Method and device for allocating authority among multiple members

Abstract

The present invention discloses a method and device for assigning permissions among multiple members. The method includes: when an operation for configuring members for a target enterprise is detected to be triggered in a web page, members under the target enterprise are configured based on the operation; if the configuration indicates that permissions are assigned to the first member of the target enterprise, the permissions associated with the first member are called and presented in the web page; when any target permission among the associated permissions is triggered to be selected in the web page, and when any second member in the target enterprise is triggered to be selected in the web page, any target permission is mounted under any second member. Permission allocation is achieved at a fine granularity through one-key handover, without the need to assign permissions at the role level.

Description

Technical Field

[0001] The present invention relates to the technical field of information processing, and in particular to a method and device for allocating permissions among multiple members. Background Art

[0002] It is usually more efficient for enterprise members to handle enterprise business online. In this case, if the enterprise wants to change the permissions between members, the usual method is to change the roles of specific members to achieve the permission change. This method is to achieve permission changes at a coarse-grained level. If you want more fine-grained permission changes, you need to set more roles. However, this method will inevitably cause the enterprise data to become more and more bloated.

[0003] In related technologies, there is no balance between enterprise data expansion and fine-grained permission changes for enterprise members. Summary of the invention

[0004] The main purpose of the present invention is to provide a method and device for allocating permissions among multiple members, so as to overcome the problem in the related art that the expansion of enterprise data and the fine-grained permission changes of enterprise members cannot be balanced.

[0005] In order to achieve the above-mentioned purpose, according to a first aspect of the present invention, a method for allocating permissions among multiple members is provided, comprising: when it is detected in a web page that an operation for configuring members for a target enterprise is triggered, configuring the members under the target enterprise based on the operation; if the configuration indicates that permissions are allocated to a first member of the target enterprise, calling the permissions associated with the first member to be presented in the web page; when any target permission among the associated permissions is triggered to be selected in the web page, and when any second member in the target enterprise is triggered to be selected in the web page, mounting any target permission to any second member.

[0006] Optionally, before mounting any of the target permissions to any of the second members, the method further includes: associating permissions for the target enterprise based on an enterprise configuration operation triggered in a web page, wherein the permissions are obtained based on task abstraction of the target enterprise; mapping different permissions to different configuration files; and after mounting any of the target permissions to any of the second members, associating the configuration file mapped by any of the target permissions to any of the second members.

[0007] Optionally, after mounting any of the target permissions to any of the second members, the method further includes: obtaining the target structured data under any of the target permissions; obtaining the original permissions associated with any of the second members, and determining its associated original structured data based on the original permissions; fusing the target structured data and the original structured data; and associating the fused structured data to any of the second members.

[0008] Optionally, when any second member logs in to a designated web page, content is presented on the designated web page based on an associated configuration file, and different data in the fused structured data are called based on different operations triggered on the designated web page.

[0009] Optionally, the method further includes: based on a member adding operation triggered on a web page, adding a new member to the target enterprise, wherein the new member is associated with the enterprise architecture; based on a configuration operation, associating the new member with permissions of the enterprise.

[0010] Optionally, the method further includes: based on a member removal operation triggered on a web page, deleting the member indicated by the removal operation; and mounting permissions corresponding to the removed member to the default member.

[0011] According to a second aspect of the present invention, there is provided a device for allocating permissions among multiple members, comprising a member configuration unit, for configuring members under the target enterprise based on the operation detected in the web page when the operation for configuring members for the target enterprise is triggered; a permission allocation unit, for calling permissions associated with the first member to be presented in the web page if the configuration indicates that permissions are allocated to the first member of the target enterprise; and for mounting any target permission to any second member when any target permission among the associated permissions is triggered to be selected in the web page and when any second member in the target enterprise is triggered to be selected in the web page.

[0012] According to a third aspect of the present invention, there is provided a computer-readable storage medium storing computer instructions, wherein the computer instructions are used to cause the computer to execute the method described in any one of the implementations of the first aspect.

[0013] According to a fourth aspect of the present invention, there is provided an electronic device comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor executes the method described in any one implementation of the first aspect.

