System access control method and system, computer device and storage medium

Abstract

The application relates to a system access control method, a system, computer equipment and a storage medium. The method comprises the following steps: in response to a login operation of a user object performing a configuration operation on a comprehensive configuration platform, triggering the comprehensive configuration platform to perform login verification on the user object; after the login verification is passed, obtaining an authorized token granted by the comprehensive configuration platform to the user object, and displaying a comprehensive configuration page of the comprehensive configuration platform; in response to a triggering operation on a target access entry in an access entry of each configuration system, triggering a target configuration system corresponding to the target access entry to perform access verification on the authorized token; and after the access authentication is passed, displaying a configuration subpage corresponding to the target configuration system in the comprehensive configuration page. The method can improve the efficiency of system access control.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to a system access control method, system, computer device, and storage medium. Background Technology

[0002] Currently, computer companies provide services externally through backend service systems, and users can receive services through the service pages provided by these systems. The startup or operation of the backend service system requires retrieving configuration data from the database. Therefore, internal personnel within the computer company should pre-configure data on the configuration page provided by the backend configuration system and store the configured data in the database to support the startup or operation of the backend service system.

[0003] Because the backend configuration system and the backend service system are in one-to-one correspondence, there are as many backend configuration systems as there are backend service systems. Therefore, when performing data configuration operations, internal personnel of computer companies need to perform complicated login operations for multiple backend configuration systems. That is, they need to log in to each backend configuration system to access the data configuration, resulting in low system access efficiency. Summary of the Invention

[0004] Therefore, it is necessary to provide a system access control method, system, computer device, computer-readable storage medium, and computer program product that can improve efficiency in response to the above-mentioned technical problems.

[0005] Firstly, this application provides a system access control method. The method includes:

[0006] In response to a user's login operation to the integrated configuration platform, the integrated configuration platform is triggered to verify the login of the user; the integrated configuration platform integrates multiple configuration systems;

[0007] After successful login verification, the system obtains the authorization token granted by the integrated configuration platform to the user and displays the integrated configuration page of the integrated configuration platform. The integrated configuration page includes access points for each of the configuration systems. The authorization token is an authentication credential generated by the integrated configuration platform based on the user's configuration operation permissions after determining the user's configuration operation permissions.

[0008] In response to the triggering operation of the target access entry in the access entry of each of the configuration systems, the target configuration system corresponding to the target access entry is triggered to perform access verification of the authorization token;

[0009] After successful access verification, the configuration subpage corresponding to the target configuration system is displayed on the comprehensive configuration page.

[0010] In one embodiment, each configuration system integrated in the integrated configuration platform corresponds to multiple deployment environments; the method further includes:

[0011] In response to an environment switching operation performed on the target configuration system, a target environment identifier to be switched to is determined;

[0012] The comprehensive configuration page displays the target configuration subpage corresponding to the target configuration system in the target deployment environment; the target configuration system is the configuration system corresponding to the target environment identifier.

[0013] In one embodiment, the method further includes:

[0014] Based on the target environment identifier, an environment switching authentication request is sent to the server; the environment switching authentication request is used to instruct the server to obtain the deployment environment access permissions of the authorization token; and based on the deployment environment access permissions, it is determined whether the user object has access permissions for the target deployment environment;

[0015] After receiving the notification from the server that it has access rights, the system executes the step of displaying the target configuration subpage corresponding to the target configuration system in the target deployment environment on the comprehensive configuration page.

[0016] In one embodiment, the comprehensive configuration page includes a first-level menu identifying the access entry of each configuration system; the first-level menu includes a second-level menu identifying the access entry of each configuration object under each configuration system; the target access entry is the access entry of the target configuration object under the target configuration system.

[0017] The step of triggering the target configuration system corresponding to the target access entry in each of the access entry points of the configuration system to perform access verification of the authorization token includes:

[0018] In response to a trigger operation on the identifier of the target access entry in the secondary menu, the target configuration system corresponding to the target access entry is triggered to perform access verification on the authorization token;

[0019] After successful access authentication, displaying the configuration subpage corresponding to the target configuration system on the comprehensive configuration page includes:

[0020] After successful access authentication, the configuration subpage corresponding to the target configuration object is displayed on the comprehensive configuration page.

[0021] In one embodiment, the menu in the comprehensive configuration page is generated using menu configuration information obtained through a menu configuration step; the menu configuration step includes:

[0022] In response to the first-level menu addition operation, an identifier for the access entry of each configuration system is added to the first-level menu;

[0023] In response to the operation of adding a second-level menu for the second-level menu, a second-level menu is added under the identifier of the access entry in the first-level menu, and the identifier of the access entry of the corresponding configuration object is added to the second-level menu.

[0024] In one embodiment, the user object is an object with a configuration personnel role; the configuration personnel role refers to the role of a person who performs configuration operations on each of the configuration systems; the operation permissions for performing configuration operations are set according to the configuration personnel role; the method further includes an authorization token generation step; the authorization token generation step includes:

[0025] The user's access permissions are determined based on the user's configured personnel roles.

