Object access method, device, electronic device, storage medium and program product

Abstract

The present disclosure provides an object access method, including: in response to an event of displaying a document link to a user, determining the attribute information of the user; determining the target permission level for the user requester to access and preview the target object document link according to the attribute information of the requesting user and the permission record information corresponding to the target object document link; the target permission level is one of multiple levels in the permission record information, and the multiple levels include different degrees of access levels to the target object when having access rights; and displaying the preview content corresponding to the document link according to the target permission level. Based on the above object access method, the present disclosure also provides an object access device, an electronic device, a storage medium, and a program product.

Description

Technical Field

[0001] The present disclosure relates to the field of computer vision technology, and in particular to an object access method, device, electronic device, storage medium and program product. Background Art

[0002] Different computer users can transmit information to each other through the network, and can also share file information.

[0003] In an enterprise, internal communication tools can be used to allow multiple users to access internal files. However, internal files are often confidential and should not be opened to all users who can access internal communication tools. Summary of the invention

[0004] In view of this, an embodiment of the present disclosure provides an object access method that can better adapt to changes in routing rules.

[0005] According to some embodiments of the present disclosure, there is provided an object access method, including:

[0006] receiving an object access request sent by a requester;

[0007] In response to an event of displaying a document link to a user, determining attribute information of the user;

[0008] Determine, based on the attribute information of the user and the permission information corresponding to the document link, a target permission level for the user to preview the document link; the target permission level is one of multiple levels in the permission information, and the multiple levels include different degrees of review levels for the target object when the user has the access permission;

[0009] According to the above target permission level, the preview content corresponding to the above document link is displayed.

[0010] The embodiment of the present disclosure also provides an object access device, including:

[0011] An attribute information determination module, configured to determine attribute information of the user in response to an event of displaying a document link to the user;

[0012] a permission level determination module, for determining a target permission level for the user to preview the document link according to the attribute information of the user and the permission information corresponding to the document link; the target permission level is one of a plurality of levels in the permission information, and the plurality of levels include different degrees of review levels for the target object when the user has the access permission;

[0013] The preview content display module is used to display the preview content corresponding to the above document link according to the above target permission level.

[0014] In addition, an embodiment of the present disclosure further provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the method is implemented when the processor executes the program.

[0015] An embodiment of the present disclosure further provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the above method.

[0016] An embodiment of the present disclosure further provides a computer program product, including computer program instructions. When the computer program instructions are executed on a computer, the computer executes the method.

[0017] From the above content, it can be seen that when an event of displaying a document link to a user is detected, the preview content corresponding to the document link can be displayed according to the access permission level corresponding to the user's attribute information, and the user's permission to view the document link can be controlled with a more fine-grained permission level, thereby achieving accurate control of the user's viewing level of the document link. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the present disclosure or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0019] Figure 1 A schematic diagram of an application scenario of the object access method provided by an embodiment of the present disclosure;

[0020] Figure 2 The implementation process of the object access method described above in one embodiment of the present disclosure is shown;

[0021] Figure 3A A schematic diagram showing application scenarios of the object access method described above in other embodiments of the present disclosure is shown;

[0022] Figure 3B A schematic diagram showing application scenarios of the object access method described above in some other embodiments of the present disclosure is shown;

[0023] Figure 4 The implementation process of the object access method described above in another embodiment of the present disclosure is shown;

[0024] Figure 5A schematic diagram showing a permission setting interface of an embodiment of the present disclosure is shown;

[0025] Fig. 6A A schematic diagram of target web page access according to an embodiment of the present disclosure is shown;

[0026] Figure 6B A schematic diagram of triggering an authorization application process of the present disclosure is shown;

[0027] Figure 6C A schematic diagram of accessing an internal document in an external document according to an embodiment of the present disclosure;

[0028] Figure 7 A schematic diagram showing the internal structure of an object access device according to another embodiment of the present disclosure is shown;

[0029] Figure 8 A schematic diagram showing the internal structure of an object access device according to another embodiment of the present disclosure is shown;

[0030] Fig. 9 A schematic diagram showing the internal structure of an object access device according to another embodiment of the present disclosure is shown;

[0031] Fig.10 A more specific schematic diagram of the hardware structure of an electronic device provided by this embodiment is shown. DETAILED DESCRIPTION

[0032] In order to make the objectives, technical solutions and advantages of the present disclosure more clearly understood, the present disclosure is further described in detail below in combination with specific embodiments and with reference to the accompanying drawings.

[0033] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present disclosure should be understood by people with ordinary skills in the field to which the present disclosure belongs. The "first", "second" and similar words used in the embodiments of the present disclosure do not indicate any order, quantity or importance, but are only used to distinguish different components. "Including" or "comprising" and similar words mean that the elements or objects appearing before the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0034] The modifications of "one", "multiple" or "at least one" mentioned in the embodiments of the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that, unless otherwise clearly indicated in the context, they should be understood as "one or more".

[0035] As mentioned above, in general, the information recommended by the information provider to the user is randomly determined, and the recommended content may not be what the user currently wants to see or is interested in, which is likely to lead to recommendation failure.

