A data authority configuration and control method and system based on automatic classification

Abstract

The present invention discloses a data permission configuration and control method and system based on automatic classification, the method comprising: obtaining a first role classification data set based on the first project information; obtaining a user data set corresponding to each role; obtaining database access configuration information of the first project information; obtaining first database table query information of the first user based on the database access configuration information; obtaining first control permission field information; matching corresponding field value information, and automatically classifying to generate first data permission configuration information of the first user; obtaining control permission information of the first user over the first project information. The technical problem that the prior art cannot coordinate data permission configuration for multiple projects, and the operation is complicated and the workload is large is solved. The data permission configuration of multiple projects is achieved, and the system automatically identifies and classifies data fields, ensuring the technical effect of safe operation of the software system.

Description

Technical Field

[0001] The present invention relates to the field of artificial intelligence, and in particular to a data authority configuration and control method and system based on automatic classification. Background Art

[0002] Software security means that the software can continue to run correctly even when it is attacked maliciously, and can ensure that the software is used legally within the authorized scope. With the development of the Internet and big data, the data security of digital systems has become increasingly important. Therefore, data permission configuration and control have become important aspects of measuring the security and quality of software systems. Strict control of user permissions has also become an important guarantee for the security of software systems. How to use computers to intelligently, conveniently and efficiently set corresponding data access scopes for users of different roles, while reducing the complexity of authorization management and improving software system security has become a practical problem that needs to be solved urgently.

[0003] In the process of implementing the technical solution of the invention in the embodiment of the present application, the inventors of the present application found that the above technology has at least the following technical problems:

[0004] There are technical problems in the existing technology that data permission configuration cannot be coordinated among multiple projects, and the operation of data permission configuration management by relevant personnel is complex and labor-intensive, which leads to low efficiency of permission configuration and further affects the normal operation of the software system. Summary of the invention

[0005] In view of this, the embodiment of the present application provides a data permission configuration and control method and system based on automatic classification, the method comprising: obtaining first project information, wherein the first project information needs to be configured and controlled for data permissions; obtaining a first role classification data set based on the first project information; obtaining a user data set corresponding to each role based on the first role classification data set; obtaining database access configuration information of the first project information; obtaining first database table query information of the first user based on the database access configuration information, wherein the first user is included in the user data set; obtaining first control permission field information according to the first database table query information; matching corresponding field value information based on the first control permission field information, and automatically classifying to generate first data permission configuration information of the first user; obtaining control permission information of the first user on the first project information according to the first data permission configuration information. The method solves the technical problems in the prior art that data permission configuration cannot be coordinated with multiple projects, and the operation and workload of data permission configuration management by relevant personnel are complex, resulting in low permission configuration efficiency, which further affects the normal operation of the software system. The data permission configuration of multiple projects has been achieved. The system automatically identifies and classifies data fields, which greatly reduces the degree of manual participation, further improves the efficiency of permission configuration, and ensures the technical effect of safe and normal operation of the software system.

[0006] In view of the above problems, an embodiment of the present application provides a data permission configuration and control method and system based on automatic classification.

[0007] In a first aspect, the present application provides a method for data permission configuration and control based on automatic classification, and the method is implemented by a data permission configuration and control system based on automatic classification, wherein the method includes: obtaining first project information, wherein the first project information requires data permission configuration and control; based on the first project information, obtaining a first role classification data set; based on the first role classification data set, obtaining a user data set corresponding to each role; obtaining database access configuration information of the first project information; based on the database access configuration information, obtaining first database table query information of the first user, wherein the first user is included in the user data set; according to the first database table query information, obtaining first control permission field information; based on the first control permission field information, matching corresponding field value information, and automatically classifying, generating first data permission configuration information of the first user; according to the first data permission configuration information, obtaining the control permission information of the first user over the first project information.

[0008] On the other hand, the present application also provides a data permission configuration and control system based on automatic classification, which is used to execute a data permission configuration and control method based on automatic classification as described in the first aspect, wherein the system includes: a first obtaining unit: the first obtaining unit is used to obtain first project information, wherein the first project information needs to be configured and controlled for data permissions; a second obtaining unit: the second obtaining unit is used to obtain a first role classification data set based on the first project information; a third obtaining unit: the third obtaining unit is used to obtain a user data set corresponding to each role based on the first role classification data set; a fourth obtaining unit: the fourth obtaining unit is used to obtain database access configuration information of the first project information; a fifth obtaining unit: the fifth obtaining unit is used to obtain first database table query information of a first user based on the database access configuration information, wherein the first user is included in the user data set; a sixth obtaining unit: the sixth obtaining unit is used to obtain first control permission field information according to the first database table query information; a first generating unit: the first generating unit is used to match corresponding field value information based on the first control permission field information, and automatically classify to generate first data permission configuration information of the first user; a seventh obtaining unit: the seventh obtaining unit is used to obtain control permission information of the first user over the first project information according to the first data permission configuration information.