[0026] An authorization token is generated based on the aforementioned operation permissions.

[0027] In one embodiment, the integration step of each of the configuration systems is further included; the integration step of each of the configuration systems includes:

[0028] Obtain the resource paths of each of the configuration systems; the resource paths are used to locate the configuration systems.

[0029] Based on markup language tags, the resource paths of each configuration system are written into the integrated configuration platform to integrate each configuration system in the integrated configuration platform.

[0030] Secondly, this application also provides a system access control system. The system includes: a first terminal and a server; the server runs an integrated configuration platform;

[0031] The first terminal is used to respond to a user object performing a configuration operation and logging into the integrated configuration platform, triggering the integrated configuration platform in the server to verify the login of the user object; the integrated configuration platform integrates multiple configuration systems;

[0032] After successful login verification, the server is used to return an authorization token granted to the user object to the first terminal based on the integrated configuration platform.

[0033] The first terminal is also used to obtain the authorization token and display the comprehensive configuration page of the comprehensive configuration platform; the comprehensive configuration page includes access points for each of the configuration systems; the authorization token is an authentication credential generated by the comprehensive configuration platform based on the configuration operation permissions after determining the configuration operation permissions of the user object;

[0034] The first terminal is also configured to respond to a trigger operation of a target access entry in the access entry of each of the configuration systems, triggering the target configuration system corresponding to the target access entry to perform access verification of the authorization token; after the access verification is successful, displaying the configuration subpage corresponding to the target configuration system in the comprehensive configuration page.

[0035] Thirdly, this application also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps of the methods described in the embodiments of this application.

[0036] Fourthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, implements the steps of the methods described in the embodiments of this application.

[0037] Fifthly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the steps of the methods described in the embodiments of this application.

[0038] The aforementioned system access control method, system, computer device, storage medium, and computer program product, in response to a user's login operation on the integrated configuration platform, triggers the integrated configuration platform to verify the user's login. The integrated configuration platform integrates multiple configuration systems. After successful login verification, an authorization token granted by the integrated configuration platform to the user is obtained, and the integrated configuration page of the integrated configuration platform is displayed. The integrated configuration page includes access points for each configuration system. The authorization token is an authentication credential generated by the integrated configuration platform based on the user's configuration operation permissions. In response to a trigger operation on a target access point in the access points of each configuration system, the target configuration system corresponding to the target access point is triggered to verify the authorization token. After successful access verification, the configuration subpage corresponding to the target configuration system is displayed on the integrated configuration page. The integrated configuration platform integrates multiple configuration systems and can grant authorization tokens to users based on configuration operation permissions, allowing users to access any authorized configuration system within the integrated configuration platform simply by logging in, effectively improving the efficiency of system access control. Attached Figure Description

[0039] Figure 1 This is an application environment diagram of a system access control method in one embodiment;

[0040] Figure 2 This is a flowchart illustrating a system access control method in one embodiment;

[0041] Figure 3 This is a schematic diagram illustrating the configuration of system access verification in one embodiment;

[0042] Figure 4a A diagram of the menu configuration in one embodiment;

[0043] Figure 4b A page diagram showing the configuration of subpages in one embodiment;

[0044] Figure 5a This is a diagram of the permission configuration interface in one embodiment;

[0045] Figure 5b This is a diagram of the permission configuration interface in one embodiment;

[0046] Figure 6 This is a structural block diagram of the system access control system in one embodiment;

[0047] Figure 7 This is an internal structural diagram of a computer device in one embodiment;

[0048] Figure 8 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0049] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0050] The system access control method provided in this application embodiment can be applied to, for example, Figure 1In the application environment shown, the first terminal 102 communicates with the server 104 via a network. A data storage system can store the data that the server 104 needs to process. The data storage system can be integrated onto the server 104 or placed on a cloud or other network server. The integrated configuration platform runs on the server 104, which provides computing and storage services. The first terminal 102 can respond to a user's login operation to the integrated configuration platform, triggering the server 104, which provides services to the integrated configuration platform, to verify the user's login. After successful login verification, the integrated configuration platform can generate an authorization token based on the server 104. The first terminal 102 can obtain the authorization token granted by the integrated configuration platform to the user and display the integrated configuration page of the integrated configuration platform. The first terminal 102 can also respond to a trigger operation on a target access point in the access points of various configuration systems, triggering the target configuration system corresponding to the target access point to verify the authorization token. After successful access verification, the first terminal 102 can display the configuration subpage corresponding to the target configuration system on the integrated configuration page. The first terminal 102 can be, but is not limited to, various personal computers, laptops, smartphones, tablets, IoT devices, and portable wearable devices. IoT devices can include smart speakers, smart TVs, smart air conditioners, and smart in-vehicle devices. Portable wearable devices can include smartwatches, smart bracelets, and head-mounted devices. The server 104 can be implemented using a standalone server or a server cluster consisting of multiple servers. It can be understood that the server 104 can provide hardware and software support for the integrated configuration platform.