[0014] The method and device for allocating permissions among multiple members of this embodiment include, when an operation for configuring members for a target enterprise is detected to be triggered in a web page, configuring members under the target enterprise based on the operation; if the configuration indicates that permissions are allocated to the first member of the target enterprise, calling the permissions associated with the first member to be presented in the web page; when any target permission among the associated permissions is triggered to be selected in the web page, and when any second member in the target enterprise is triggered to be selected in the web page, mounting any target permission to any second member. Permission allocation is achieved at a fine-grained level through one-click handover, without the need to allocate permissions at the role level. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0016] Figure 1 is a flow chart of a method for allocating permissions among multiple members according to an embodiment of the present invention;

[0017] Figure 2 is a schematic diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0018] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0019] It should be noted that the terms "first", "second", etc. in the specification of the present invention are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described here. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0020] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0021] According to an embodiment of the present invention, a method for allocating permissions among multiple members is provided, such as Figure 1 As shown, it includes the following steps 101 to 103:

[0022] Step 101: When it is detected in the web page that an operation for configuring members for a target enterprise is triggered, members under the target enterprise are configured based on the operation.

[0023] In this step, the enterprise administrator can log in to the target enterprise through an account, and a configuration page related to the target enterprise is presented on the web page. Configuration components are presented on the configuration page, such as organization management, enterprise control, data management, team management, etc. Organization management can include member management, which can configure enterprise members, and role management, which can assign roles to enterprise members. The focus of this embodiment is to provide the concept of member management.

[0024] Step 102: If the configuration indicates that permissions are assigned to a first member of the target enterprise, permissions associated with the first member are called and presented on a web page.

[0025] In this step, the configuration for any member may include a detail viewing operation, through which the personal information of a specific member, the department information, the corresponding authority of a specific member, etc. The configuration may also include an editing operation, by triggering the editing operation, the member's personal information, the department information, etc. may be realized.

[0026] Furthermore, the configuration may also include a permission allocation operation. When the operation is triggered, the permission associated with the member can be called. Specifically, the target permission pre-associated with the member's unique identifier can be called. Furthermore, the target permission can be presented on the web page for subsequent further triggering by the user.

[0027] Multiple different types of permissions can be created for different enterprises. Different permissions can be abstracted and created based on the business of the enterprise, such as file management permissions, approval permissions, etc., and different permissions can be pre-assigned to members. The pre-assignment can be done in a role-binding permissions-based manner in related technologies, which is not limited here.

[0028] Step 103: When any target permission among the associated permissions is triggered to be selected in the web page, and when any second member in the target enterprise is triggered to be selected in the web page, the any target permission is mounted to the any second member.

[0029] In this step, any of the presented target permissions can be triggered to be selected, regardless of the role of the member or the permissions pre-bound to the role, so the permission can be split and redistributed. If any of the presented target permissions is triggered, such as the file management permission is triggered, then other member information of the target enterprise is further presented on the web page for the user to select from other member information. When any other member, that is, any second member, is selected, any selected target permission is mounted under the second member, and then it is considered that the permission handover or permission redistribution between members has been completed.

[0030] As an optional implementation of this embodiment, before mounting any of the target permissions to any of the second members, the method also includes: associating permissions for the target enterprise based on the enterprise configuration operation triggered in the web page, wherein the permissions are obtained based on the task abstraction of the target enterprise; mapping different permissions to different configuration files; and after mounting any of the target permissions to any of the second members, associating the configuration file mapped by any of the target permissions to any of the second members.

[0031] In this optional implementation, after associating permissions for the target enterprise, corresponding permissions can be assigned to members of the target enterprise, so that each member has their own permissions. Different permissions are associated with different configuration files, which indicate the display and interaction rules of the web page after the member logs in to the designated web page of the enterprise. When any target permission is handed over, the permission-associated configuration file is associated with the information of any second member, and the second member finally maps the originally mapped configuration file and the configuration file after the permission is transferred. When the second member logs in to the designated web page of the enterprise, display, interaction, etc. can be achieved based on the rules indicated by the configuration file.