[0009] In a third aspect, an embodiment of the present application further provides a data permission configuration and control system based on automatic classification, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method described in the first aspect are implemented.

[0010] One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

[0011] 1. By obtaining the first project information, wherein the first project information needs to be configured and controlled for data permissions; based on the first project information, obtaining the first role classification data set; based on the first role classification data set, obtaining the user data set corresponding to each role; obtaining the database access configuration information of the first project information; based on the database access configuration information, obtaining the first database table query information of the first user, wherein the first user is included in the user data set; according to the first database table query information, obtaining the first control permission field information; based on the first control permission field information, matching the corresponding field value information, and automatically classifying, generating the first data permission configuration information of the first user; according to the first data permission configuration information, obtaining the control permission information of the first user for the first project information. The data permission configuration of multiple projects is achieved, the system automatically identifies and classifies the data fields, greatly reduces the degree of manual participation, further improves the efficiency of permission configuration, and ensures the technical effect of the safe and normal operation of the software system.

[0012] 2. Through the neural network model, category fields that meet the preset item value distinction can be accurately identified, and automatic classification can be performed according to the corresponding category fields, achieving the technical effect of automatically identifying classified data fields and improving data configuration and control efficiency.

[0013] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings in the following description are only exemplary, and for ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0015] Figure 1 A flowchart of a data permission configuration and control method based on automatic classification according to an embodiment of the present application;

[0016] Figure 2 A flowchart of a method for obtaining first control authority field information in a data authority configuration and control method based on automatic classification according to an embodiment of the present application;

[0017] Figure 3This is a flow chart of a method for obtaining the second data permission configuration information of the second user in a data permission configuration and control method based on automatic classification according to an embodiment of the present application;

[0018] Figure 4 A flowchart of a method for customizing the preset permission configuration information of the third user in a data permission configuration and control method based on automatic classification according to an embodiment of the present application;

[0019] Figure 5 This is a structural diagram of a data permission configuration and control system based on automatic classification according to an embodiment of the present application;

[0020] Figure 6 It is a schematic diagram of the structure of an exemplary electronic device according to an embodiment of the present application.

[0021] Description of reference numerals:

[0022] First obtaining unit 11 , second obtaining unit 12 , third obtaining unit 13 , fourth obtaining unit 14 , fifth obtaining unit 15 , sixth obtaining unit 16 , first generating unit 17 , seventh obtaining unit 18 , bus 300 , receiver 301 , processor 302 , transmitter 303 , memory 304 , bus interface 305 . DETAILED DESCRIPTION

[0023] The embodiment of the present application provides a data permission configuration and control method and system based on automatic classification, which solves the technical problems in the prior art that it is impossible to coordinate data permission configuration for multiple projects, and the operation and workload of relevant personnel in managing data permission configuration are complex, which leads to low efficiency of permission configuration and further affects the normal operation of the software system. The data permission configuration of multiple projects is achieved, and the system automatically identifies and classifies data fields, which greatly reduces the degree of manual participation, further improves the efficiency of permission configuration, and ensures the technical effect of safe and normal operation of the software system.

[0024] Below, the technical solutions in the embodiments of the present application will be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments of the present application. It should be understood that the present application is not limited to the example embodiments described herein. Based on the embodiments of the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application. It should also be noted that, for the convenience of description, only the parts related to the present application are shown in the accompanying drawings, rather than all of them.

[0025] Application Overview

[0026] Software security means that the software can continue to run correctly even when it is attacked maliciously, and can ensure that the software is used legally within the authorized scope. With the development of the Internet and big data, the data security of digital systems has become increasingly important. Therefore, data permission configuration and control have become important aspects of measuring the security and quality of software systems, and strict control of user permissions has also become an important guarantee for the security of software systems. How to use computers to intelligently, conveniently and efficiently set corresponding data access scopes for users of different roles, while reducing the complexity of authorization management and improving software system security has become a practical problem that needs to be solved urgently. In the existing technology, there is an inability to coordinate data permission configuration for multiple projects, and the operation and workload of relevant personnel in managing data permission configuration are complex, resulting in low efficiency of permission configuration, which further affects the normal operation of the software system.