[0051] In one embodiment, such as Figure 2 As shown, a system access control method is provided, which uses... Figure 1 The interaction between the first terminal and the server in the process includes the following steps:

[0052] Step 202: In response to the login operation of the user object performing the configuration operation on the integrated configuration platform, the integrated configuration platform is triggered to verify the login of the user object.

[0053] The integrated configuration platform comprises multiple configuration systems. A user is an individual who performs configuration operations on at least one of the integrated configuration systems. The integrated configuration platform is a platform used to support configuration operations across multiple configuration systems. Login verification refers to the authentication process performed on users logging into the integrated configuration platform. Configuration operations refer to the operations performed to configure data within a configuration system.

[0054] In one embodiment, the first terminal is the terminal where the user object resides.

[0055] Specifically, users can log in to the integrated configuration platform from a first terminal to perform configuration operations within the configuration system integrated into the platform. The first terminal can respond to the user's login operation by triggering the integrated configuration platform to verify the user's login. The integrated configuration platform verifies the user's login based on the computing services provided by the server and returns the verification result to the first terminal.

[0056] In one embodiment, the same configuration system may differ across different configuration environments. The integrated configuration management platform can integrate at least one configuration system from various deployment environments. It is understood that the deployment environments involved in the configuration systems integrated into the integrated configuration platform may include at least one of the following: development and integration environment, testing environment, user acceptance environment, and production environment.

[0057] In one embodiment, the integrated configuration platform can be implemented by a standalone server or a server cluster consisting of multiple servers.

[0058] As can be understood, a configuration system is a system that provides the actual configuration pages; that is, the configuration system must provide the configuration pages for the backend service system to configure data. A comprehensive configuration platform, on the other hand, is a platform that integrates multiple configuration systems. Essentially, it can provide access points to multiple configuration systems, but the final data configuration processing is still completed by each individual configuration system itself.

[0059] In one embodiment, the user object has a configuration personnel role. The configuration personnel role may include at least one of the following roles: front-end developer, back-end developer, tester, administrator, and system owner.

[0060] Step 204: After successful login verification, obtain the authorization token granted by the integrated configuration platform to the user object, and display the integrated configuration page of the integrated configuration platform;

[0061] The integrated configuration page includes access points for each configuration system. An authorization token is an authentication credential generated by the integrated configuration platform based on the user's configuration operation permissions. The integrated configuration page refers to the page used to access the various configuration systems integrated within the integrated configuration platform. The access points for each configuration system are the entry points for accessing those systems.

[0062] Specifically, the integrated configuration platform can generate an authorization token based on the configuration personnel role of the user. After successful login verification, the first terminal can obtain the authorization token granted by the integrated configuration platform to the user and display the integrated configuration page of the integrated configuration platform.

[0063] Step 206: In response to the triggering operation of the target access entry in the access entry of each configuration system, the target configuration system corresponding to the target access entry is triggered to verify the access token; after the access verification is successful, the configuration subpage corresponding to the target configuration system is displayed on the comprehensive configuration page.

[0064] Here, "target access point" refers to the access point corresponding to the triggered operation. "Access verification" refers to the verification of the authorization token carried by the user object accessing the target configuration system. "Configuration subpage" refers to the page used for configuration operations within the target configuration system. "Target configuration system" refers to the configuration system corresponding to the target access point.

[0065] Specifically, users can trigger operations on target access points within various configuration systems' access points on the comprehensive configuration page displayed on the first terminal. The first terminal can respond to this operation by triggering the target configuration system corresponding to the target access point to verify the authorization token. The target configuration system can then return the verification result to the first terminal. After successful verification, the first terminal can display the corresponding configuration subpage of the target configuration system on the comprehensive configuration page.

[0066] The aforementioned system access control method, in response to a user's login operation to the integrated configuration platform, triggers the integrated configuration platform to verify the user's login. The integrated configuration platform integrates multiple configuration systems. After successful login verification, it obtains an authorization token granted to the user by the integrated configuration platform and displays the integrated configuration page of the platform. The integrated configuration page includes access points for each configuration system. The authorization token is an authentication credential generated by the integrated configuration platform based on the user's configuration operation permissions. In response to a trigger operation on a target access point within the access points of each configuration system, it triggers the target configuration system corresponding to the target access point to verify the authorization token. After successful access verification, the configuration subpage corresponding to the target configuration system is displayed on the integrated configuration page. The integrated configuration platform integrates multiple configuration systems and can grant authorization tokens to users based on configuration operation permissions, enabling users to access any authorized configuration system within the integrated configuration platform, effectively improving the efficiency of system access control.

[0067] In one embodiment, each configuration system integrated in the comprehensive configuration platform corresponds to multiple deployment environments; the method further includes: in response to an environment switching operation performed on a target configuration system, determining a target environment identifier to be switched to; and displaying a target configuration subpage corresponding to the target configuration system in the target deployment environment on the comprehensive configuration page; the target configuration system is the configuration system corresponding to the target environment identifier.

