A user permission determination method and apparatus, electronic device, and storage medium

By combining user roles and business module status information to obtain the intersection of operation permissions, the problem of imprecise permission configuration in existing technologies is solved, enabling more granular permission control and improving the efficiency and accuracy of permission management.

CN114417282BActive Publication Date: 2026-04-24ECARX (HUBEI) TECHCO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
ECARX (HUBEI) TECHCO LTD
Filing Date
2022-01-19
Publication Date
2026-04-24

AI Technical Summary

Technical Problem

Existing permission configuration methods cannot achieve fine-grained control over user permissions, resulting in users having operation permissions beyond their required permissions in certain business modules, such as having editing permissions in business module A but not being authorized.

Method used

By determining the user's role and the status information of the target business module, the corresponding set of operation permissions is obtained, and the intersection of the two is taken as the user's target operation permissions, thus achieving fine-grained permission control.

Benefits of technology

It enables fine-grained control over user operation permissions in different business modules and states, avoiding excessive or insufficient permission configuration and improving the efficiency and accuracy of permission control.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114417282B_ABST
    Figure CN114417282B_ABST
Patent Text Reader

Abstract

Embodiments of the present application provide a user permission determination method and device, electronic equipment and storage medium, the above-mentioned method comprises: after receiving a user login instruction, determining the role corresponding to the user, and obtaining the first operation permission set corresponding to the role; after receiving an instruction that the user triggers a target business module, obtaining state information of the target business module, and obtaining the second operation permission set corresponding to the state information; the intersection of the first operation permission set and the second operation permission set is determined as the target operation permission of the user. By using the method, the target operation permission of the user to the target business module can be determined together by combining the role corresponding to the user and the state information of the target business module, the operation permission corresponding to the business module of different users in different states can be controlled in detail, and the defect that the user permission cannot be controlled in detail is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of vehicle networking technology, and in particular to a user permission determination method, device, electronic device, and storage medium. Background Technology

[0002] Currently, in business areas such as intelligent driving and software development, management systems can directly configure operational permissions for users across the entire business processing system. However, this permission configuration method cannot control the more granular permissions of users within specific operational modules. For example, the management system might configure all operational permissions (such as view and edit permissions) for a user within the driving system, while business module A within the driving system only grants view permissions. This results in the management system configuring operational permissions for the user exceeding the permissions required by business module A. Furthermore, it could lead to a user who does not originally have edit permissions for business module A performing edit operations on it. In other words, existing permission configuration methods have the flaw of not being able to finely control user permissions. Summary of the Invention

[0003] The purpose of this invention is to provide a method, apparatus, electronic device, and storage medium for determining user permissions, so as to achieve fine-grained control over user permissions.

[0004] In a first aspect, embodiments of the present invention provide a method for determining user permissions, including:

[0005] Upon receiving a user login instruction, determine the role corresponding to the user and obtain the first set of operation permissions corresponding to the role;

[0006] Upon receiving the user's instruction to trigger the target business module, the system obtains the status information of the target business module and the second set of operation permissions corresponding to the status information.

[0007] The intersection of the first set of operation permissions and the second set of operation permissions is determined as the user's target operation permissions.

[0008] Optionally, before determining the user's role after receiving the user login instruction, the method further includes:

[0009] Configure corresponding operation permissions for each role;

[0010] Based on the attribute information of each user, a corresponding role is configured for each user account, thus obtaining the correspondence between user accounts and roles.

[0011] Optionally, before obtaining the status information of the target service module, the method further includes:

[0012] Configure corresponding operation permissions for each state of each business module. The state of each business module includes at least one of the following: pending development, in progress, and completed.

[0013] Optionally, the user's role can be a visitor, developer, or administrator.

[0014] The step of determining the role corresponding to the user includes:

[0015] Obtain the target user account indicated by the user login instruction;

[0016] Based on the pre-obtained correspondence between user accounts and roles, the role corresponding to the target user account is determined to be a visitor, developer, or administrator.