[0027] In response to the above technical problems, the overall idea of ​​the technical solution provided by this application is as follows:

[0028] The present application provides a data permission configuration and control method based on automatic classification, and the method is applied to a data permission configuration and control system based on automatic classification, wherein the method includes: obtaining first project information, wherein the first project information requires data permission configuration and control; based on the first project information, obtaining a first role classification data set; based on the first role classification data set, obtaining a user data set corresponding to each role; obtaining database access configuration information of the first project information; based on the database access configuration information, obtaining first database table query information of the first user, wherein the first user is included in the user data set; according to the first database table query information, obtaining first control permission field information; based on the first control permission field information, matching corresponding field value information, and automatically classifying, generating first data permission configuration information of the first user; according to the first data permission configuration information, obtaining the control permission information of the first user over the first project information.

[0029] After introducing the basic principles of the present application, various non-limiting implementation methods of the present application will be specifically described below in conjunction with the drawings in the specification.

[0030] Embodiment 1

[0031] Please see attached Figure 1 As shown, the embodiment of the present application provides a data permission configuration and control method based on automatic classification, wherein the method is applied to a data permission configuration and control system, and the method specifically includes the following steps:

[0032] Step S100: obtaining first project information, wherein the first project information requires configuration and control of data permissions;

[0033] Specifically, the data permission configuration and control method based on automatic classification can be used for the permission management configuration of each department, each position, and each employee within the enterprise to view their internal data. The first project information refers to any system category of internal enterprise data. In addition, the data under each project information has been configured with corresponding control and call permissions. By setting corresponding configuration and control permissions for different data in advance, the technical effect of reducing the labor cost for subsequent permission management of all data is achieved.

[0034] Step S200: obtaining a first role classification data set based on the first project information;

[0035] Step S300: Based on the first role classification data set, obtain a user data set corresponding to each role;

[0036] Specifically, based on the characteristics of each project information, the identity and corresponding permissions are set for employees who need to configure and call the data of each project in their work. Each project corresponds to a different role, and each role is configured with different permissions. All employee roles set under the first project information constitute the corresponding first role classification data set. Based on the corresponding role types set for each project information, corresponding roles are set for all users according to the user's professional position, etc., and one or more user information is contained under different role categories. All users under each role constitute the user data set of the corresponding role. For example, managers, financial function workers, business personnel, etc. in an enterprise often need to call and view the financial information related to the enterprise in their work. Therefore, multiple roles such as enterprise managers, financial department managers, financial department staff, power service department staff, and sales department staff can be set under the enterprise financial system project. These roles all need to call the relevant financial information of the enterprise to varying degrees. For a user, he or she can have multiple identities and roles in an enterprise. For example, if a finance department staff is also a manager under the party group project of the enterprise, then the employee information will be in the user data set corresponding to the two roles of finance department staff and party group project manager at the same time.

[0037] By configuring corresponding data permissions for each project for different roles in the enterprise, the technical effect of quickly matching the corresponding data permissions for each project for each employee can be achieved by simply setting the corresponding role for each employee.

[0038] Step S400: obtaining database access configuration information of the first project information;

[0039] Specifically, each project contains one or more databases, and the personnel with the viewing and access permissions of each database are not the same, so it is necessary to configure corresponding control permissions for each database under each project, and the database access configuration permission of the first project information is the database access configuration information of the first project information. The technical effect of clarifying the database access configuration permissions in each project information is achieved.

[0040] Step S500: obtaining first database table query information of a first user based on the database access configuration information, wherein the first user is included in the user data set;

[0041] Specifically, the first user is included in the user data set, which means that the first user is any user in the user data set under a certain enterprise project role. When configuring the data permission configuration and controlling the system for the first user, that is, when configuring the corresponding data permissions for any employee in the enterprise, all databases that the user has viewing and control permissions can be obtained based on the configuration permission information of each database access configured in advance by the system. The databases that the first user has configuration and control permissions constitute the first database table of the first user. By querying information through the first database table of the first user, the technical effect of clearly and intuitively managing and checking whether the data permissions of all users are accurate can be achieved.

[0042] Step S600: obtaining first control authority field information according to the first database table query information;

[0043] Specifically, the control permission field information refers to the category information of all data owned by the database table corresponding to each user's control permission. The first control permission field information refers to the category name to which each database record data belongs in the database table corresponding to the first user. For example, the data that a certain user has permission to include all customer names, all customer levels, and all customer provinces of the enterprise, and the customer levels of the enterprise include national key customers, regional key customers, and ordinary customers. By obtaining the first control permission field information, all data that each user can configure and call can be visually checked.

[0044] Step S700: Based on the first control authority field information, the corresponding field value information is matched and automatically classified to generate the first data authority configuration information of the first user;

[0045] Specifically, based on the database table query information, appropriate data classification fields are selected according to the degree of distinction of each data category, and the corresponding field value information is further matched. The system automatically classifies each field value and generates data permission configuration information corresponding to the first user, that is, the first data permission configuration information. The database table is automatically queried according to the project to which the user belongs and the entered configuration information, so as to achieve the technical effect of intelligently, quickly and efficiently managing user data permissions and automatically classifying database tables.

