Workflow configuration method, device and system based on role authority, and business process processing method, device and system based on role authority

Abstract

The invention relates to a workflow configuration method and device based on role permission, a business process processing method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: in response to a business process node creation operation in an asset management system, determining a business process node created in the asset management system; determining an execution sequence of the business process nodes in response to an execution sequence configuration operation on the business process nodes; in response to an execution logic configuration operation on the business process node, determining an execution logic of the business process node; in response to role permission configuration operation on the business process node, determining a mapping relationship between each piece of to-be-displayed data in the business process node and a user role; and configuring the business workflow process of the asset management system according to the execution sequence, the execution logic and the mapping relation of the business process nodes. By adopting the method, the security of the business process can be improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a workflow configuration method based on role authority, a business process processing method, an apparatus, a computer device, a computer-readable storage medium, and a computer program product. Background Art

[0002] As enterprise informatization continues to deepen, higher requirements are placed on process management and process automation. In order to cope with the ever-changing internal and external environment and process requirements of the enterprise, various process engines for process management continue to emerge.

[0003] In related technologies, the business process engine is fixed. Developers generate functional modules of the business process engine according to requirements and encapsulate the functional modules to form the business process engine. For users, the business process engine is closed. In order to prevent certain important data from being maliciously modified, different permissions are usually set for different data through the background. Users can only use the set functions to operate when using it.

[0004] However, the permission setting method in the related art still has the problem of low security of business processes. Summary of the invention

[0005] Based on this, it is necessary to provide a workflow configuration method, business process processing method, device, computer equipment, computer-readable storage medium and computer program product based on role permissions that can improve the security of business processes in response to the above technical problems.

[0006] In a first aspect, the present application provides a workflow configuration method based on role permissions, comprising:

[0007] In response to a business process node creation operation in the asset management system, determining a business process node created in the asset management system;

[0008] In response to an execution order configuration operation on the business process nodes, determining an execution order of the business process nodes;

[0009] In response to an execution logic configuration operation on the business process node, determining the execution logic of the business process node;

[0010] In response to a role authority configuration operation on the business process node, determining a mapping relationship between each to-be-displayed data and a user role in the business process node; the role authority configuration operation is used to configure a user role that can operate the to-be-displayed data;

[0011] The business workflow process of the asset management system is configured according to the execution order, the execution logic and the mapping relationship of the business process nodes.

[0012] In one embodiment, in response to the role permission configuration operation on the business process node, determining the mapping relationship between each to-be-displayed data in the business process node and the user role includes:

[0013] For any data to be displayed, in response to a role permission configuration operation on each permission item of the data to be displayed, determining a mapping relationship between each permission item of the data to be displayed and each user role;

[0014] According to the mapping relationship between each permission item of each data to be displayed and each user role, the mapping relationship between each data to be displayed and the user role in the business process node is obtained.

[0015] In one embodiment, the execution logic configuration operation includes a logic condition configuration operation and a flow path configuration operation, and the determining the execution logic of the business process node in response to the execution logic configuration operation on the business process node includes:

[0016] In response to the logic condition configuration operation on the business process node, determining the logic condition of the business process node;

[0017] In response to the flow path configuration operation of the logical condition, determining the flow path of the business process node when the corresponding logical condition is met;

[0018] The execution logic of the business process node is determined according to the logical condition of the business process node and the flow path of the business process node.

[0019] In a second aspect, the present application provides a business process processing method, including:

[0020] In response to an access request from a current user account logging into the asset management system to a current business process node in a business workflow process, determining at least one to-be-displayed data corresponding to the current business process node and a target user role corresponding to the current user account; the business workflow process is configured according to the workflow configuration method based on role permissions as described above;

[0021] According to the mapping relationship between each of the to-be-displayed data and the user role, determining the target data matching the target user role in the at least one to-be-displayed data;

[0022] The target data is displayed in the current business process node, and a business operation of the current user account on the target data is received.