[0017] Optionally, the method further includes:

[0018] Display the operation button corresponding to the target operation permission so that the user can operate the target business module based on the operation button.

[0019] Secondly, embodiments of the present invention provide a user permission determination device, comprising:

[0020] The role determination module is used to determine the role corresponding to the user after receiving the user login instruction, and to obtain the first set of operation permissions corresponding to the role.

[0021] The information acquisition module is used to acquire the status information of the target business module and the second set of operation permissions corresponding to the status information after receiving the instruction from the user to trigger the target business module.

[0022] The permission determination module is used to determine the intersection of the first set of operation permissions and the second set of operation permissions as the user's target operation permissions.

[0023] Optionally, the device further includes:

[0024] The role and permission configuration module is used to configure corresponding operation permissions for each role; it configures corresponding roles for each user's account based on each user's attribute information, thus obtaining the correspondence between user accounts and roles.

[0025] Optionally, the device further includes:

[0026] The status permission configuration module is used to configure corresponding operation permissions for each status of each business module. The status of each business module includes at least one of the following: pending development status, in progress status, and completed status.

[0027] Optionally, the user's role can be a visitor, developer, or administrator.

[0028] The role determination module is specifically used to obtain the target user account indicated by the user login instruction; based on the pre-obtained correspondence between user accounts and roles, determine the role corresponding to the target user account as a visitor, developer, or administrator.

[0029] Optionally, the device further includes:

[0030] The display module is used to display the operation buttons corresponding to the target operation permissions, so that the user can operate the target business module based on the operation buttons.

[0031] Thirdly, embodiments of the present invention provide an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0032] Memory, used to store computer programs;

[0033] When a processor executes a program stored in memory, it implements any of the steps described in the first aspect above.

[0034] Fourthly, embodiments of the present invention provide a computer-readable storage medium storing a computer program, which, when executed by a processor, implements any of the steps described in the first aspect above.

[0035] Beneficial effects of the embodiments of the present invention:

[0036] The method provided in this invention, upon receiving a user login instruction, determines the user's corresponding role and obtains a first set of operation permissions corresponding to that role. Upon receiving an instruction from the user to trigger a target business module, it obtains the target business module's status information and a second set of operation permissions corresponding to that status information. The intersection of the first and second set of operation permissions is determined as the user's target operation permissions. This allows for the combined determination of the user's target operation permissions for the target business module by combining the user's corresponding role and the target business module's status information. This enables fine-grained control over the operation permissions of different users in different states of the business module, allowing administrators to directly maintain the operation permissions of user roles or the operation permissions of different states of various business modules according to different needs. This overcomes the shortcomings of not being able to finely control user permissions and achieves more granular and refined permission control.

[0037] The method provided in the embodiments of the present invention is used. Of course, implementing any product or method of the present invention does not necessarily require achieving all of the advantages described above at the same time. Attached Figure Description

[0038] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other embodiments can be obtained based on these drawings.

[0039] Figure 1 A flowchart of a user permission determination method provided in an embodiment of the present invention;

[0040] Figure 2 This is a schematic diagram of a user permission determination device provided in an embodiment of the present invention;

[0041] Figure 3 This is another schematic diagram of the user permission determination device provided in an embodiment of the present invention;

[0042] Figure 4 This is another structural schematic diagram of the user permission determination device provided in an embodiment of the present invention;

[0043] Figure 5 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0044] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art based on this application are within the scope of protection of the present invention.

[0045] To achieve fine-grained control over user permissions, embodiments of the present invention provide a user permission determination method, apparatus, electronic device, computer-readable storage medium, and computer program product. The user permission determination method provided by these embodiments can be applied to any electronic device capable of permission control processing, such as computers and mobile phones, and is not specifically limited thereto.

[0046] The user permission determination method provided in the embodiments of the present invention will be described in detail below. Figure 1 A flowchart of a user permission determination method provided in an embodiment of the present invention is shown below. Figure 1 As shown, the method includes:

[0047] Step 101: After receiving the user login instruction, determine the role corresponding to the user and obtain the first set of operation permissions corresponding to the role.