[0046] Step S800: Obtaining the control authority information of the first user over the first project information according to the first data authority configuration information.

[0047] Specifically, according to the user's data permission configuration information, the user's viewing and calling permissions for each database in any project can be obtained, and the control permission information of the first user for the first project information can be obtained. By obtaining the control permission information of the first user for the first project information, the use and calling of all databases under each project system by each user can be intuitively checked and managed, achieving the technical effect of unified management and maintenance of data permissions for multiple projects.

[0048] Further, as attached Figure 2 As shown, step S600 of the embodiment of the present application also includes:

[0049] Step S610: Query information from the first database table to obtain field set information;

[0050] Step S620: Based on the field set information, obtain item value information corresponding to each field;

[0051] Step S630: inputting the item value information corresponding to each field into a discrimination evaluation model for training to obtain a first training result, wherein the first training result is a first field set, and the item value information of the first field set meets the preset item value discrimination;

[0052] Step S640: Obtain the first control authority field information according to the first field set.

[0053] Specifically, the field set information refers to the category name field of all data in the database to which the user has authority. The first database table refers to a list of all databases to which the user has authority. According to the query information of the first database table, all data category fields to which the user has authority can be obtained. All data category fields constitute corresponding field set information. Based on the field set information, the data values ​​corresponding to each field can be matched, that is, the item value information corresponding to each field.

[0054] The discrimination evaluation model is a neural network model, which can continuously perform self-training and learning based on training data. The preset item value discrimination refers to the specific value of discrimination achieved in each data field obtained after comprehensive analysis by the system. Further, the data values ​​corresponding to each field are input into the discrimination evaluation model for training. When the data value information meets the preset field discrimination, the data category field information corresponding to the data value is output. All data category fields corresponding to the data value that meets the preset field discrimination constitute the first field set. The first field set obtained by the discrimination evaluation model output is the first training result.

[0055] By obtaining the first control authority field information, all data categories that can be configured and called by the user can be visually checked, achieving the technical effect of intelligently managing user permissions.

[0056] Further, as attached Figure 3 As shown, step S900 of the embodiment of the present application also includes:

[0057] Step S910: obtaining a first role classification of the first user;

[0058] Step S920: determining whether the second user belongs to the first role category;

[0059] Step S930: If the second user belongs to the first role classification, obtain second data permission configuration information of the second user, wherein the second data permission configuration information is consistent with the first data permission configuration information.

[0060] Specifically, any employee may have multiple different identities in the same enterprise, that is, any user may have multiple roles. If a user already has a role classification and now needs to set data permissions for another user, first determine whether the user has the same role as the user who has set the corresponding role permissions. If the user, that is, the second user, also has the first role classification of the first user, then the system can directly configure the data permissions of the second user, that is, the second data permission configuration information. Among them, the second data permission configuration information is the same as the data permissions of the first user under the first role classification, that is, it has the first data permission configuration information.

[0061] By setting a role for a user and configuring the data permissions that the role should have, that is, the first data permission configuration information, when subsequently configuring data permissions for users with the same role, the first data permission configuration information can be directly called as the data permissions of the user, thereby achieving the technical effect of intelligently configuring permissions, reducing manual participation, and reducing personnel workload.

[0062] Further, as attached Figure 4 As shown, step S930 in the embodiment of the present application also includes:

[0063] Step S931: Obtaining the project query information of the second user;

[0064] Step S932: determining whether the authority control corresponding to the project query information is included in the second data authority configuration information;

[0065] Step S933: if the authority control corresponding to the project query information is not included in the second data authority configuration information, generate a first additional data control authority instruction;

[0066] Step S934: According to the first additional data control permission instruction, the permission control corresponding to the project query information is added to the second data permission configuration information.

[0067] Specifically, the system determines whether the permission control corresponding to the project query information is included in the second data permission configuration information by obtaining all system projects belonging to the second user, that is, the project query information. If the permission control corresponding to the project query information is not included in the second data permission configuration information, it means that in addition to the second data permission configuration information, the second user has other data permissions in addition to the data permissions under the project role. At this time, the system issues the first additional data control permission instruction, and according to the first additional data permission control instruction, the other data control permissions corresponding to the project query information are added to the second data permission configuration information.