[0036] To this end, some embodiments of the present disclosure provide a recommendation method. Figure 1 , which is a schematic diagram of an application scenario of the method provided by an embodiment of the present disclosure. The application scenario includes: a terminal device 101 and a server 102 that provides object access services.

[0037] In the embodiment of the present disclosure, the terminal device 101 can run an APP (Application) with functions such as sharing and communication, and the server 102 can provide data storage, instruction response and other operational support for the operation of the APP. The server can also provide basic data for the object access function of the APP. Figure 1 This is just an example of an application scenario. An APP with object access function can enable users to access target objects.

[0038] In the embodiments of the present disclosure, the terminal device 101 includes but is not limited to a desktop computer, a mobile phone, a mobile computer, a tablet computer, a media player, a smart wearable device, a personal digital assistant (PDA) or other electronic devices capable of implementing the above functions. The terminal device 101 can provide data and file support to the user through the data and functions provided by the server 102, so that the user can implement the object access function.

[0039] Based on the above application scenarios and other possible application scenarios, such as Figure 2 As shown, some embodiments of the present disclosure provide an object access method, including:

[0040] Step 201: In response to an event of displaying a document link to a user, determining attribute information of the user;

[0041] Step 202: determining a target permission level for the user requester to access and preview the document link based on the attribute information of the requester user and the permission record information corresponding to the document link; the target permission level is one of multiple levels in the permission information, and the multiple levels include different levels of review of the target object under the condition of having access rights;

[0042] Step 203: Display the preview content corresponding to the document link according to the target permission level.

[0043] In some embodiments of the present disclosure, the event of displaying a document link to a user may be an event of displaying a document link to a user in a chat history interface. For example, in a social chat interface, a user receives a document access link, a document transfer link, etc. sent by a person with whom the user is chatting, thereby presenting the document link information on the chat interface on the user side. A document link may be used to indicate the address where a document is located, or may be used to indicate a document, such as a document link formed by directly transferring a document through a chat tool during a chat.

[0044] In some embodiments of the present disclosure, a document link can be used to access and open files of any format, such as text documents, spreadsheet documents, drawing documents, videos, audios, images, emails, web pages, etc. A document link can also be used to access a carrier that holds a file, such as a folder, a download link, etc.

[0045] In some embodiments of the present disclosure, the user's attribute information may include information used to indicate the user's identity. It may also include information related to the user's access rights, such as document links, display methods, and display time. The user's rights to document links may include operation rights such as viewing, previewing, searching, and forwarding.

[0046] In some embodiments of the present disclosure, the permission information corresponding to the document includes a record of the document link limiting the permissions of the user accessing the document, which is used to distinguish the permissions of different categories and individual visitors.

[0047] In some embodiments of the present disclosure, the permission information corresponding to the document link may also include information found in other uniformly set permission records, and the aforementioned permission records are used to distinguish the viewing, previewing and other permissions of users of different categories and different IDs of the document link.

[0048] In some embodiments of the present disclosure, preview content corresponding to the document link is displayed according to the target permission level, which may include the permission level to determine whether the requesting party can access the document link, and then display content related to the document.

[0049] In some embodiments of the present disclosure, when the above-mentioned user has the permission to access the above-mentioned document link, the above-mentioned permission record is used to determine the specific permission level of the above-mentioned user, that is, the permission information is not only used to record whether the user has the permission to view the corresponding content of the document link, but also to distinguish the user permissions of different contents, so as to make a more fine-grained distinction and management of user permissions, so as to meet the different confidentiality requirements of internal enterprise files, materials and other documents for different viewers.

[0050] Therefore, in one possible implementation, the permission information distinguishes the permissions that different users have to forward the document link, view basic content, view and modify preview content, and view different parts of the document link when they have access rights.

[0051] In some embodiments of the present disclosure, multiple levels include different degrees of operation levels on document links when having access rights. Specifically, the permission information may include multiple different levels, such as the first permission level to the Nth permission level. The content of each permission level is different. Different permission levels can be used to perform different operations on the document (or other files) corresponding to the document link or to view different parts of the document (or other files). For example, in the first permission level to the Nth permission level, the higher the level number, the more permission content. The first permission level only has preview permission, and the preview content displayed to the user is the brief content of the document; the second permission level has the permission to view the non-confidential content of the document based on the first permission level, and the preview content displayed to the user includes the non-confidential content; the third permission level has the permission to view the entire content of the document based on the second permission level, and the preview content displayed to the user includes the document content; the fourth permission level has the editing permission based on the third permission level, and the preview content displayed to the user includes the document content and editing tools, and so on.

[0052] In some embodiments of the present disclosure, when an event of displaying a document link to a user is detected, the preview content corresponding to the document link can be displayed according to the access permission level corresponding to the user's attribute information, and the user's permission to view the document link can be controlled with a more fine-grained permission level, thereby achieving accurate control over the level at which the user can view the document link.

[0053] In one implementation, displaying the preview content corresponding to the document link according to the target permission level includes:

[0054] Determining the validity of the target permission level based on the network address of the requester;

[0055] When the above target permission level is valid, the preview content corresponding to the above document link is displayed according to the above target permission level.