[0023] In a third aspect, the present application also provides a workflow configuration device based on role permissions, including:

[0024] A node creation module, for determining a business process node created in the asset management system in response to a business process node creation operation in the asset management system;

[0025] An order determination module, configured to determine the execution order of the business process nodes in response to an execution order configuration operation on the business process nodes;

[0026] A logic determination module, configured to determine the execution logic of the business process node in response to an execution logic configuration operation on the business process node;

[0027] A permission configuration module, for determining a mapping relationship between each to-be-displayed data and a user role in the business process node in response to a role permission configuration operation on the business process node; the role permission configuration operation is used to configure a user role that can operate the to-be-displayed data;

[0028] A process configuration module is used to configure the business workflow process of the asset management system according to the execution order, the execution logic and the mapping relationship of the business process nodes.

[0029] In a fourth aspect, the present application also provides a business process processing device, including:

[0030] A first determination module is used to determine, in response to an access request from a current user account logging into the asset management system to a current business process node in a business workflow process, at least one to-be-displayed data corresponding to the current business process node and a target user role corresponding to the current user account; the business workflow process is configured according to the workflow configuration method based on role permissions as described above;

[0031] A second determination module, configured to determine target data matching the target user role in the at least one data to be displayed according to a mapping relationship between each of the data to be displayed and the user role;

[0032] The display module is used to display the target data in the current business process node and receive the business operation of the current user account for the target data.

[0033] In a fifth aspect, the present application further provides an electronic device, wherein the electronic device comprises a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the steps of the above method are implemented.

[0034] In a sixth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of the above method when executed by a processor.

[0035] In a seventh aspect, the present application further provides a computer program product, wherein the computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0036] The above-mentioned workflow configuration method, apparatus, computer equipment, computer-readable storage medium and computer program product based on role authority determine the business process nodes created in the asset management system by responding to the business process node creation operation in the asset management system; determine the execution order of the business process nodes in response to the execution order configuration operation of the business process nodes; determine the execution logic of the business process nodes in response to the execution logic configuration operation of the business process nodes; determine the mapping relationship between each data to be displayed and the user role in the business process node in response to the role authority configuration operation of the business process node; the role authority configuration operation is used to configure the user role that can operate the data to be displayed; configure the business workflow process of the asset management system according to the execution order, execution logic and mapping relationship of the business process nodes.

[0037] In this way, users are allowed to freely define process nodes, the execution order of process nodes, and the execution logic of process nodes in the asset management system according to actual needs, realizing the personalized configuration capability of workflow processes and improving the adaptability and flexibility of business processes. At the same time, the system has a built-in sophisticated role permission management mechanism that can accurately control the operation permissions of different user roles at each node of the process to ensure the compliance and security of business processes. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0039] Figure 1 A flowchart of a workflow configuration method based on role permissions in one embodiment;

[0040] Figure 2 A flowchart of a business process processing method in an embodiment;

[0041] Figure 3 A flowchart of a business process processing method in another embodiment;

[0042] Figure 4 A schematic diagram of a business process page in an embodiment;

[0043] Figure 5 A structural block diagram of a workflow configuration device based on role authority in one embodiment;

[0044] Figure 6 is a structural block diagram of a business process processing device in one embodiment;

[0045] FIG. 7 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0046] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0047] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0048] In one embodiment, Figure 1 As shown, a workflow configuration method based on role permissions is provided. This embodiment uses the method applied to a computer device as an example. It can be understood that the computer device can be a terminal. The terminal can be, but is not limited to, various personal computers, laptops, tablet computers, etc. In this embodiment, the method includes the following steps:

[0049] Step S110, in response to the business process node creation operation in the asset management system, determining the business process node created in the asset management system.

[0050] The asset management system may be a management system for the user's assets. For example, the asset management system is an IT asset management system.

[0051] The business process node creation operation is an operation for customizing the creation of a business process node.

[0052] The business process node may be a process node created for a certain business workflow process.

[0053] The business workflow process may be a workflow process related to business needs that can be executed in the asset management system.

[0054] For example, the asset management system may be an IT asset management system, the business workflow process may be an IT asset lifecycle management process, and the business process nodes may include but are not limited to at least one of the following nodes: asset application node, asset review node, acquisition and approval node, asset procurement node, asset receipt node, asset allocation node, asset use node, asset maintenance node, and asset scrapping node. Specifically:

[0055] 1. Asset application node: Users submit applications for IT assets (such as computers, software licenses, etc.).