[0068] By querying the user's other project information, all the identity roles that the user has can be obtained, and the data permissions corresponding to all the identity roles can be compared with the second data permissions to obtain the first additional data control permissions that are not included in the second data permissions, and add them to the data permissions of the second user, that is, to obtain the second user's complete second data permission configuration information. The technical effect of obtaining the data permissions that the user should have, checking the user's existing data permissions, and supplementing the corresponding data permissions is achieved.

[0069] Further, as attached Figure 4 As shown, step S930 in the embodiment of the present application also includes:

[0070] Step S935: Obtaining preset authority configuration information of the third user;

[0071] Step S936: determining whether the preset permission configuration information is consistent with the second data permission configuration information;

[0072] Step S937: if the preset permission configuration information is inconsistent with the second data permission configuration information, generating a first custom authorization instruction;

[0073] Step S938: According to the first custom authorization instruction, the role permissions, additional permissions and additional exclusion permissions of the third user are obtained, wherein the additional permissions are permissions different from the role permissions, and the additional exclusion permissions are permissions different from the role permissions;

[0074] Step S939: Customize the preset permission configuration information of the third user according to the role permissions, additional permissions and additional excluded permissions.

[0075] Specifically, firstly, the data permissions that the third user should have, namely, the preset permission configuration information, are analyzed and obtained, and then it is determined whether the preset permission configuration information is consistent with the second data permission configuration information. If the preset permission configuration information is inconsistent with the second data permission configuration information, the system will generate the first custom authorization instruction. According to the first custom authorization instruction, the role permissions, additional permissions and additional exclusion permissions of the third user can be clarified, wherein the additional permissions are permissions different from the role permissions, and the additional exclusion permissions are permissions different from the role permissions; according to the role permissions, additional permissions and additional exclusion permissions. Finally, the system manually defines the preset permission configuration information of the third user based on the permissions that need to be additionally added and excluded.

[0076] By adding the function of customizing data permissions based on user roles, the technical effect of flexible configuration of data permissions is achieved.

[0077] Furthermore, step S700 of the embodiment of the present application further includes:

[0078] Step S710: Generate a first interface calling instruction according to the first data permission configuration information;

[0079] Step S720: According to the first interface calling instruction, call the API interface to query the data authority of the first user.

[0080] Specifically, the category field information of each data in each database can be obtained according to the query information of each user database, and the corresponding category field value is matched for each category field information. After that, the system automatically classifies each category field and configures permissions for the data of each category field, that is, the first data permission configuration information is formed. The API (Application Programming Interface) is a set of predefined interfaces that provide a set of routines that applications and developers can access based on certain software or hardware without accessing the source code or understanding the details of the internal working mechanism. Furthermore, according to the first interface call instruction, the system automatically calls the API interface to query the data permissions of the first user. By automatically calling the API interface as needed, the technical effect of automatically and quickly obtaining the permission configuration information of all user projects is achieved.

[0081] Furthermore, the item value information corresponding to each field is input into the discrimination evaluation model for training. Step S630 of the embodiment of the present application further includes:

[0082] Step S631: inputting the item value information corresponding to each field into a discrimination evaluation model for training, wherein the discrimination evaluation model is trained by multiple sets of training data, each set of data in the multiple sets of training data includes: the item value information corresponding to each field and identification information used to identify the preset item value discrimination;

[0083] Step S632: Obtain a first training result of the discrimination evaluation model, wherein the first training result is a first field set, and the item value information of the first field set meets the preset item value discrimination.

[0084] Specifically, the discrimination evaluation model is a neural network model, which has the characteristics of a neural network model. The neural network model is a neural network model in machine learning, which reflects many basic characteristics of human brain functions. It is a deep feedforward neural network with characteristics such as local connection and weight sharing, and is a highly complex nonlinear dynamic learning system. The neural network is composed of a large number of nodes (or neurons) connected to each other, each node represents a specific output function called an excitation function, and the connection between each two nodes represents a weighted value for the signal passing through the connection, which is called a weight, which is equivalent to the memory of the artificial neural network, and the output of the network is in accordance with the connection mode of the network, which is an expression of a logical strategy. The discrimination evaluation model established based on the neural network model can output an accurate first training result, thereby having a strong analytical and computing ability, and achieving accurate and efficient technical effects.

[0085] In addition, it can continuously perform self-training and learning according to the training data. Each group of data in the multiple groups of training data includes the item value information corresponding to each field and the identification information used to identify the preset item value discrimination. The discrimination evaluation model continuously corrects itself. When the output information of the discrimination evaluation model reaches the predetermined accuracy / convergence state, the supervised learning process ends. By training the discrimination evaluation model with data, the discrimination evaluation model can process the input data more accurately, and then the output of the first training result is also more accurate, achieving the technical effect of accurately obtaining data information and improving the intelligence of the evaluation results.