[0056] In this embodiment, the user's network address is used to determine the user's location and whether the Internet access environment is reliable, and may be the user's IP address or the user's base station positioning address.

[0057] In some embodiments of the present disclosure, determining the validity of the target permission level may be determining whether to process an event of displaying a document link to a user according to the target permission level.

[0058] In one embodiment, it is determined whether the user is within the intranet range based on the user's network address. If the user is not within the intranet range, there is a higher risk of content leakage of the document link. It can be determined whether the target permission level is valid according to the settings. If the user's network address presents a higher risk, the target permission level can be invalidated, thereby preventing operations such as viewing and previewing the document link.

[0059] In one implementation, when the target permission level is invalid, the document content corresponding to the document link is refused to be displayed.

[0060] In one possible implementation, determining the validity of the target permission level based on the network address of the user may include: determining the risk level of the user based on the network address of the user, determining the extent of invalidation of the target permission level based on the risk level of the user, and obtaining the remaining valid permission content in the target permission level.

[0061] In some embodiments of the present disclosure, the target permission level includes two permissions, A and B (such as viewing and editing permissions). If the risk level of the requesting party is average, some more important permissions can be invalidated according to the preset target permission level invalidation rules. If A is a more important permission, A permission can be invalidated.

[0062] In this example, based on the user's network address, it is possible to exclude the validity of at least some important permissions when the requesting party is outside the enterprise's intranet and may be at higher risk, thereby further ensuring the confidentiality requirements of the data and content corresponding to the document link.

[0063] In one embodiment, when the target permission level is valid and the document link corresponds to a target folder, displaying the preview content corresponding to the document link according to the target permission level includes:

[0064] In the case where the access permission is the first permission, the document in the target folder corresponding to the document link is hidden and displayed; or,

[0065] In the case where the access permission is the second permission, displaying the document title and the first preview content of the document in the target folder corresponding to the document link; the first preview content is the preset content used to replace the preview content of the document; or,

[0066] When the access permission is the third permission, a second preview content of the document in the target folder is displayed; the second preview content is the preview content of the document.

[0067] In some embodiments of the present disclosure, the first permission may be used to indicate that the user does not have access rights to the document corresponding to the document link, or to indicate that the user does not have access rights to the folder corresponding to the document link. In the hidden display state, the user cannot view the file icon in the target folder, that is, cannot know the existence of the document in the target folder.

[0068] In some embodiments of the present disclosure, the second permission may be used to indicate that the user has only a simple preview permission for the document corresponding to the document link. The first preview content may be a thumbnail icon generated from the thumbnail content of the document.

[0069] In some embodiments of the present disclosure, the third permission may be used to indicate that the user has full reading permission for the document corresponding to the document link, so that the second preview content is preview content generated according to the full reading permission.

[0070] In this embodiment, the target permissions of the document link can be further differentiated and limited, so that the access status of the document link can be finely managed, so that the setting of the target permissions can adapt to the security and confidentiality requirements under different situations.

[0071] In one implementation, when the target permission level is valid and the document link corresponds to the target file, displaying the preview content corresponding to the document link according to the access permission includes:

[0072] If the access right is the second level, a prompt message indicating that the user is not authorized to view the content is displayed; or,

[0073] When the target access permission is the third permission, the content of the target file is displayed.

[0074] In the case where the target access permission is the second permission, the user can perform a simple viewing operation on the document link, and the preview content corresponding to the document link can be displayed. The target permission can be further subdivided into only basic preview permissions to view the content of the target file.

[0075] In some embodiments of the present disclosure, the third permission may be a permission for further viewing and other operations based on the second permission. The third permission may include a permission to read the entire content of the document corresponding to the document link, or the permission may include a permission to read the content of the document corresponding to the document link with lower confidentiality requirements.

[0076] In some embodiments of the present disclosure, for example, the document corresponding to the document link includes parts a, b, c, etc., wherein part a records content with higher confidentiality requirements, and parts b and c record content with lower confidentiality requirements. If the reading right level of the third authority is low, the content of parts b and c can be displayed, and the content of part a can be hidden.

[0077] In a specific example, the display scenario of the document link may include display in the (group chat) chat interface, and the chat participants can share the document link in the chat interface by sending files or links. After the publisher of the document corresponding to the document link publishes the document, he sets the preview, reading and other operation permissions for different users, and the document link can be displayed normally in his own chat interface, and the user is allowed to preview the document link according to his permissions. For users who do not have any permissions, a prompt message that preview is not possible can be displayed in their information display interface, such as Figure 3A As shown. If the publisher of the document publishes the document access path in the chat interface, the requester can first access the target folder of the document through the target file access path. That is, in this scenario, the document link corresponds to the document and the target folder. The user can first access the target folder and then access the document through the target folder. The display status of the target folder corresponds to the user's target permission. If the user does not have the preview permission of the document, the abnormal icon 301 of the target folder can be displayed in the upper folder of the target folder, such as Figure 3B As shown, in the target folder opening interface, the documents in the target folder can be hidden and displayed. If there are multiple documents in the target folder and the user has the permission to preview or read some of them, the icons of the documents to which the user has the permission can be displayed in the target folder.