[0068] The "Environment Switching" operation refers to the operation used to switch deployment environments within the overall configuration page. The "Target Deployment Environment" refers to the deployment environment to be switched to during the environment switching operation. The "Target Configuration Subpage" refers to the configuration subpage corresponding to the target configuration system within the target deployment environment.

[0069] In one embodiment, the integrated configuration platform is a facade system that integrates multiple configuration systems in multiple deployment environments.

[0070] Specifically, users can switch between different deployment environments on the comprehensive configuration page displayed on the first terminal, based on the identifiers of each environment. The first terminal can respond to this operation and determine the target environment identifier to switch to. The first terminal can then display the target configuration subpage corresponding to the target deployment environment associated with the target environment identifier.

[0071] In one embodiment, the configuration system can provide different page entry points according to different deployment environments. It can be understood that the page entry point is the configuration page corresponding to the configuration system. The integrated configuration platform can integrate various configuration systems by integrating the configuration pages from different deployment environments.

[0072] In one embodiment, the comprehensive configuration page can be displayed by directly showing the identifiers of each deployment environment or by embedding the identifiers of the deployment environments into page elements.

[0073] In one embodiment, the comprehensive configuration page can display the identifiers of each deployment environment through at least one page element such as a search box, a drop-down list, and an environment switching button.

[0074] In one embodiment, the comprehensive configuration page can embed the identifiers of each deployment environment into a drop-down list, and users can switch the deployment environment of the configuration system by selecting the identifiers of each deployment environment in the drop-down list on the comprehensive configuration page.

[0075] In this embodiment, the first terminal can respond to the environment switching operation performed on the comprehensive configuration page, determine the target environment identifier to be switched to, and display the access entrances of each configuration system in the target deployment environment corresponding to the target environment identifier. This allows for targeted control of access to configuration systems in each deployment environment when the user logs into the comprehensive configuration platform only once, without requiring the user to log in again. This improves the efficiency of system access control and makes access to configuration systems in each deployment environment more convenient.

[0076] In one embodiment, the method further includes: sending an environment switching authentication request to the server based on the target environment identifier; the environment switching authentication request is used to instruct the server to obtain the deployment environment access permissions of the authorization token, and to determine whether the user object has access permissions for the target deployment environment based on the deployment environment access permissions; after receiving the notification from the server that the user has access permissions, the method executes the display of the target configuration subpage corresponding to the target configuration system in the target deployment environment on the comprehensive configuration page.

[0077] Specifically, the first terminal can send an environment switching authentication request to the server for the target deployment environment corresponding to the target environment identifier. The server can obtain the deployment environment access permissions granted by the authorization token according to the environment switching authentication request, and determine whether the user object has access permissions for the target deployment environment from the deployment environment access permissions. The server can return a notification to the first terminal indicating whether the user object has access permissions. After receiving the notification from the server indicating that access permissions are granted, the first terminal executes the process of displaying the target configuration subpage corresponding to the target configuration system in the target deployment environment on the comprehensive configuration page.

[0078] In one embodiment, such as Figure 3 This diagram illustrates the access verification process for the configuration system. Environment switching authentication can be completed through interaction between the integrated configuration platform and the configuration system. After successful login verification for a user, the integrated configuration platform returns an authorization token to the user via a first terminal and writes the authorization token into the session sharing (session Redis) between the integrated configuration platform and the configuration system. The integrated configuration platform can provide a single sign-on toolkit (SSO SDK) to configuration system A in each deployment environment. The configuration system can use the SSO SDK to determine the access permissions contained in the authorization token. Configuration system A can perform access verification on the user carrying the authorization token, determining whether the user has access permissions to the configuration system in the target deployment environment, that is, determining the access permissions in the authorization token corresponding to the target deployment environment, and obtaining the access verification result. If the access verification is successful, the integrated configuration management platform can trigger the first terminal to display the access entry point of configuration system A in the target deployment environment to the user. It is understood that the diagram only shows access to configuration systems in multiple environments; in fact, the method in this embodiment can also be applied to multiple configuration systems in multiple environments.

[0079] In this embodiment, an environment switching authentication request is sent to the server based on the target environment identifier. After receiving a notification from the server that the user has access rights, the system displays the target configuration subpage corresponding to the target configuration system in the target deployment environment on the comprehensive configuration page. This can be combined with single sign-on to achieve session persistence, allowing users to quickly switch between configuration subpages in multiple environments of multiple systems with only one login. This enables convenient access to configuration systems in multiple environments and improves the efficiency of system access control.

[0080] In one embodiment, the comprehensive configuration page includes a primary menu identifying the access entry points of each configuration system; a secondary menu including the access entry points of each configuration object under each configuration system; a target access entry point, which is the access entry point of the target configuration object under the target configuration system; triggering the target configuration system corresponding to the target access entry point to perform access token verification in response to a trigger operation on the target access entry point in the access entry points of each configuration system includes: triggering the target configuration system corresponding to the target access entry point to perform access token verification in response to a trigger operation on the identifier of the target access entry point in the secondary menu; displaying the configuration subpage corresponding to the target configuration system on the comprehensive configuration page after successful access authentication includes: displaying the configuration subpage corresponding to the target configuration object on the comprehensive configuration page after successful access authentication.