[0086] In summary, the data permission configuration and control method based on automatic classification provided by the embodiment of the present application has the following technical effects:

[0087] 1. By obtaining the first project information, wherein the first project information needs to be configured and controlled for data permissions; based on the first project information, obtaining the first role classification data set; based on the first role classification data set, obtaining the user data set corresponding to each role; obtaining the database access configuration information of the first project information; based on the database access configuration information, obtaining the first database table query information of the first user, wherein the first user is included in the user data set; according to the first database table query information, obtaining the first control permission field information; based on the first control permission field information, matching the corresponding field value information, and automatically classifying, generating the first data permission configuration information of the first user; according to the first data permission configuration information, obtaining the control permission information of the first user for the first project information. The data permission configuration of multiple projects is achieved, the system automatically identifies and classifies the data fields, greatly reduces the degree of manual participation, further improves the efficiency of permission configuration, and ensures the technical effect of the safe and normal operation of the software system.

[0088] 2. Through the neural network model, category fields that meet the preset item value distinction can be accurately identified, and automatic classification can be performed according to the corresponding category fields, achieving the technical effect of automatically identifying classified data fields and improving data configuration and control efficiency.

[0089] Embodiment 2

[0090] Based on the same inventive concept as the data permission configuration and control method based on automatic classification in the aforementioned embodiment, the present invention also provides a data permission configuration and control system based on automatic classification, see the attached Figure 5 As shown, the system comprises:

[0091] First obtaining unit 11: The first obtaining unit 11 is used to obtain first project information, wherein the first project information requires configuration and control of data permissions;

[0092] Second obtaining unit 12: The second obtaining unit 12 is used to obtain a first role classification data set based on the first project information;

[0093] The third obtaining unit 13 is used to obtain a user data set corresponding to each role based on the first role classification data set;

[0094] Fourth obtaining unit 14: the fourth obtaining unit 14 is used to obtain database access configuration information of the first project information;

[0095] Fifth obtaining unit 15: the fifth obtaining unit 15 is used to obtain first database table query information of a first user based on the database access configuration information, wherein the first user is included in the user data set;

[0096] The sixth obtaining unit 16 is used to obtain the first control authority field information according to the first database table query information;

[0097] First generating unit 17: The first generating unit 17 is used to match corresponding field value information based on the first control authority field information, and automatically classify to generate first data authority configuration information of the first user;

[0098] The seventh obtaining unit 18: the seventh obtaining unit 18 is used to obtain the control authority information of the first user over the first project information according to the first data authority configuration information.

[0099] Furthermore, the system also includes:

[0100] an eighth obtaining unit, the eighth obtaining unit being configured to obtain field set information according to query information in the first database table;

[0101] A ninth obtaining unit, the ninth obtaining unit being used to obtain item value information corresponding to each field based on the field set information;

[0102] a tenth obtaining unit, the tenth obtaining unit being used to input the item value information corresponding to each field into a discrimination evaluation model for training, and obtain a first training result, wherein the first training result is a first field set, and the item value information of the first field set satisfies a preset item value discrimination;

[0103] An eleventh obtaining unit, the eleventh obtaining unit is used to obtain the first control authority field information according to the first field set.

[0104] Furthermore, the system also includes:

[0105] a twelfth obtaining unit, the twelfth obtaining unit being used to obtain a first role classification of the first user;

[0106] a first judging unit, the first judging unit being used to judge whether the second user belongs to the first role classification;

[0107] A thirteenth obtaining unit, the thirteenth obtaining unit is used to obtain second data permission configuration information of the second user if the second user belongs to the first role classification, wherein the second data permission configuration information is consistent with the first data permission configuration information.

[0108] Furthermore, the system also includes:

[0109] a fourteenth obtaining unit, the fourteenth obtaining unit being used to obtain the project query information of the second user;

[0110] A second judgment unit, the second judgment unit is used to judge whether the permission control corresponding to the project query information is included in the second data permission configuration information;

[0111] A second generating unit, the second generating unit being configured to generate a first additional data control permission instruction if the permission control corresponding to the project query information is not included in the second data permission configuration information;

[0112] A first setting unit, wherein the first setting unit is used to add the permission control corresponding to the project query information to the second data permission configuration information according to the first additional data control permission instruction.