[0078] In this embodiment, when the target access permission indicates that the requesting party can view or visually access the target file, further permission differentiation can be performed by simply displaying the icon of the target file to allow the requesting party to visually view the existence of the file, and further subdividing the permissions after opening the target file, thereby enabling further refined management of the object's access permissions.

[0079] In one embodiment, Figure 4 As shown, in response to the event of displaying a document link to a user, before determining the attribute information of the user, the following steps are included:

[0080] Step 401: receiving a file search box start instruction;

[0081] Step 402: generating a drop-down menu below the file search box, the drop-down menu including the user's recently browsed documents;

[0082] Step 403: when detecting a hover instruction above the recently browsed document, generating a preview image of the recently browsed document at a set position around the hover instruction.

[0083] In some embodiments of the present disclosure, the file search box start instruction can be generated by the user clicking on the file search box. The above drop-down menu can also be called a search list. When a user without access rights hovers the cursor over the search file list, the thumbnail is replaced with "unable to preview schematic diagram".

[0084] In this embodiment, after generating a file search box drop-down menu, a hover instruction can be generated based on the upward hovering operation of the cursor on the recently browsed document menu, thereby generating a preview image of the document near the hover instruction, allowing the user to preview each document object before sending the object access through operations such as clicking, thereby providing convenience for the user to select documents.

[0085] In one embodiment, when the target permission level is valid and the document link corresponds to a document space including a document collection, displaying the preview content corresponding to the document link according to the access permission includes:

[0086] In the case where the access permission is the second permission, opening the document space according to the object access request; displaying the document directory of the document space;

[0087] In a case where the access permission is the third permission, the document set included in the document space is displayed according to the object access request.

[0088] In some embodiments of the present disclosure, the document space may be a cloud document space, and users may access documents in the cloud document space through document links.

[0089] In some embodiments of the present disclosure, if a user has only simple viewing permission (second permission) for a cloud document space, the user may be allowed to view the document directory of the cloud document space, while denying the user from further viewing or other operations on the documents corresponding to the document directory.

[0090] In general, the security control of cloud documents by various online collaboration products is mainly achieved through reading permissions, which is specifically manifested as follows: when a user has reading permissions for a cloud document, the user can see all the content and attached information of the cloud document, including but not limited to the author, creation time, etc.; when a user does not have reading permissions for a cloud document, the user can only see the title and link of the cloud document at most; the reading permissions defined by the existing cloud document products on the market currently cover a wide range, limiting the possibility for document managers to further subdivide the control. In some embodiments of the present disclosure, different user permission levels are set for visitors to the cloud document space, and the content in the document space is displayed to users according to different user permission levels, thereby realizing the subdivision of user permissions in the cloud document space scenario.

[0091] In one embodiment of the present disclosure, the event of displaying the document link to the user includes: including the document link in the target document accessed by the user;

[0092] The above preview content corresponding to the above document link is displayed according to the above target permission level, including:

[0093] In response to the focus being located at the above-mentioned document link, the preview content corresponding to the above-mentioned document link is displayed according to the above-mentioned target permission level; or in response to the view switching instruction for the above-mentioned document link, the preview content corresponding to the above-mentioned document link is displayed according to the above-mentioned target permission level.

[0094] In this embodiment, when the mouse focus is placed on the document link, the preview content corresponding to the document link can be displayed according to the subdivided permission levels, so that when a preview operation is performed on the document corresponding to the document link by moving the mouse focus, etc., the preview content can be displayed to the user according to the viewable content corresponding to the permission.

[0095] In one embodiment of the present disclosure, the event of displaying the document link to the user includes: including the document link in the target document shared in the conference interface;

[0096] The above preview content corresponding to the above document link is displayed according to the above target permission level, including:

[0097] In response to a triggering operation on the document link, a preview content corresponding to the document link is displayed according to the target permission level.

[0098] In this embodiment, the trigger operation may be a click operation. According to the trigger operation, the target folder or file corresponding to the document link can be displayed, so as to realize the permission subdivision when the user triggers the document link.

[0099] In one embodiment of the present disclosure, the event of displaying the document link to the user includes: receiving a chat message containing the document link in a conversation of an instant messaging client;

[0100] The above preview content corresponding to the above document link is displayed according to the above target permission level, including:

[0101] According to the target permission level of each user in the session, the preview content corresponding to the document link matching the target permission level of the user is displayed to the user.

[0102] In some embodiments of the present disclosure, the target permission level of each user in a session may include the target permission level of each participant in a group chat, conference, etc. In a conference, documents may be shared through a sharing interface, in which case each participating user may view preview content corresponding to their own permission level.

[0103] In some embodiments of the present disclosure, for documents, the scope of reading permission control is very wide, basically controlling all operations that users can perform on documents, including but not limited to: editing, downloading, exporting, and sharing, which is not conducive to enterprise managers to perform more detailed security control.