[0032] As an optional implementation of this embodiment, after mounting any target permission to any second member, the method further includes: obtaining target structured data under any target permission; obtaining

[0033] The original authority associated with any second member is determined, and the original structured data associated with it is determined based on the original authority; the target structured data and the original structured data are merged; and the merged structured data is associated with any second member.

[0034] In this optional implementation, members with different permissions will generate different structured data corresponding to the permissions, and the permissions and structured data will be mapped so that members with different permissions will have different structured data, and the different permission data in these structured data are independent of each other.

[0035] If any of the above second members is attached with the target authority, the structured data under the target authority of any of the above first members will be merged with the data of the second member. If the second member originally has the target authority, the structured data under the target authority will be merged. If the second member originally does not have the target authority, the target authority will be associated with the second target member, and the structured data under the target authority will be associated with the second member, that is, the structured data corresponding to the target authority will be merged with the original structured data of the second member.

[0036] As an optional implementation of this embodiment, when any second member logs in to the specified web page, content is presented on the specified web page based on the associated configuration file, and different data in the fused structured data are called based on different operations triggered on the specified web page.

[0037] In this optional implementation, after the second member logs in to the designated web page of the enterprise, corresponding content, such as web page elements, can be displayed on the web page based on the configuration file. The data basis for the second user's interaction on the web page comes from the fused structured data.

[0038] As an optional implementation of this embodiment, the method also includes: based on a member adding operation triggered on a web page, adding a new member to the target enterprise, wherein the new member is associated with the enterprise architecture; based on a configuration operation, associating the permissions of the enterprise to which the new member belongs.

[0039] In this optional implementation, an enterprise architecture, such as the enterprise's departments, may be created for the enterprise through configuration operations, and then members may be created under each department and associated with pre-created enterprise permissions.

[0040] As an optional implementation of this embodiment, the method further includes: based on a member removal operation triggered on a web page, deleting the member indicated by the removal operation; and mounting the permissions corresponding to the removed member to the default member.

[0041] In this optional implementation, any member information can be removed, and when removed, the permissions are mounted to the default member.

[0042] This embodiment implements authority transfer at a fine-grained level, and authority allocation can be achieved without changing the roles of members.

[0043] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0044] According to an embodiment of the present invention, a device for allocating permissions among multiple members is also provided, including a member configuration unit, which is used to configure the members under the target enterprise based on the operation detected in the web page when the operation of configuring members for the target enterprise is triggered; a permission allocation unit, which is used to call the permissions associated with the first member to be presented in the web page if the configuration indicates that permissions are allocated to the first member of the target enterprise; when any target permission among the associated permissions is triggered and the selection operation is triggered in the web page, and when any second member in the target enterprise is triggered and the selection operation is triggered in the web page, the any target permission is mounted under the any second member.

[0045] As an optional implementation method of this embodiment, before mounting any of the target permissions to any of the second members, the method also includes: associating permissions for the target enterprise based on the enterprise configuration operation triggered in the web page, wherein the permissions are obtained based on the task abstraction of the target enterprise; mapping different permissions to different configuration files; and after mounting any of the target permissions to any of the second members, associating the configuration file mapped by any of the target permissions to any of the second members.

[0046] As an optional implementation method of this embodiment, after mounting any of the target permissions to any of the second members, the method also includes: obtaining the target structured data under any of the target permissions; obtaining the original permissions associated with any of the second members, and determining its associated original structured data based on the original permissions; fusing the target structured data and the original structured data; and associating the fused structured data to any of the second members.

[0047] As an optional implementation of this embodiment, when any second member logs in to the specified web page, content is presented on the specified web page based on the associated configuration file, and different data in the fused structured data are called based on different operations triggered on the specified web page.

[0048] As an optional implementation of this embodiment, the method also includes: based on a member adding operation triggered on a web page, adding a new member to the target enterprise, wherein the new member is associated with the enterprise architecture; based on a configuration operation, associating the permissions of the enterprise to which the new member belongs.

[0049] As an optional implementation of this embodiment, the method further includes: based on a member removal operation triggered on a web page, deleting the member indicated by the removal operation; and mounting the permissions corresponding to the removed member to the default member.

[0050] According to an embodiment of the present invention, the present invention also provides an electronic device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can implement the method described in any of the above embodiments when executing.