[0113] Furthermore, the system also includes:

[0114] A fifteenth obtaining unit, the fifteenth obtaining unit is used to obtain preset authority configuration information of a third user;

[0115] A third judgment unit, the third judgment unit is used to judge whether the preset permission configuration information is consistent with the second data permission configuration information;

[0116] A third generating unit, the third generating unit is used to generate a first custom authorization instruction if the preset permission configuration information is inconsistent with the second data permission configuration information;

[0117] a sixteenth obtaining unit, the sixteenth obtaining unit being used to obtain, according to the first custom authorization instruction, the role permissions, additional permissions and additional exclusion permissions of the third user, wherein the additional permissions are permissions different from the role permissions, and the additional exclusion permissions are permissions different from the role permissions;

[0118] The second setting unit is used to customize the preset permission configuration information of the third user according to the role permissions, additional permissions and additional excluded permissions.

[0119] Furthermore, the system also includes:

[0120] a fourth generating unit, the fourth generating unit being configured to generate a first interface calling instruction according to the first data permission configuration information;

[0121] The first query unit is used to call the API interface according to the first interface calling instruction to query the data authority of the first user.

[0122] Furthermore, the system also includes:

[0123] A first input unit, the first input unit is used to input the item value information corresponding to each field into a discrimination evaluation model for training, the discrimination evaluation model is obtained by training multiple sets of training data, each set of data in the multiple sets of training data includes: the item value information corresponding to each field and identification information used to identify the preset item value discrimination;

[0124] A seventeenth obtaining unit is used to obtain a first training result of the discrimination evaluation model, wherein the first training result is a first field set, and the item value information of the first field set meets a preset item value discrimination.

[0125] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. Figure 1 The data permission configuration and control method based on automatic classification and the specific examples in the first embodiment are also applicable to the data permission configuration and control system based on automatic classification in the present embodiment. Through the above detailed description of the data permission configuration and control method based on automatic classification, those skilled in the art can clearly know the data permission configuration and control system based on automatic classification in the present embodiment, so for the sake of brevity of the specification, it will not be described in detail here. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description.

[0126] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

[0127] Exemplary Electronic Devices

[0128] Reference below Figure 6 To describe the electronic device of the embodiment of the present application.

[0129] Figure 6 The figure shows a schematic structural diagram of an electronic device according to an embodiment of the present application.

[0130] Based on the inventive concept of a data permission configuration and control method based on automatic classification in the aforementioned embodiment, the present invention also provides a data permission configuration and control system based on automatic classification, on which a computer program is stored, which, when executed by a processor, implements the steps of any method of the emergency plan method for blood purification center care described above.

[0131] Among them, Figure 6 In the embodiment of the present invention, a bus architecture (represented by bus 300) is shown, which may include any number of interconnected buses and bridges, and bus 300 links various circuits including one or more processors represented by processor 302 and memory represented by memory 304. Bus 300 may also link various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are not further described herein. Bus interface 305 provides an interface between bus 300 and receiver 301 and transmitter 303. Receiver 301 and transmitter 303 may be the same element, namely a transceiver, which provides a unit for communicating with various other devices over a transmission medium.

[0132] The processor 302 is responsible for managing the bus 300 and general processing, while the memory 304 may be used to store data used by the processor 302 when performing operations.

[0133] The present application provides a data permission configuration and control method based on automatic classification, and the method is applied to a data permission configuration and control system based on automatic classification, wherein the method includes: obtaining first project information, wherein the first project information requires data permission configuration and control; based on the first project information, obtaining a first role classification data set; based on the first role classification data set, obtaining a user data set corresponding to each role; obtaining database access configuration information of the first project information; based on the database access configuration information, obtaining first database table query information of a first user, wherein the first user is included in the user data set; according to the first database table query information, obtaining first control permission field information; based on the first control permission field information, matching corresponding field value information, and automatically classifying, generating first data permission configuration information of the first user; according to the first data permission configuration information, obtaining control permission information of the first user over the first project information.

[0134] It solves the technical problems in the prior art that data permission configuration cannot be coordinated across multiple projects, and the operations and workload of relevant personnel in managing data permission configuration are complex, resulting in low efficiency of permission configuration, which further affects the normal operation of the software system. It achieves data permission configuration for multiple projects, and the system automatically identifies and classifies data fields, greatly reducing the degree of manual participation, further improving the efficiency of permission configuration, and ensuring the technical effect of safe and normal operation of the software system.

[0135] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, devices, or computer program products. Therefore, the present application may adopt a complete software embodiment, a complete hardware embodiment, or a combination of software and hardware embodiments. In addition, the present application is in the form of a computer program product that can be implemented on one or more computer-usable storage media containing computer-usable program codes. The computer-usable storage medium includes, but is not limited to, various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memory (ROM), random access memory (RAM), disk storage, compact disc read-only memory (CD-ROM), and optical storage.

[0136] The present invention is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products of the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A system that specifies the functions of a box or multiple boxes.