[0081] The first-level menu displays the identifiers of the access points for each configuration system. The second-level menu displays the identifiers of the access points for each configuration object within each configuration system.

[0082] Specifically, a user object can trigger an operation on the identifier of the target access entry in the secondary menu. The first terminal can respond to this operation, triggering the target configuration system corresponding to the target access entry to verify the authorization token. The target configuration system can then return the verification result to the first terminal. After successful access authentication, the first terminal can display the configuration subpage corresponding to the target configuration object on the comprehensive configuration page.

[0083] In this embodiment, in response to the triggering operation of the identifier of the target access entry in the secondary menu, the target configuration system corresponding to the target access entry is triggered to verify the access token. After the access authentication is successful, the configuration subpage corresponding to the target configuration object is displayed in the comprehensive configuration page, and the access entry is displayed in the form of a menu. Access control is specifically performed on each configuration object under each configuration system, ensuring the stability of system access control.

[0084] In one embodiment, the menu in the comprehensive configuration page is generated using menu configuration information obtained through the menu configuration steps. The menu configuration steps include: in response to a first-level menu addition operation for a first-level menu, adding an identifier for the access entry of each configuration system to the first-level menu; in response to a second-level menu addition operation for a second-level menu, adding a second-level menu under the identifier of the access entry in the first-level menu, and adding an identifier for the access entry of the corresponding configuration object to the second-level menu.

[0085] In one embodiment, the second terminal is the terminal where the administrator of the integrated configuration platform is located, and the operation order configuration steps are executed by the second terminal.

[0086] Specifically, the second terminal can respond to the first-level menu addition operation for the first-level menu by adding the identifier of the access entry of each configuration system in the first-level menu; and respond to the second-level menu addition operation for the second-level menu by adding the second-level menu under the identifier of the access entry in the first-level menu, and adding the identifier of the access entry of the corresponding configuration object in the second-level menu.

[0087] In one embodiment, such as Figure 4a The menu configuration interface shown in the image and Figure 4b The diagram shows a configuration subpage. Each service system's corresponding configuration system can be developed independently. When integrating these systems into the integrated configuration platform, to achieve rapid integration, in addition to connecting each system to the single sign-on toolkit, the menu configuration function provided by the integrated configuration platform can also be utilized. The integrated configuration platform can configure the menu and resource information of each configuration system and the configuration objects within each system. Menu information includes menu name, menu description, parent menu (previous level menu), and menu path. It can be understood that the integrated configuration platform allows configuring multi-level menus by specifying a parent menu. Resource information includes resource path, resource description, and modification interface configuration. It can be understood that the resource path can be a resource within a page of the configuration system, such as a page interface.

[0088] The effect after configuration is as follows Figure 4bAs shown, the menu is divided into a first-level menu and a second-level menu. The first-level menu includes access points for each configuration system, and the second-level menu includes access points for each configuration object within the configuration system. Users can select "Mobile Gateway" from the first-level menu to display the second-level menu under "Mobile Gateway." Users can also select "Gateway Configuration" to display the configuration subpage corresponding to the gateway configuration identifier. For example, the access point identifier for the configuration system is "Mobile Gateway," and the access point identifier for the configuration object within that configuration system is "Gateway Configuration." Furthermore, the variable `${env}` (environment variable) refers to different environment identifiers, such as SE (development integration environment identifier), ST (system testing environment identifier), and UAT (user acceptance testing environment identifier). During runtime, the deployment environment is dynamically switched based on the environment identifier selected by the user in the environment drop-down menu.

[0089] In this embodiment, in response to the operation of adding a first-level menu to the first-level menu, an identifier for the access entry of each configuration system is added to the first-level menu; in response to the operation of adding a second-level menu to the second-level menu, a second-level menu is added under the identifier of the access entry in the first-level menu, and an identifier for the access entry of the corresponding configuration object is added to the second-level menu. Based on the menu, each configuration system and the configuration objects in each configuration system are quickly integrated into the comprehensive configuration platform for unified access control. This improves the efficiency of system access control while enabling convenient access to each configuration system.

[0090] In one embodiment, the user object is an object with a configuration personnel role; the configuration personnel role refers to the role of a person who performs configuration operations on various configuration systems; the operation permissions used to perform configuration operations are set according to the configuration personnel role; the method also includes an authorization token generation step; the authorization token generation step includes: determining the operation permissions of the user object according to the configuration personnel role of the user object; and generating an authorization token based on the operation permissions.

[0091] Specifically, the authorization token generation process is executed by the server corresponding to the integrated configuration platform. The server can determine the user's operational permissions from pre-set access rights based on the user's configured role. The server can then generate an authorization token carrying the user's assigned operational permissions.

