing a file, characterized in that: include: Determine the user's access rights to files stored on the shared file platform, where: The access rights include: the names of the files that the user is authorized to access, and the operation rights of the user on the files that the user is authorized to access; The operation permissions include: prohibiting the copying of pictures and texts in the file, allowing the copying of pictures and texts in the file, prohibiting the copying of pictures in the file and allowing the copying of texts in the file, and allowing the copying of pictures in the file and prohibiting the copying of texts in the file; According to the access permission, a temporary permission is set for the user to process the file using a clipboard, wherein the clipboard is a tool for the user to operate the file; The file is processed using the clipboard according to the temporary permission.

2. The method according to claim 1, characterized in that Setting temporary permissions for the user to process the file using the clipboard according to the access permission includes: If the access permission is to prohibit copying the pictures and texts in the file, the temporary permission is set to prohibit copying the pictures and texts in the file using the clipboard during the process of processing the file using the clipboard; If the access permission is to allow copying of pictures and texts in the file, the temporary permission is set to allow copying of pictures and texts in the file using the clipboard during the process of using the clipboard to process the file; If the access permission is to prohibit copying of images in the file but allow copying of text in the file, the temporary permission is set to only allow copying of text in the file using the clipboard during the process of processing the file using the clipboard; If the access permission is to allow copying of images in the file and prohibit copying of text in the file, the temporary permission is set to only allow copying of images in the file using the clipboard during processing of the file using the clipboard.

3. The method according to claim 2, characterized in that Processing the file using the clipboard according to the temporary permission includes: The content of the file written to the clipboard is managed according to the temporary authority.

4. The method according to claim 3, characterized in that Managing the content of the file written to the clipboard according to the temporary permission includes: If the temporary permission is to prohibit the use of the clipboard to copy the pictures and texts in the file, perform one of the following operations: delete the pictures and texts of the file written to the clipboard or refuse to respond to the paste operation performed using the clipboard; If the temporary permission allows the use of the clipboard to copy the image and text in the file, respond with the use of the clipboard to perform a paste operation; If the temporary permission is to only allow the text in the file to be copied using the clipboard, performing one of the following operations: deleting the image of the file written to the clipboard or pasting only the image of the file written to the clipboard when performing a paste operation; If the temporary permission is to only allow the use of the clipboard to copy the image in the file, perform one of the following operations: delete the text of the file written to the clipboard or paste only the text of the file written when performing a paste operation using the clipboard.

5. The method according to claim 3, characterized in that: Before managing the content of the file written to the clipboard according to the temporary permissions, the method further includes: Determine whether the content of the file written to the clipboard is a binary stream; If the judgment result is yes, it is determined that the content of the file written into the clipboard is the picture.

6. The method according to claim 1, characterized in that Determine user access rights to files stored on shared file platforms, including: Obtaining the account used by the user to log in to the shared file platform; The access rights of the user to the files stored on the shared file platform are determined based on the account.

7. A file processing device, characterized in that: include: The determination module is used to determine the user's access rights to files stored on the shared file platform, where: The access rights include: the names of the files that the user is authorized to access, and the operation rights of the user on the files that the user is authorized to access; The operation permissions include: prohibiting the copying of pictures and texts in the file, allowing the copying of pictures and texts in the file, prohibiting the copying of pictures in the file and allowing the copying of texts in the file, and allowing the copying of pictures in the file and prohibiting the copying of texts in the file; A setting module is used to set temporary permissions for the user to process the file using the clipboard according to the access permission, wherein the clipboard is a tool for the user to operate the file; and a processing module is used to process the file using the clipboard according to the temporary permissions.

8. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored program, wherein when the program is executed, the device where the non-volatile storage medium is located is controlled to execute the file processing method according to any one of claims 1 to 6.

9. A processor, characterized in that: The processor is used to run a program stored in the memory, wherein the program executes the file processing method according to any one of claims 1 to 6 when running.

Images