[0137] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction system, which is implemented in the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0138] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps of the functions specified in a box or multiple boxes. Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they are aware of the basic creative concepts. Therefore, the attached claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0139] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A data permission configuration and control method based on automatic classification, wherein: The method is applied to a data authority configuration and control system based on automatic classification, and the method comprises: Obtaining first project information, wherein the first project information requires configuration and control of data permissions; Based on the first project information, obtaining a first role classification data set; Based on the first role classification data set, obtaining a user data set corresponding to each role; Obtaining database access configuration information of the first project information; Based on the database access configuration information, obtaining first database table query information of a first user, wherein the first user is included in the user data set, the first database table of the first user is a database for which the first user has configuration and control permissions, and the database access configuration information is database access configuration permissions; Obtaining first control authority field information according to the first database table query information, where the first control authority field information is a category name to which each database record data belongs in the database table corresponding to the first user; Based on the first control authority field information, the corresponding field value information is matched and automatically classified to generate the first data authority configuration information of the first user; According to the first data permission configuration information, control permission information of the first user over the first project information is obtained.

2. The method of claim 1, wherein: The obtaining of the first control authority field information further includes: Obtaining field set information according to the first database table query information; Based on the field set information, obtain item value information corresponding to each field; Inputting the item value information corresponding to each field into a discrimination evaluation model for training to obtain a first training result, wherein the first training result is a first field set, and the item value information of the first field set meets a preset item value discrimination; According to the first field set, the first control authority field information is obtained.

3. The method of claim 1, wherein: The method further comprises: Obtaining a first role classification of the first user; Determining whether the second user belongs to the first role classification; If the second user belongs to the first role classification, second data permission configuration information of the second user is obtained, wherein the second data permission configuration information is consistent with the first data permission configuration information.

4. The method of claim 3, wherein: The method further comprises: Obtaining the project query information of the second user; Determine whether the permission control corresponding to the project query information is included in the second data permission configuration information; If the permission control corresponding to the project query information is not included in the second data permission configuration information, generating a first additional data control permission instruction; According to the first additional data control permission instruction, the permission control corresponding to the project query information is added to the second data permission configuration information.

5. The method of claim 4, wherein: The method further comprises: Obtaining preset permission configuration information of a third user; Determining whether the preset permission configuration information is consistent with the second data permission configuration information; If the preset permission configuration information is inconsistent with the second data permission configuration information, generating a first custom authorization instruction; According to the first custom authorization instruction, the role permissions, additional permissions and additional exclusion permissions of the third user are obtained, wherein the additional permissions are permissions different from the role permissions, and the additional exclusion permissions are permissions different from the role permissions; The preset permission configuration information of the third user is customized according to the role permissions, additional permissions and additional excluded permissions.

6. The method of claim 5, wherein: The method further comprises: Generate a first interface calling instruction according to the first data permission configuration information; According to the first interface calling instruction, the API interface is called to query the data authority of the first user.

7. The method of claim 2, wherein: The inputting the item value information corresponding to each field into the discrimination evaluation model for training also includes: Inputting the item value information corresponding to each field into a discrimination evaluation model for training, wherein the discrimination evaluation model is obtained by training with multiple sets of training data, each set of data in the multiple sets of training data includes: the item value information corresponding to each field and identification information used to identify the preset item value discrimination; A first training result of the discrimination evaluation model is obtained, wherein the first training result is a first field set, and item value information of the first field set meets a preset item value discrimination.

8. A data authority configuration and control system based on automatic classification, wherein: The system comprises: First obtaining unit: The first obtaining unit is used to obtain first project information, wherein the first project information requires configuration and control of data permissions; Second obtaining unit: The second obtaining unit is used to obtain a first role classification data set based on the first project information; A third obtaining unit: the third obtaining unit is used to obtain a user data set corresponding to each role based on the first role classification data set; Fourth obtaining unit: the fourth obtaining unit is used to obtain database access configuration information of the first project information; A fifth obtaining unit: the fifth obtaining unit is used to obtain first database table query information of a first user based on the database access configuration information, wherein the first user is included in the user data set, the first database table of the first user is a database for which the first user has configuration and control permissions, and the database access configuration information is a database access configuration permission; Sixth obtaining unit: the sixth obtaining unit is used to obtain first control authority field information according to the first database table query information, the first control authority field information is the category name to which each database record data belongs in the database table corresponding to the first user; First generating unit: The first generating unit is used to match the corresponding field value information based on the first control authority field information, and automatically classify to generate the first data authority configuration information of the first user; Seventh obtaining unit: The seventh obtaining unit is used to obtain the control authority information of the first user over the first project information according to the first data authority configuration information.

9. A data permission configuration and control system based on automatic classification, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the steps of the method according to any one of claims 1 to 7 are implemented.

Images