[0104] Therefore, in the example disclosed herein, a subdivision setting can be performed for any permission of the document corresponding to the document link. Figure 5 As shown, preview permissions can be set separately. Figure 5 The main rule shown in the figure, namely prohibition, indicates that unless otherwise set, previewing of the document is prohibited. You can also set Figure 5 The supplementary rules shown in the figure, that is, setting a supplementary list, in which the requester's user name and / or the requester's IP (Internet Protocol) address and other information can be configured, indicating that the requesters in the supplementary list can preview the document, that is, the users corresponding to the information in the list have preview permissions.

[0105] In some embodiments of the present disclosure, or, under the main rule of object access permission setting, all users can access the document. In the supplementary rule, the enterprise administrator can set a blacklist of users who are prohibited from accessing the company's document content.

[0106] In a specific example, the original "reading" permission point can be split into three permission points: "document visible" (equivalent to the aforementioned second permission or first permission) / "content preview" (equivalent to the aforementioned second permission) / "content viewing" (equivalent to the aforementioned third permission).

[0107] In some embodiments of the present disclosure, the document visibility (Perceive) permission may include whether the title, link, author, and creation time of the document can be seen. The content preview (Preview) permission may include whether the overview related to the document body can be seen, such as a thumbnail or a preview of the text. The content viewing (View) permission may include whether the entire text content of the document and the attached information of the document (comments, likes, etc.) can be seen.

[0108] In some embodiments of the present disclosure, from the user's perspective, the document permission still retains the "reader" role.

[0109] In some embodiments of the present disclosure, when a user is granted the "read" role, he or she will have the three permissions of "content visible" / "content preview" / "content view" at the same time;

[0110] When a user's "Reading" role is revoked, the user will lose the "Content Visibility" / "Content Preview" / "Content View" permissions at the same time;

[0111] The "read" permission (i.e. the new "content viewing" permission) is also subject to fine-grained control by the Admin. If a user's "file preview and viewing" is controlled by the Admin, he or she will not be able to obtain this permission.

[0112] In some embodiments of the present disclosure, when the requester accesses the target object on the external network, some operations on the target object may be disabled, and the functions related to the content of the target object may be hidden, such as document content search, replacement, translation, web page interface viewing comments, web page interface viewing historical comments, current document notification, etc. Operations unrelated to the content may be allowed, such as creating a copy of the target object, adding the target object to a folder, moving, adding shortcuts, favorites, following, printing, widescreen mode, sharing, authorization, deletion, and saving as a template.

[0113] In some embodiments of the present disclosure, when a user is prohibited from accessing a target document, if the user accesses the cloud document list page where the target document is located on the external network, the preview image is displayed as a "diagram of no access"; after the user opens the document details page, the page may display "no access on the external network".

[0114] In some embodiments of the present disclosure, when a user who is prohibited from accessing a target webpage accesses the target webpage, if the user is in an external network and the target webpage is an encyclopedia webpage, the page presentation form (knowledge base) is a normal display of the directory tree, and the page details are not displayed. Fig. 6A shown.

[0115] In some embodiments of the present disclosure, when @ing a user in a document, IP restrictions do not affect the interaction of the "mention" function: when the mentioned user has "reading permission", the name is blue; when the mentioned user does not have "reading permission", the name is gray, triggering the authorization process. Figure 6B shown.

[0116] In some embodiments of the present disclosure, the internal document mentioned is previewed in the external document, and a "no access" diagram or prompt message is displayed, such as Figure 6C shown.

[0117] In an example of the present disclosure, the target object is a target file, and the access scenario can be a file list. The file list can be reached through a folder or path, including: the access path of "Cloud Document Homepage>Quick Access" and "Recent Access" to reach the file list, the access path of "My Space>Owned by Me" to reach the file list, access the file list in the folder (including personal folders and shared folders), the path of "Shared Space>Shared with Me" to reach the file list, the "Favorites" file list, the "Recycle Bin" file list, etc. When the requester accesses the file list where the target file is located, for users who do not have viewing permissions, the file thumbnail in the list view is changed to a general file ICON (icon), and the viewing diagram in the grid view is changed to a "No View" diagram.

[0118] In some embodiments of the present disclosure, when the target object is a template, it can be accessed through the "Templates" list. External network users cannot view the company's templates and personal templates through preview images (general templates can be viewed). The "Preview" button of the template preview image is grayed out, and the user is prompted when the mouse is hovered: "Due to the administrator's security settings, the company document cannot be previewed."

[0119] In some embodiments of the present disclosure, in a sharing scenario, a user without viewing permission cannot view a target file in a target document in a sharing scenario.

[0120] In some embodiments of the present disclosure, in the scenario of sharing a target object through a cloud file link, from the perspective of the sharer: the content cannot be previewed, but authorization operations can still be performed; from the perspective of the sharee: a link preview card is displayed, and a thumbnail of a no-authorization schematic is displayed; hovering the link also displays a controlled schematic.