[0092] In one embodiment, a permission configuration step is also included. For example... Figure 5a and Figure 5bThe diagram shows the permission configuration interface. Each configuration system connects to the integrated configuration platform, and each system can correspond to different configuration personnel roles. Permissions must be isolated between user objects corresponding to different configuration personnel roles. The permission management interface is used for permission configuration. The permission management interface includes a role management page, a role resource management page, a user role management page, and a system administrator management page. Administrators of the integrated configuration platform can add configuration personnel roles on the role management page and add role resources for configuration personnel roles on the role resource management page. Role resources can be understood as essentially operation permissions.

[0093] In one embodiment, role resources can be page interfaces within a configuration system. A page interface is typically a function button on a page, i.e., an operation button. The integrated configuration platform can configure page interfaces for different configuration personnel roles to achieve access control.

[0094] In this embodiment, the operation permissions of a user object are determined according to the configuration personnel role of the user object; an authorization token is generated based on the operation permissions, and the permissions between different configuration personnel roles are isolated. The system performs targeted permission control on user objects with configuration personnel roles to ensure the stability of system access control.

[0095] In one embodiment, the system further includes an integration step for each configuration system; the integration step for each configuration system includes: obtaining the resource paths of each configuration system; using the resource paths to locate the configuration systems; and writing the resource paths of each configuration system into the integrated configuration platform based on markup language tags, so as to integrate the configuration systems in the integrated configuration platform.

[0096] Specifically, developers can obtain the resource paths of each configuration system through the terminal, combine the resource paths with markup language tags, and write the resource paths of each configuration system into the integrated configuration platform to integrate the various configuration systems in the integrated configuration platform.

[0097] In one embodiment, the markup language can be Hypertext Markup Language. The markup language tag can be an inline frame tag (…). <iframe>It includes at least one of the tags such as the tag (label) and the hyperlink tag (tag).

[0098] In one embodiment, the integrated configuration management platform can <iframe>integrate pages from various configuration systems according to each deployment environment via tags. It is understood that users can access pages from the configuration systems within the target deployment environment from the integrated configuration page, and the integrated configuration platform can <iframe>load pages from the configuration systems via tags.

[0099] In this embodiment, the resource paths of each configuration system are obtained; the resource paths are used to locate the configuration system; based on markup language tags, the resource paths of each configuration system are written into the integrated configuration platform to integrate each configuration system in the integrated configuration platform. Integrating each configuration system into the integrated configuration platform for unified access control can improve the efficiency of system access control.

[0100] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise expressly stated herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages in other steps.

[0101] Based on the same inventive concept, this application also provides a system access control system for implementing the system access control method described above. The solution provided by this system is similar to the solution described in the above method. Therefore, the specific limitations in one or more system access control system embodiments provided below can be found in the limitations of the system access control method above, and will not be repeated here.< / iframe>< / iframe>

[0102] In one embodiment, as shown in Figure 6, a system access control system 600 is provided, including: a first terminal 602 and a server 604, where:

[0103] The integrated configuration platform runs in the server;

[0104] The first terminal 602 is configured to trigger the integrated configuration platform in the server to perform a login verification on the user object in response to a login operation of the user object performing a configuration operation on the integrated configuration platform; multiple configuration systems are integrated in the integrated configuration platform;

[0105] The server 604 is configured to return an authorization token granted to the user object to the first terminal based on the integrated configuration platform after the login verification is passed;

[0106] The first terminal 602 is further configured to obtain the authorization token and display the integrated configuration page of the integrated configuration platform; the integrated configuration page includes access entries for each configuration system; the authorization token is an authentication credential generated by the integrated configuration platform based on the configuration operation permissions after determining the configuration operation permissions of the user object;

[0107] The first terminal 602 is further configured to trigger the target configuration system corresponding to the target access entry to perform an access verification on the authorization token in response to a trigger operation on the target access entry in the access entries of each configuration system; after the access verification is passed, a configuration sub-page corresponding to the target configuration system is displayed in the integrated configuration page.

[0108] In one embodiment, each configuration system integrated in the integrated configuration platform corresponds to multiple deployment environments; the first terminal 602 is further configured to determine a target environment identifier to be switched to in response to an environment switching operation performed on the target configuration system; in the integrated configuration page, a target configuration sub-page corresponding to the target configuration system in the target deployment environment is displayed; the target configuration system is the configuration system corresponding to the target environment identifier.

[0109] In one embodiment, the first terminal 602 is further configured to send an environment switching authentication request to the server 604 based on the target environment identifier; the environment switching authentication request is used to instruct the server to obtain the deployment environment access permissions of the authorization token; and to determine whether the user object has access permissions for the target deployment environment based on the deployment environment access permissions; the first terminal 602 is further configured to, after receiving the notification of access permissions returned by the server 604, execute the display of the target configuration subpage corresponding to the target configuration system in the target deployment environment on the comprehensive configuration page.