[0051] According to an embodiment of the present invention, the present invention further provides a readable storage medium, which stores computer instructions, and the computer instructions are used to enable a computer to implement the method described in any of the above embodiments when executed.

[0052] According to an embodiment of the present invention, the present invention further provides a computer program product, which can implement the method described in any of the above embodiments when executed by a processor.

[0053] Figure 2 A schematic block diagram of an example electronic device 300 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices.

[0054] like Figure 2 As shown, the electronic device 300 includes a computing unit 301, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 302 or a computer program loaded from a storage unit 308 into a random access memory (RAM) 303. In the RAM 303, various programs and data required for the operation of the electronic device 300 can also be stored. The computing unit 301, the ROM 302, and the RAM 303 are connected to each other via a bus 304. An input / output (I / O) interface 305 is also connected to the bus 304.

[0055] A number of components in the electronic device 300 are connected to the I / O interface 305, including: an input unit 306, such as a keyboard, a mouse, etc.; an output unit 307, such as various types of displays, speakers, etc.; a storage unit 308, such as a disk, an optical disk, etc.; and a communication unit 309, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 309 allows the electronic device 300 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0056] The computing unit 301 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 301 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The computing unit 301 performs the various methods and processes described above, such as the object matching method. For example, in some embodiments, the object matching method may be implemented as a computer software program, which is tangibly included in a machine-readable medium, such as a storage unit 308. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 300 via the ROM 302 and / or the communication unit 309. When the computer program is loaded into the RAM 303 and executed by the computing unit 301, one or more steps of the method described above may be performed.

[0057] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0058] The program code for implementing the method of the present invention can be written in any combination of one or more programming languages. These program codes can be provided to a processor or controller of a general-purpose computer, a special-purpose computer or other programmable data processing device, so that the program code, when executed by the processor or controller, enables the functions / operations specified in the flow chart and / or block diagram to be implemented. The program code can be executed entirely on the machine, partially on the machine, partially on the machine as a stand-alone software package and partially on a remote machine, or entirely on a remote machine or server.

[0059] In the context of the present invention, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

Claims

1. A method for allocating permissions among multiple members, characterized in that: include When an operation of configuring members for a target enterprise is detected to be triggered in the web page, members under the target enterprise are configured based on the operation; If the configuration indicates that permissions are assigned to a first member of the target enterprise, calling the permissions associated with the first member to be presented in the web page; When any target permission in the associated permissions is triggered to be selected in the web page, and when any second member in the target enterprise is triggered to be selected in the web page, any target permission is mounted to any second member; Before mounting any target permission to any second member, the method further includes: associating permissions for the target enterprise based on the enterprise configuration operation triggered in the web page, wherein the permissions are obtained based on the task abstraction of the target enterprise; mapping different permissions to different configuration files; after mounting any target permission to any second member, associating the configuration file mapped by any target permission to any second member; After mounting any of the target permissions to any of the second members, the method further includes: obtaining the target structured data under any of the target permissions; obtaining the original permissions associated with any of the second members, and determining the associated original structured data based on the original permissions; fusing the target structured data and the original structured data; and associating the fused structured data to any of the second members.

2. The method for allocating permissions among multiple members according to claim 1, characterized in that: When any second member logs in to the designated web page, content is presented on the designated web page based on the associated configuration file, and different data in the fused structured data are called based on different operations triggered on the designated web page.

3. The method for allocating permissions among multiple members according to claim 1, characterized in that: The method further comprises: Based on the member adding operation triggered on the web page, adding a member to the target enterprise, wherein the newly added member is associated with the enterprise architecture; Based on the configuration operation, the permissions of the enterprise to which the newly added member belongs are associated.

4. The method for allocating permissions among multiple members according to claim 1, characterized in that: The method further comprises: Based on a member removal operation triggered on the web page, deleting the member indicated by the removal operation; Mount the permissions corresponding to the removed member to the default member.

5. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the method according to any one of claims 1 to 4.

6. An electronic device, characterized in that: include: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor executes the method described in any one of claims 1 to 4.

7. A computer program product, comprising a computer program, which, when executed by a processor, implements the method according to any one of claims 1 to 4.

Images