[0121] In some embodiments of the present disclosure, when rich text information is obtained through openAPI (Application Programming Interface) and the API is accessed through the external network, the text "No access permission" is directly returned to the requesting party without viewing permission. When a requesting party without any permission directly opens a cloud document in a Feed message, the details of the inability to access are displayed. In the team (group chat) shared document scenario, the team document tag can be opened in the team group chat, and the user can be prompted that it cannot be viewed.

[0122] In some embodiments of the present disclosure, after disabling the preview permission, the user cannot see the thumbnail information of the content. At the same time, the present disclosure example splits the existing "read" permission into three sub-permissions: "document visible", "content preview" and "content viewing", to achieve refined management of access rights to the target object (such as a document).

[0123] In this embodiment, the acquisition, storage and use of user-related information comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0124] It should be noted that the method of the embodiment of the present disclosure can be performed by a single device, such as a computer or a server. The method of the present embodiment can also be applied in a distributed scenario and completed by multiple devices cooperating with each other. In the case of such a distributed scenario, one of the multiple devices can only perform one or more steps in the method of the embodiment of the present disclosure, and the multiple devices will interact with each other to complete the above method.

[0125] It should be noted that the above describes some embodiments of the present disclosure. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the above embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0126] Figure 7 The object access device of the embodiment of the present disclosure is shown, comprising:

[0127] The attribute information determination module 701 is used to determine the attribute information of the user in response to the event of displaying the document link to the user;

[0128] The permission level determination module 702 is used to determine the target permission level of the user for previewing the document link according to the attribute information of the user and the permission information corresponding to the document link; the target permission level is one of multiple levels in the permission information, and the multiple levels include different degrees of viewing levels of the target object under the condition of having access rights;

[0129] The preview content display module 703 is used to display the preview content corresponding to the document link according to the target permission level.

[0130] In some embodiments of the present disclosure, Figure 8 As shown, the preview content display module includes:

[0131] A validity unit 801, used to determine the validity of the target permission level according to the network address of the requester;

[0132] The content unit 802 is used to display the preview content corresponding to the document link according to the target permission level when the target permission level is valid.

[0133] In some embodiments of the present disclosure, when the target permission level is valid and the document link corresponds to the target folder, the preview content display module further includes:

[0134] A first display unit is used to hide and display the document in the target folder corresponding to the document link when the access permission is the first permission; and / or,

[0135] A second display unit is used to display the document title and first preview content of the document in the target folder corresponding to the document link when the access permission is the second permission; the first preview content is a preset content used to replace the preview content of the document; and / or,

[0136] The third display unit is used to display the second preview content of the document in the above-mentioned target folder when the above-mentioned access permission is the third permission; the above-mentioned second preview content is the preview content of the above-mentioned document.

[0137] In some embodiments of the present disclosure, when the target permission level is valid and the document link corresponds to the target file, the preview content display module further includes:

[0138] A fourth display module is used to display a prompt message indicating that the user is not authorized to view the content when the access permission is the second permission; and / or,

[0139] The fifth display module is used to display the content of the above-mentioned target file when the above-mentioned target access permission is the third permission.

[0140] In some embodiments of the present disclosure, Fig. 9 As shown, the object access device further includes:

[0141] A start instruction module 901 is used to receive a file search box start instruction;

[0142] A drop-down menu module 902 is used to generate a drop-down menu below the file search box, wherein the drop-down menu includes the user's recently browsed documents;

[0143] The preview image module 903 is used to generate a preview image of the recently browsed document at a set position around the hovering instruction when detecting a hovering instruction above the recently browsed document.

[0144] In some embodiments of the present disclosure, when the target permission level is valid and the document link corresponds to a document space containing a document collection, the preview content display module further includes:

[0145] A sixth display module is used to open the document space according to the object access request when the access permission is the second permission; and display the document directory of the document space;

[0146] The seventh display module is used to display the document set included in the above document space according to the object access request when the above access permission is the third permission.

[0147] In some embodiments of the present disclosure, the event of displaying the document link to the user includes: including the document link in the target document accessed by the user;

[0148] The above preview content display module includes:

[0149] a focus unit, configured to display preview content corresponding to the document link according to the target permission level in response to the focus being located at the document link; and / or,

[0150] The switching unit is used to respond to the view switching instruction of the above document link and display the preview content corresponding to the above document link according to the above target permission level.

[0151] In some embodiments of the present disclosure, the event of displaying the document link to the user includes: including the document link in the target document shared in the conference interface;

[0152] The above preview content display module includes:

[0153] The trigger unit is used to respond to the trigger operation on the above-mentioned document link and display the preview content corresponding to the above-mentioned document link according to the above-mentioned target permission level.

[0154] In some embodiments of the present disclosure, the event of displaying the document link to the user includes: receiving a chat message containing the document link in a conversation of an instant messaging client;

[0155] The above preview content display module includes:

[0156] The session unit is used to display the preview content corresponding to the document link matching the target permission level of each user in the session to the user according to the target permission level of the user.

[0157] In some embodiments of the present disclosure, the event of displaying the document link to the user includes: receiving a notification message containing the document link in the information flow of the instant messaging client, the notification message being triggered based on a preset operation in the document corresponding to the document link;

[0158] The above preview content display module includes:

[0159] The notification message unit is used to display the preview content corresponding to the above document link in the notification message interface corresponding to the above information flow according to the above target permission level.