[0110] In one embodiment, the comprehensive configuration page includes a first-level menu with identifiers of access entrances for each configuration system; the first-level menu includes a second-level menu with identifiers of access entrances for each configuration object under each configuration system; the target access entrance is the access entrance for the target configuration object under the target configuration system; the first terminal 602 is further configured to respond to a trigger operation on the identifier of the target access entrance in the second-level menu to trigger the target configuration system corresponding to the target access entrance to perform access verification of the authorization token; after the access authentication is successful, the configuration subpage corresponding to the target configuration object is displayed on the comprehensive configuration page.

[0111] In one embodiment, a second terminal is also included; the menu in the comprehensive configuration page is generated by the menu configuration information obtained through the menu configuration steps; the second terminal is used to add the identifier of the access entry of each configuration system in the first-level menu in response to the first-level menu addition operation for the first-level menu; and to add the second-level menu under the identifier of the access entry in the first-level menu in response to the second-level menu addition operation for the second-level menu, and add the identifier of the access entry of the corresponding configuration object in the second-level menu.

[0112] In one embodiment, the user object is an object with a configuration personnel role; the configuration personnel role refers to the role of the person who performs configuration operations on each configuration system; the operation permissions for performing configuration operations are set according to the configuration personnel role; the method also includes an authorization token generation step; the server 604 is also used to determine the operation permissions of the user object according to the configuration personnel role of the user object; and generate an authorization token based on the operation permissions.

[0113] Each device in the above-mentioned system access control system can be implemented entirely or partially through software, hardware, or a combination thereof. Each of the above-mentioned devices can be embedded in the processor of the computer device in hardware form or independent of it, or can be stored in the memory of the computer device in software form, so that the processor can call and execute the corresponding operations of each of the above-mentioned devices.

[0114] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in Figure 7. The computer device includes a processor, a memory, and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store system access control-related data. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, it implements a system access control method.

[0115] In one embodiment, a computer device is provided. The computer device may be a terminal, for example, it may be the first terminal or the second terminal of this application. Its internal structure diagram may be as shown in Figure 8. The computer device includes a processor, a memory, a communication interface, a display screen, and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner. The wireless manner can be achieved through WIFI, a mobile cellular network, NFC (Near Field Communication), or other technologies. When the computer program is executed by the processor, it implements a system access control method. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device may be a touch layer covering the display screen, or a button, a trackball, or a touchpad provided on the computer device housing, or an external keyboard, touchpad, or mouse, etc.

[0116] Those skilled in the art can understand that the structures shown in Figure 7 and Figure 8 are merely block diagrams of some structures related to the solution of this application, and do not constitute a limitation on the computer device to which the solution of this application is applied. The specific computer device may include more or fewer components than those shown in the figures, or combine some components, or have different component arrangements.

[0117] In one embodiment, a computer device is provided, including a memory and a processor. A computer program is stored in the memory, and when the processor executes the computer program, the steps in the above method embodiments are implemented.

[0118] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above method embodiments are implemented.

[0119] In one embodiment, a computer program product is provided, including a computer program. When the computer program is executed by a processor, the steps in the above method embodiments are implemented.

[0120] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0121] Those of ordinary skill in the art can understand that all or part of the processes of implementing the above method embodiments can be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it may include the processes of the above method embodiments. Among them, any reference to a memory, database, or other medium used in the various embodiments provided in this application may include at least one of non-volatile and volatile memories.Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory may include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The databases involved in the various embodiments provided in this application may include at least one of relational databases and non-relational databases. Non-relational databases may include distributed databases based on blockchain, etc., and are not limited thereto. The processors involved in the various embodiments provided in this application may be general-purpose processors, central processing units, graphics processors, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited thereto.

[0122] The technical features of the above embodiments can be combined in any way. In order to make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0123] The embodiments described above are merely examples of several implementation methods of this application, and their descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of this application. It should be noted that, for those skilled in the art, several modifications and improvements can be made without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.< / iframe>

Claims

1. A system access control method, characterized in that, The method includes: In response to a user's login operation to the integrated configuration platform, the integrated configuration platform is triggered to verify the login of the user; the integrated configuration platform integrates multiple configuration systems; After successful login verification, the system obtains the authorization token granted by the integrated configuration platform to the user and displays the integrated configuration page of the integrated configuration platform. The integrated configuration page includes access points for each of the configuration systems. The authorization token is an authentication credential generated by the server corresponding to the integrated configuration platform based on the configuration operation permissions determined from the pre-set operation permissions according to the user's configuration personnel role. Each configuration system integrated in the integrated configuration platform corresponds to multiple deployment environments. The deployment environments include at least a development and debugging environment, a testing environment, a user acceptance environment, and a production environment. The configuration personnel roles include at least front-end developers, back-end developers, and testers. In response to a trigger operation on a target access point in the access points of each configuration system, the target configuration system corresponding to the target access point is triggered to verify the authorization token. After the access verification is successful, the configuration subpage corresponding to the target configuration system is displayed on the comprehensive configuration page; In response to an environment switching operation performed on the target configuration system, a target environment identifier to be switched to is determined, and an environment switching authentication request is sent to the server based on the target environment identifier; If the authorization token has access permissions corresponding to the target environment, the target configuration subpage corresponding to the target configuration system in the target deployment environment will be displayed on the comprehensive configuration page. The method further includes: Display the permission management interface; the permission management interface includes at least a role management page and a role resource management page; Add a configuration personnel role on the role management page, and add role resources for the configuration personnel role on the role resource management page; the role resources are page interfaces in the configuration system.