[0048] In this embodiment of the invention, the user login command can be either a login key triggered by the user on the business processing unit, or a login key triggered by the user on a specific business module within the business processing unit. The business processing unit is a collection of services including at least one business module. The business modules included in the business processing unit can be services from different application scenarios. For example, the business processing unit can be a processing unit in the field of intelligent driving, specifically including a lane line recognition module, a traffic light recognition module, and an obstacle alarm module. The business processing unit can also be a processing unit in the field of APP development, specifically including an application development module, an application maintenance module, and a problem feedback module.

[0049] In this embodiment of the invention, the user's role can be a visitor, developer, or administrator, etc.

[0050] In this embodiment of the invention, before determining the user's role after receiving the user login instruction, the following steps A1-A2 may be included:

[0051] Step A1: Configure the corresponding operation permissions for each role.

[0052] In this embodiment of the invention, the system administrator can pre-configure corresponding operation permissions for each role. For example, the administrator can pre-configure the "view" operation permission for visitors; the "view," "add," and "delete" operation permissions for developers; and the "view," "add," "edit," and "delete" operation permissions for administrators. Roles configured with the "view" operation permission can view all business modules; roles configured with the "add" operation permission can add new business modules to the business processing unit; roles configured with the "delete" operation permission can delete business modules in the business processing unit; and roles configured with the "edit" operation permission can edit the business modules in the business processing unit.

[0053] Step A2: Configure corresponding roles for each user's account based on the attribute information of each user, and obtain the correspondence between user accounts and roles.

[0054] In this embodiment of the invention, the system administrator can pre-configure corresponding roles for each user's account based on the user's attribute information on the user account management platform, and store the correspondence between user accounts and roles. The user's attribute information can be their job title. For example, if user A's job title is not a developer or administrator in the business processing unit, and user A's user account is "xvbc", then the role configured for user account "xvbc" can be "guest"; if user B's job title is a developer in the business processing unit, and user B's user account is "x12b", then the role configured for user account "x12b" can be "developer"; if user C's job title is an administrator in the business processing unit, and user C's user account is "b34n", then the role configured for user account "b34n" can be "administrator". Then, the correspondence between user accounts and roles can be stored, that is, user account "xvbc" – guest, user account "x12b" – developer, and user account "b34n" – administrator can be stored accordingly.

[0055] In one possible implementation, the step of determining the role corresponding to the user may include the following steps B1-B2:

[0056] Step B1: Obtain the target user account indicated by the user login instruction.

[0057] In this embodiment of the invention, the user login instruction includes the account the user wants to log into the business processing unit, i.e., the target user account. For example, if user A's user account for logging into the business processing unit is "xvbc", then the target user account is "xvbc". The target user account can identify the user's identity within the business processing unit.

[0058] Step B2: Based on the pre-obtained correspondence between user accounts and roles, determine whether the role corresponding to the target user account is a visitor, developer, or administrator.

[0059] In this embodiment of the invention, for example, if the target user account is "xvbc" and the role corresponding to "xvbc" is a guest, then it can be determined that the role corresponding to the target user account is a guest.

[0060] Step 102: After receiving the user's instruction to trigger the target business module, obtain the status information of the target business module and obtain the second set of operation permissions corresponding to the status information.

[0061] In this embodiment of the invention, before obtaining the status information of the target service module, step C1 may be included:

[0062] Step C1: Configure corresponding operation permissions for each state of each business module.

[0063] The status of each business module can include at least one of the following: pending development, in progress, and completed.

[0064] In this embodiment of the invention, the system administrator can pre-configure corresponding operation permissions for each business status of each business module. For example, the status of business module A includes pending development, in progress, and completed. The system administrator can pre-configure "view" and "start" operation permissions for the pending development status of business module A; "view," "add," "edit," and "complete" operation permissions for the in progress status of business module A; and "view" and "delete" operation permissions for the completed status of business module A.