[0056] For example: An employee needs to apply for a new computer, fill out the application form and submit it.

[0057] 2. Asset review node: The superior or IT management department reviews the asset application submitted by the user.

[0058] For example: An IT manager reviews an application to confirm whether it complies with company policy and budget.

[0059] 3. Obtain procurement approval node: If the application is approved, the procurement approval process needs to be carried out to obtain the required assets from the supplier.

[0060] For example: After the application is approved, the finance department reviews the purchase budget and approves the purchase.

[0061] 4. Asset procurement node: Execute actual asset procurement operations based on the approval results.

[0062] For example: Buyers contact suppliers and process orders to purchase new hardware or software.

[0063] 5. Asset receiving node: After receiving the purchased assets, the warehousing and registration process is carried out.

[0064] For example: The IT department receives a new server, performs an equipment inspection, records the asset information, and stores it in the database.

[0065] 6. Asset allocation node: allocate new assets to the applying user or department.

[0066] For example: An IT administrator assigns a new computer to the employee who submitted the request and updates the asset status to "Assigned".

[0067] 7. Asset Usage Node: Users begin to use the assets allocated to them.

[0068] For example: When an employee starts using a newly assigned computer, the system records its usage status.

[0069] 8. Asset maintenance node: Perform asset maintenance and maintenance regularly to ensure the normal operation of equipment.

[0070] For example: IT support teams perform regular checks and necessary hardware maintenance for computers.

[0071] 9. Asset scrapping node: When an asset reaches the end of its service life or is no longer needed, it will be scrapped.

[0072] Example: An old computer is scrapped because it no longer meets performance requirements, and the IT department handles equipment recycling.

[0073] In a specific implementation, a system administrator can use a corresponding management user account to configure a workflow in the asset management system. The management user account can perform a business process node creation operation in the asset management system according to actual business needs, and a computer device deployed with the asset management system responds to the business process node creation operation and determines the business process node created in the asset management system.

[0074] Furthermore, the asset management system includes a workflow configuration page, and the management user account can input a business process node creation operation in the workflow configuration page. The computer device responds to the business process node creation operation, determines the business process node created in the asset management system, and displays the business process node created by the management user account in the workflow configuration page.

[0075] Step S120 , in response to the execution order configuration operation on the business process nodes, determining the execution order of the business process nodes.

[0076] The execution order configuration operation is an operation for configuring the execution order of business process nodes in the business workflow process.

[0077] In a specific implementation, the management user account can configure the execution order of the business process nodes according to actual business needs, and can input the execution order configuration operation of the business process nodes in the asset management system. The computer device responds to the execution order configuration operation of the business process nodes to determine the execution order of the business process nodes.

[0078] Furthermore, the management user account may input an execution order configuration operation for the business process nodes in the workflow configuration page, and the computer device determines the execution order of the business process nodes in response to the execution order configuration operation.

[0079] For example, Node A: Purchase Requisition, Node B: Preliminary Review, and Node C: Advanced Approval, the execution order is Node A-Node B-Node C.

[0080] Step S130 , in response to the execution logic configuration operation on the business process node, determining the execution logic of the business process node.

[0081] The execution logic configuration operation is an operation of configuring the execution logic of the business process node.

[0082] The execution logic is used to determine the rules and procedures for executing specific operations at the business process nodes. For example, the review node may involve checking the compliance of the application, budget constraints, and applicant qualifications.

[0083] In a specific implementation, the management user account can configure the execution logic of the business process node according to actual business needs, and can input the execution logic configuration operation of the business process node in the asset management system. The computer device responds to the execution logic configuration operation of the business process node to determine the execution logic of the business process node, thereby determining the direction of the business workflow process.

[0084] Furthermore, the management user account may input an execution logic configuration operation for the business process node in the workflow configuration page, and the computer device determines the execution logic of the business process node in response to the execution logic configuration operation.

[0085] In actual applications, in the process of determining the execution logic of the business process node according to the execution logic configuration operation, the computer device can set or adjust the behavior or processing logic of the business process node according to the input of the management user account, the system status or other conditions (such as business needs, etc.). This can include: defining what information is required to complete the operation of the business process node; determining which user roles can perform the operation; setting up automated processes, such as automatically transferring to the next business process node after the business process node is reviewed and approved.