2. The method according to claim 1, characterized in that, The target configuration system is the configuration system corresponding to the target environment identifier.

3. The method according to claim 1, characterized in that, The step of sending an environment switching authentication request to the server based on the target environment identifier includes: Based on the target environment identifier, an environment switching authentication request is sent to the server; the environment switching authentication request is used to instruct the server to obtain the deployment environment access permissions of the authorization token, and to determine whether the user object has access permissions for the target deployment environment based on the deployment environment access permissions; After receiving the notification from the server that it has access rights, the system executes the step of displaying the target configuration subpage corresponding to the target configuration system in the target deployment environment on the comprehensive configuration page.

4. The method according to claim 1, characterized in that, The comprehensive configuration page includes a first-level menu with identifiers for the access points of each configuration system; the first-level menu includes a second-level menu with identifiers for the access points of each configuration object under each configuration system; The target access entry is the access entry point for the target configuration object under the target configuration system; The step of triggering the target configuration system corresponding to the target access entry in each of the access entry points of the configuration system to perform access verification of the authorization token includes: In response to a trigger operation on the identifier of the target access entry in the secondary menu, the target configuration system corresponding to the target access entry is triggered to perform access verification on the authorization token; After successful access authentication, displaying the configuration subpage corresponding to the target configuration system on the comprehensive configuration page includes: After successful access authentication, the configuration subpage corresponding to the target configuration object is displayed on the comprehensive configuration page.

5. The method according to claim 4, characterized in that, The menu in the comprehensive configuration page is generated using the menu configuration information obtained through the menu configuration steps. The menu configuration steps include: In response to the first-level menu addition operation, an identifier for the access entry of each configuration system is added to the first-level menu; In response to the operation of adding a second-level menu for the second-level menu, a second-level menu is added under the identifier of the access entry in the first-level menu, and the identifier of the access entry of the corresponding configuration object is added to the second-level menu.

6. The method according to claim 1, characterized in that, The user object is an object with the role of a configuration personnel; the role of a configuration personnel refers to the role of a person who performs configuration operations on each of the configuration systems.

7. The method according to any one of claims 1 to 6, characterized in that, It also includes an integration step for each of the configuration systems; the integration step for each of the configuration systems includes: Obtain the resource paths of each of the configuration systems; the resource paths are used to locate the configuration systems. Based on markup language tags, the resource paths of each configuration system are written into the integrated configuration platform to integrate each configuration system in the integrated configuration platform.

8. A system access control system, characterized in that, The system includes: a first terminal, a second terminal, and a server; the server runs an integrated configuration platform. The first terminal is used to respond to a user object performing a configuration operation and logging into the integrated configuration platform, triggering the integrated configuration platform in the server to verify the login of the user object; the integrated configuration platform integrates multiple configuration systems; After successful login verification, the server returns an authorization token granted to the user object to the first terminal based on the integrated configuration platform. The authorization token is an authentication credential generated by the server corresponding to the integrated configuration platform after determining the user object's configuration operation permissions from pre-set operation permissions according to the user object's configuration personnel role. Each configuration system integrated in the integrated configuration platform corresponds to multiple deployment environments. The deployment environments include at least a development and integration environment, a testing environment, a user acceptance environment, and a production environment. The configuration personnel roles include at least front-end developers, back-end developers, and testers. The first terminal is also used to obtain the authorization token and display the comprehensive configuration page of the comprehensive configuration platform; the comprehensive configuration page includes access points for each of the configuration systems; the authorization token is an authentication credential generated by the comprehensive configuration platform based on the configuration operation permissions after determining the configuration operation permissions of the user object; The first terminal is also configured to respond to a trigger operation of a target access entry in the access entry of each of the configuration systems, triggering the target configuration system corresponding to the target access entry to perform access verification of the authorization token; after the access verification is successful, displaying the configuration subpage corresponding to the target configuration system in the comprehensive configuration page; The first terminal is also configured to respond to the environment switching operation performed on the target configuration system, determine the target environment identifier to be switched to, and send an environment switching authentication request to the server based on the target environment identifier; if the authorization token has access permissions corresponding to the target environment, the target configuration subpage corresponding to the target configuration system in the target deployment environment is displayed on the comprehensive configuration page; The second terminal is used to display a permission management interface; the permission management interface includes at least a role management page and a role resource management page; a configuration personnel role is added on the role management page, and role resources are added for the configuration personnel role on the role resource management page; the role resources are page interfaces in the configuration system.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.

Images