[0065] The permissions are as follows: "View" indicates that the business module can be viewed; "Start" indicates that the business module has not yet been processed; "Add" indicates that the business module can have new business added; "Edit" indicates that the business module can be edited; "Complete" indicates that the business module has not yet been completed; and "Delete" indicates that the business module can be deleted.

[0066] In this embodiment of the invention, the status information of a business module may include at least one of the following: the business start time, the time it was viewed, the time it was edited, the time it was deleted, the time it was added, and the time it was completed. The status of a business module can be determined based on this status information. For example, the status of business module A may include pending development, in progress, and completed. If the status information of business module A only includes the viewing time of January 6, 2022, at 16:30:23, it can be determined that business module A has not been edited, and therefore, the status of business module A can be determined as pending development.

[0067] Step 103: Determine the intersection of the first set of operation permissions and the second set of operation permissions as the user's target operation permissions.

[0068] For example, if the user "Zhang San" is a developer, then the first set of operation permissions can be determined as the set of operation permissions corresponding to the developer {"View", "Add", "Delete"}. If the target business module is the issue feedback module, a processing unit in the APP development field, and the issue feedback module is in a "processing" state, then the second set of operation permissions can be determined as the set of operation permissions corresponding to the "processing" state of the issue feedback module {"View", "Add", "Edit", "Complete"}. Then, the intersection of the first and second set of operation permissions {"View", "Add"} can be determined as the target operation permissions for user "Zhang San".

[0069] In this embodiment of the invention, operation buttons corresponding to the target operation permissions may also be displayed, so that the user can operate the target business module based on the operation buttons.

[0070] For example, if the identified target operations are "View" and "Add", corresponding operation buttons can be displayed for "View" and "Add" respectively. User Zhang San can click the operation button corresponding to "View" to view the issue feedback module, and user Zhang San can also click the operation button corresponding to "Add" to add business content to the issue feedback module.

[0071] The method provided in this invention, upon receiving a user login instruction, determines the user's corresponding role and obtains a first set of operation permissions corresponding to that role. Upon receiving an instruction from the user to trigger a target business module, it obtains the target business module's status information and a second set of operation permissions corresponding to that status information. The intersection of the first and second set of operation permissions is determined as the user's target operation permissions. This allows for the combined determination of the user's target operation permissions for the target business module by combining the user's corresponding role and the target business module's status information. This enables fine-grained control over the operation permissions of different users in different states of the business module, allowing administrators to directly maintain the operation permissions of user roles or the operation permissions of different states of various business modules according to different needs. This overcomes the shortcomings of not being able to finely control user permissions and achieves more granular and refined permission control.

[0072] Furthermore, the method provided in this embodiment of the invention improves the efficiency of permission control by configuring different operation permissions for different roles and then reading the corresponding operation permissions through the user's role, thus enabling different roles to have different operation functions. The business processing unit of this invention configures various states of each business module and their corresponding operation permissions, and also assigns corresponding operation permissions to each role. When a user enters a target business module, the system combines the user's role and the operation permissions corresponding to the current state of the target business module to output the user's final operable target operation permissions. That is, after integrating user role control permissions, the system adds the operation permissions corresponding to various states of business modules, avoiding the need to configure more role permissions and using multi-permission control to achieve fine-grained permission control. Simultaneously, a user can have different operation permissions between different business modules, overcoming the shortcomings of insufficiently fine-grained role control.

[0073] Based on the same inventive concept, and according to the user permission determination method provided in the above embodiments of the present invention, another embodiment of the present invention also provides a user permission determination device, the structural schematic diagram of which is shown below. Figure 2 As shown, it specifically includes:

[0074] The role determination module 201 is used to determine the role corresponding to the user after receiving the user login instruction, and to obtain the first set of operation permissions corresponding to the role.

[0075] The information acquisition module 202 is used to acquire the status information of the target business module and the second set of operation permissions corresponding to the status information after receiving the instruction from the user to trigger the target business module.