[0086] For example, suppose in an IT asset management system, for the "asset review node", the management user account can set the execution logic of the node, such as: what specific information the reviewer needs to view (such as the applicant's department, budget situation); the review roles involved (such as direct superiors, financial department); if the review is passed, it will automatically flow to the "asset procurement" node; if rejected, the applicant will be notified and the reason will be recorded.

[0087] Step S140 , in response to the role authority configuration operation on the business process node, determining the mapping relationship between each to-be-displayed data in the business process node and the user role.

[0088] The role permission configuration operation can define the permissions that each user role has in a business process node.

[0089] The role permission configuration operation is specifically used to configure the user roles that can operate the data to be displayed.

[0090] The data to be displayed is data that can be displayed in the process operation page corresponding to the business process node. For example, the data to be displayed can be data in table A, data in table B, or page controls, such as general controls and controls related to specific businesses. General controls can be back, forward, previous page, next page, etc., and controls related to businesses can be added, deleted, modified, edited, downloaded, uploaded, etc. as described above.

[0091] In a specific implementation, the management user account can configure the role permissions of the business process nodes according to actual business needs, and can input the role permission configuration operations for the business process nodes in the asset management system. The computer device responds to the role permission configuration operations for the business process nodes and determines the mapping relationship between each data to be displayed in the business process node and the user role.

[0092] Furthermore, the management user account can input the role permission configuration operation for the business process node in the workflow configuration page, and the computer device determines the mapping relationship between each to-be-displayed data in the business process node and the user role in response to the role permission configuration operation.

[0093] In actual applications, for multiple user roles in the asset management system, the management user account can configure the permissions that each user role has for each data to be displayed in the business process node, so that the computer device can obtain the mapping relationship between each data to be displayed in the business process node and the user role.

[0094] Step S150, configuring the business workflow process of the asset management system according to the execution order, execution logic and mapping relationship of the business process nodes.

[0095] In a specific implementation, the computer device can configure the business workflow process of the asset management system according to the execution order, execution logic and mapping relationship of the business process nodes.

[0096] Specifically, the management user account can create multiple business process nodes. The computer equipment associates each business process node according to the execution order and execution logic of each business process node, and forms a business workflow process that can be executed in the asset management system based on the mapping relationship between the data to be displayed and the user role in each associated business process node.

[0097] In the above-mentioned workflow configuration method based on role authority, the business process nodes created in the asset management system are determined by responding to the business process node creation operation in the asset management system; the execution order of the business process nodes is determined in response to the execution order configuration operation of the business process nodes; the execution logic of the business process nodes is determined in response to the execution logic configuration operation of the business process nodes; the mapping relationship between each data to be displayed and the user role in the business process node is determined in response to the role authority configuration operation of the business process node; the role authority configuration operation is used to configure the user role that can operate the data to be displayed; according to the execution order, execution logic and mapping relationship of the business process nodes, the business workflow process of the asset management system is configured.

[0098] In this way, users are allowed to freely define process nodes, the execution order of process nodes, and the execution logic of process nodes in the asset management system according to actual needs, realizing the personalized configuration capability of workflow processes and improving the adaptability and flexibility of business processes. At the same time, the system has a built-in sophisticated role permission management mechanism that can accurately control the operation permissions of different user roles at each node of the process to ensure the compliance and security of business processes.

[0099] In one embodiment, in response to a role permission configuration operation on a business process node, a mapping relationship between each data to be displayed and a user role in the business process node is determined, including: for any data to be displayed, in response to a role permission configuration operation on each permission item of any data to be displayed, a mapping relationship between each permission item of any data to be displayed and each user role is determined; based on the mapping relationship between each permission item of each data to be displayed and each user role, a mapping relationship between each data to be displayed and a user role in the business process node is obtained.

[0100] The permission items may be items of configurable permissions for the data to be displayed, for example, may include but are not limited to items such as data hiding, data manipulability (editable, such as modification, deletion, addition, etc.) or data read-only.

[0101] In a specific implementation, when a computer device determines the mapping relationship between each data to be displayed and the user role in a business process node in response to a role permission configuration operation on a business process node, the computer device can, for any data to be displayed, determine the mapping relationship between each permission item of any data to be displayed and each user role in response to a role permission configuration operation on each permission item of any data to be displayed.