[0160] The specific implementation of each of the above modules can refer to the above methods and drawings, and will not be repeated here. For the convenience of description, the above device is described by function and is divided into various modules and described separately. Of course, when implementing the present disclosure, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0161] The device of the above embodiment is used to implement the corresponding search method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be described in detail here.

[0162] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, the present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the recommended method of any of the above-mentioned embodiments is implemented.

[0163] Fig.10 A more specific schematic diagram of the hardware structure of an electronic device provided in this embodiment is shown, and the device may include: a processor 2010, a memory 2020, an input / output interface 2030, a communication interface 2040, and a bus 2050. The processor 2010, the memory 2020, the input / output interface 2030, and the communication interface 2040 are connected to each other in communication within the device through the bus 2050.

[0164] The processor 2010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0165] The memory 2020 can be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 2020 can store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 2020 and are called and executed by the processor 2010.

[0166] The input / output interface 2030 is used to connect the input / output module to realize information input and output. The input / output module can be configured as a component in the device (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0167] The communication interface 2040 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through a wired mode (such as USB, network cable, etc.) or a wireless mode (such as mobile network, WIFI, Bluetooth, etc.).

[0168] The bus 2050 includes a path that transmits information between the various components of the device (eg, the processor 2010, the memory 2020, the input / output interface 2030, and the communication interface 2040).

[0169] It should be noted that, although the above device only shows the processor 2010, the memory 2020, the input / output interface 2030, the communication interface 2040 and the bus 2050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0170] The electronic device of the above embodiment is used to implement the corresponding method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be described in detail here.

[0171] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, the present disclosure also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the above-mentioned method as any of the above-mentioned embodiments.

[0172] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0173] The computer instructions stored in the storage medium of the above embodiment are used to enable the above computer to execute the above method of any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0174] Those skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present disclosure (including the claims) is limited to these examples. Based on the concept of the present disclosure, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present disclosure as described above, which are not provided in detail for the sake of simplicity.

[0175] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present disclosure difficult to understand, the known power / ground connections to the integrated circuit (IC) chips and other components may or may not be shown in the provided figures. In addition, the device can be shown in the form of a block diagram to avoid making the embodiments of the present disclosure difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform on which the embodiments of the present disclosure will be implemented (that is, these details should be fully within the scope of understanding of those skilled in the art). Where specific details (e.g., circuits) are set forth to describe exemplary embodiments of the present disclosure, it is apparent to those skilled in the art that the embodiments of the present disclosure can be implemented without these specific details or with changes in these specific details. Therefore, these descriptions should be considered illustrative rather than restrictive.

[0176] Although the present disclosure has been described in conjunction with specific embodiments of the present disclosure, many replacements, modifications and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the embodiments discussed.

[0177] The embodiments of the present disclosure are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present disclosure should be included in the scope of protection of the present disclosure.

Claims

1. An object access method, comprising: In response to an event of displaying a document link to a user on a display interface, determining attribute information of the user; Determining a target permission level for the user to preview the document link according to the attribute information of the user and the permission information corresponding to the document link; the target permission level is one of a plurality of levels in the permission information, the plurality of levels including different degrees of review levels for the target object when the user has the access permission; According to the target permission level, displaying the preview content corresponding to the document link on the display interface; Wherein, the method further comprises: For users who do not have the permission, a prompt message that cannot be previewed is displayed on the display interface; The event of displaying a document link to a user includes: Including the document link in a target document accessed by the user; The displaying of preview content corresponding to the document link according to the target permission level includes: In response to the focus being located at the document link, displaying the preview content corresponding to the document link according to the target permission level; or in response to a view switching instruction for the document link, displaying the preview content corresponding to the document link according to the target permission level; or, Including the document link in the target document shared in the conference interface; The displaying of preview content corresponding to the document link according to the target permission level includes: In response to a triggering operation on the document link, displaying preview content corresponding to the document link according to the target permission level; or, Receiving a chat message containing the document link in a session of an instant messaging client; The displaying of preview content corresponding to the document link according to the target permission level includes: According to the target permission level of each user in the session, preview content corresponding to the document link matching the target permission level of the user is displayed to the user.

2. The method according to claim 1, wherein: The displaying of preview content corresponding to the document link according to the target permission level includes: Determining the validity of the target permission level based on the network address of the requester; When the target permission level is valid, the preview content corresponding to the document link is displayed according to the target permission level.

3. The method according to claim 2, wherein: When the target permission level is valid and the document link corresponds to a target folder, displaying the preview content corresponding to the document link according to the target permission level includes: In the case where the access permission is the first permission, the document in the target folder corresponding to the document link is hidden and displayed; or, In the case where the access permission is the second permission, displaying the document title and first preview content of the document in the target folder corresponding to the document link; the first preview content is a preset content used to replace the preview content of the document; or When the access permission is the third permission, a second preview content of the document in the target folder is displayed; the second preview content is the preview content of the document.