[0076] The permission determination module 203 is used to determine the intersection of the first set of operation permissions and the second set of operation permissions as the target operation permissions of the user.

[0077] As can be seen, using the apparatus provided in this embodiment of the invention, after receiving a user login instruction, the user's corresponding role is determined, and a first set of operation permissions corresponding to the role is obtained; after receiving an instruction from the user to trigger a target business module, the status information of the target business module is obtained, and a second set of operation permissions corresponding to the status information is obtained; the intersection of the first set of operation permissions and the second set of operation permissions is determined as the user's target operation permissions. That is, by combining the user's corresponding role and the status information of the target business module, the user's target operation permissions for the target business module can be jointly determined. This allows for fine-grained control of the operation permissions of different users corresponding to business modules in different states. Administrators can directly maintain the operation permissions of user roles or directly maintain the operation permissions of different states of various business modules according to different needs, thus overcoming the shortcomings of not being able to finely control user permissions and achieving more granular and refined permission control.

[0078] Optional, see Figure 3 The device further includes:

[0079] The role permission configuration module 301 is used to configure corresponding operation permissions for each role; it configures corresponding roles for each user's user account based on the attribute information of each user, thus obtaining the correspondence between user accounts and roles.

[0080] Optional, see Figure 3 The device further includes:

[0081] The status permission configuration module 302 is used to configure corresponding operation permissions for each status of each business module. The status of each business module includes at least one of the following: pending development status, in progress status, and completed status.

[0082] Optionally, the user's role can be a visitor, developer, or administrator.

[0083] The role determination module 201 is specifically used to obtain the target user account indicated by the user login instruction; based on the pre-obtained correspondence between user accounts and roles, determine the role corresponding to the target user account as a visitor, developer, or administrator.

[0084] Optional, see Figure 4 The device further includes:

[0085] Display module 401 is used to display the operation buttons corresponding to the target operation permission, so that the user can operate the target business module based on the operation buttons.

[0086] As can be seen, the apparatus provided in this embodiment of the invention can combine the user's corresponding role and the state information of the target business module to jointly determine the user's target operation permissions for the target business module. This allows for fine-grained control over the operation permissions of different users corresponding to business modules in different states. Administrators can directly maintain the operation permissions of user roles or the operation permissions of different states of various business modules according to different needs, thus overcoming the shortcomings of not being able to finely control user permissions and achieving more granular and refined permission control. Furthermore, the method provided in this embodiment of the invention improves permission control efficiency by configuring different operation permissions for different roles and then reading the corresponding operation permissions through the user's role, enabling different roles to have different operation functions. The business processing unit of this invention configures each state of each business module and its corresponding operation permissions, and also assigns corresponding operation permissions to each role. When a user enters the target business module, the final target operation permissions that the user can operate are output by combining the user's role and the operation permissions corresponding to the current state of the target business module. That is, after integrating user role control permissions, the operation permissions corresponding to various states of business modules are added, avoiding the need to configure more role permissions and using multi-permission control to achieve fine-grained permission control. At the same time, a user can have different operating permissions across different business modules, which improves the shortcomings of insufficiently precise role control.

[0087] This invention also provides an electronic device, such as... Figure 5 As shown, it includes a processor 501, a communication interface 502, a memory 503, and a communication bus 504, wherein the processor 501, the communication interface 502, and the memory 503 communicate with each other through the communication bus 504.

[0088] Memory 503 is used to store computer programs;

[0089] The processor 501, when executing a program stored in the memory 503, implements the steps of any of the user permission determination methods described above.

[0090] The communication bus mentioned in the above electronic devices can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0091] The communication interface is used for communication between the aforementioned electronic devices and other devices.

[0092] The memory may include random access memory (RAM) or non-volatile memory (NVM), such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0093] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0094] In another embodiment of the present invention, a computer-readable storage medium is also provided, wherein a computer program is stored therein, and when the computer program is executed by a processor, it implements the steps of any of the above-described user permission determination methods.

[0095] In another embodiment of the present invention, a computer program product containing instructions is also provided, which, when run on a computer, causes the computer to execute any of the user permission determination methods described in the above embodiments.

[0096] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present invention are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk (SSD)).

[0097] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0098] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the embodiments of apparatus, electronic devices, computer-readable storage media, and computer program products are basically similar to the method embodiments, and therefore the descriptions are relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0099] The above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention are included within the scope of protection of the present invention.

Claims

1. A method for determining user permissions, characterized in that, include: Upon receiving a user login instruction, determine the role corresponding to the user and obtain the first set of operation permissions corresponding to the role; Upon receiving the user's instruction to trigger the target business module, the system obtains the status information of the target business module and the second set of operation permissions corresponding to the status information. The status information of the target business module includes at least one of the following: business start time, viewing time, editing time, business deletion time, business addition time, and business completion time. The intersection of the first set of operation permissions and the second set of operation permissions is determined as the user's target operation permissions; Before obtaining the status information of the target service module, the method further includes: Configure corresponding operation permissions for each state of each business module. The state of each business module includes at least one of the following: pending development, in progress, and completed. The second set of operation permissions corresponding to the status information includes: Based on the status information, determine the status of the target business module, find the operation permissions corresponding to the status, and obtain the second set of operation permissions.

2. The method according to claim 1, characterized in that, Before determining the user's role after receiving the user login instruction, the process further includes: Configure corresponding operation permissions for each role; Based on the attribute information of each user, a corresponding role is configured for each user account, thus obtaining the correspondence between user accounts and roles.

3. The method according to claim 2, characterized in that, The user's corresponding role is either a visitor, a developer, or an administrator; The step of determining the role corresponding to the user includes: Obtain the target user account indicated by the user login instruction; Based on the pre-obtained correspondence between user accounts and roles, the role corresponding to the target user account is determined to be a visitor, developer, or administrator.

4. The method according to any one of claims 1-3, characterized in that, The method further includes: Display the operation button corresponding to the target operation permission so that the user can operate the target business module based on the operation button.

5. A user permission determination device, characterized in that, include: The role determination module is used to determine the role corresponding to the user after receiving the user login instruction, and to obtain the first set of operation permissions corresponding to the role. The information acquisition module is used to acquire the status information of the target business module and the second set of operation permissions corresponding to the status information after receiving the instruction from the user to trigger the target business module; the status information of the target business module includes at least one of the following: business start time, viewing time, editing time, business deletion time, business addition time, and business completion time. The permission determination module is used to determine the intersection of the first set of operation permissions and the second set of operation permissions as the user's target operation permissions; The status permission configuration module is used to configure the corresponding operation permissions for each status of each business module. The status of each business module includes at least one of the following: pending development status, in progress status, and completed status. The information acquisition module includes a search submodule, which is used to determine the status of the target business module based on the status information, search for the operation permissions corresponding to the status, and obtain a second set of operation permissions.

6. The apparatus according to claim 5, characterized in that, Also includes: The role permission configuration module is used to configure the corresponding operation permissions for each role; Based on the attribute information of each user, a corresponding role is configured for each user account, thus obtaining the correspondence between user accounts and roles.

7. The apparatus according to claim 6, characterized in that, The user's corresponding role is either a visitor, a developer, or an administrator; The role determination module is specifically used to obtain the target user account indicated by the user login instruction; based on the pre-obtained correspondence between user accounts and roles, determine the role corresponding to the target user account as a visitor, developer, or administrator.

8. The apparatus according to any one of claims 5-7, characterized in that, Also includes: The display module is used to display the operation buttons corresponding to the target operation permissions, so that the user can operate the target business module based on the operation buttons.

9. An electronic device, characterized in that, It includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; Memory, used to store computer programs; A processor, when executing a program stored in memory, implements the steps of the method described in any one of claims 1-4.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the method described in any one of claims 1-4.

Citation Information

Patent Citations

  • Service processing method and system based on user permission, electronic equipment and medium

    CN112182619A