4. The method according to claim 2, wherein: When the target permission level is valid and the document link corresponds to the target file, displaying the preview content corresponding to the document link according to the access permission includes: If the access permission is the second permission, a prompt message of "no access permission" is displayed; or When the access permission is the third permission, the content of the target file is displayed.

5. The method according to claim 4, wherein: In response to the event of displaying the document link to the user, before determining the attribute information of the user, the method includes: Receive the file search box start command; Below the file search box, a drop-down menu is generated, wherein the drop-down menu includes the user's recently browsed documents; When a hover instruction above the recently browsed document is detected, a preview image of the recently browsed document is generated at a set position around the hover instruction.

6. The method according to claim 2, wherein: When the target permission level is valid and the document link corresponds to a document space containing a document collection, displaying the preview content corresponding to the document link according to the access permission includes: In the case where the access permission is the second permission, opening the document space according to the object access request; displaying the document directory of the document space; When the access permission is the third permission, the document set included in the document space is displayed according to the object access request.

7. The method according to claim 1, wherein: The event of displaying the document link to the user includes: receiving a notification message containing the document link in the information flow of the instant messaging client, the notification message being triggered based on a preset operation in the document corresponding to the document link; The displaying of preview content corresponding to the document link according to the target permission level includes: According to the target permission level, the preview content corresponding to the document link is displayed in the notification message interface corresponding to the information flow.

8. An object access device, comprising: An attribute information determination module, configured to determine attribute information of a user in response to an event of displaying a document link to the user on a display interface; a permission level determination module, configured to determine a target permission level for the user to preview the document link according to the attribute information of the user and the permission information corresponding to the document link; the target permission level is one of a plurality of levels in the permission information, the plurality of levels including different degrees of review levels for the target object when the user has access rights; A preview content display module, used to display the preview content corresponding to the document link on the display interface according to the target permission level; The preview content display module is further used to display a prompt message indicating that preview is not possible on the display interface for users who do not have the permission; The event of displaying the document link to the user includes: including the document link in the target document accessed by the user; The preview content display module includes: a focus unit, configured to display preview content corresponding to the document link according to the target permission level in response to the focus being located at the document link; and / or, a switching unit, configured to display preview content corresponding to the document link according to the target permission level in response to a view switching instruction for the document link; The event of displaying the document link to the user includes: including the document link in the target document shared in the conference interface; The preview content display module includes: a triggering unit, configured to display preview content corresponding to the document link according to the target permission level in response to a triggering operation on the document link; The event of displaying the document link to the user includes: receiving a chat message containing the document link in a session of an instant messaging client; The preview content display module includes: The session unit is used to display preview contents corresponding to the document links matching the target permission levels of the users in the session to the users according to the target permission levels of the users.

9. The device according to claim 8, wherein: The preview content display module includes: A validity unit, configured to determine the validity of the target permission level according to the network address of the requesting party; The content unit is used to display the preview content corresponding to the document link according to the target permission level when the target permission level is valid.

10. The device according to claim 9, wherein: When the target permission level is valid and the document link corresponds to the target folder, the preview content display module further includes: A first display unit is used to hide and display the document in the target folder corresponding to the document link when the access permission is the first permission; and / or, A second display unit is used to display the document title and first preview content of the document in the target folder corresponding to the document link when the access permission is the second permission; the first preview content is a preset content used to replace the preview content of the document; and / or, The third display unit is used to display the second preview content of the document in the target folder when the access permission is the third permission; the second preview content is the preview content of the document.

11. The device according to claim 9, wherein: When the target permission level is valid and the document link corresponds to the target file, the preview content display module further includes: A fourth display module is used to display a prompt message indicating that the user is not authorized to view the content when the access permission is the second permission; and / or, The fifth display module is used to display the content of the target file when the access permission is the third permission.

12. The device according to claim 11, wherein The device also includes: A startup instruction module, used to receive a file search box startup instruction; A drop-down menu module, used to generate a drop-down menu below the file search box, wherein the drop-down menu includes the user's recently browsed documents; The preview image module is used to generate a preview image of the recently browsed document at a set position around the hovering instruction when detecting a hovering instruction above the recently browsed document.

13. The device according to claim 9, wherein: In the case where the target permission level is valid and the document link corresponds to a document space containing a document collection, the preview content display module further includes: A sixth display module is used to open the document space according to the object access request when the access permission is the second permission; and display the document directory of the document space; The seventh display module is used to display the document set included in the document space according to the object access request when the access permission is the third permission.

14. The device according to claim 9, wherein: The event of displaying the document link to the user includes: receiving a notification message containing the document link in the information flow of the instant messaging client, the notification message being triggered based on a preset operation in the document corresponding to the document link; The preview content display module includes: A notification message unit is used to display the preview content corresponding to the document link in the notification message interface corresponding to the information flow according to the target permission level.

15. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method according to any one of claims 1 to 7 when executing the program.

16. A non-transitory computer-readable storage medium storing computer instructions for causing a computer to execute the method of any one of claims 1 to 7.

17. A computer program product, comprising computer program instructions, which, when executed on a computer, enable the computer to execute the method according to any one of claims 1 to 7.

Images