[0102] For example, for user role 1, the permissions for display data 1, data 2 to be displayed, and data 3 to be displayed are all data controllable; for user role 2, the permissions for display data 1 are data controllable, the permissions for display data 2 are data read-only, and the permissions for display data 3 are data hiding; for user role 3, the permissions for display data 1 are data read-only, the permissions for display data 2 are data hiding, and the permissions for display data 3 are data hiding. It can be understood by those skilled in the art that this is only an example, and in actual applications, there are far more than 3 data to be displayed in the business process node, and the mapping relationship between each permission item of the data to be displayed and each user role is not all as described above, and this application does not limit this.

[0103] In this way, the computer device can obtain the mapping relationship between each data to be displayed in the business process node and the user role according to the mapping relationship between each permission item of each data to be displayed in the business process node and each user role.

[0104] The technical solution of this embodiment determines the mapping relationship between each permission item of any data to be displayed and each user role in response to the role permission configuration operation on each permission item of any data to be displayed; and obtains the mapping relationship between each data to be displayed and the user role in the business process node according to the mapping relationship between each permission item of each data to be displayed and each user role. In this way, role permission control is implemented for each permission item of the data to be displayed, reducing the granularity of permission control.

[0105] In one embodiment, the execution logic configuration operation includes a logic condition configuration operation and a flow path configuration operation. In response to the execution logic configuration operation on the business process node, the execution logic of the business process node is determined, including: in response to the logic condition configuration operation on the business process node, the logic condition of the business process node is determined; in response to the flow path configuration operation on the logical condition, the flow path of the business process node is determined when the corresponding logic condition is met; according to the logic condition of the business process node and the flow path of the business process node, the execution logic of the business process node is determined.

[0106] The logic condition configuration operation is an operation for configuring the logic conditions of the business process node.

[0107] Among them, logical conditions can refer to the rules that determine how a business process node is executed, when to transfer to the next business process node, and how each business process node processes input data. These conditions help the system automatically control the flow of business workflow processes to ensure the smooth progress of business.

[0108] In actual applications, the logical conditions may include at least one condition such as conditional branching, data verification conditions, state conditions, time conditions, complex business logic conditions, dynamic conditions, and link conditions.

[0109] Among them, conditional branches allow the direction of the process to be determined according to specific conditions. For example: Approval result: If the application is approved, go to the "Asset Purchase" node. If the application is not approved, go to the "Notify Applicant" node.

[0110] Among them, data verification conditions refer to the verification of data before the data flows to the next node to ensure the integrity and validity of the information. For example: Required field check: If some required fields (such as applicant name, asset type) are not filled in, it will return and require the user to fill in again.

[0111] Among them, the status condition can determine the next action based on the current data status. For example: asset status check: If the asset status is "waiting for receipt", it is only allowed to be transferred to the "asset receipt" node. If the asset status is "scrapped", no purchase or use operations can be performed.

[0112] Among them, time conditions refer to the time limit that can be set to ensure that certain operations are completed within a specific time. For example: Approval timeout: If the application is not reviewed within the specified time, it will automatically go to the "Timeout Processing" node.

[0113] Among them, complex business logic conditions refer to the situation in which in some business scenarios, it may be necessary to combine multiple conditions for complex judgment. For example: Multiple conditions combined judgment: If "budget approval" is true AND "applicant department" is finance, and "application content complies with company policy", then the process is allowed to transfer to the "asset procurement" node.

[0114] Dynamic conditions refer to conditions that are dynamically adjusted based on real-time data or external inputs, which may change during the execution of the workflow. For example, market demand changes: If the market demand for a certain type of asset increases, a corresponding procurement decision is made in the "Asset Procurement" node.

[0115] Among them, link conditions refer to establishing conditional connections between multiple nodes so that the results of a certain node affect other nodes. For example, upstream results affect downstream: if the "asset maintenance" node is passed, it is allowed to enter the "asset use" node.

[0116] Assume that in an IT asset management system, the business process node "application review" can set the following logical conditions:

[0117] Status conditions:

[0118] Current Status = "Awaiting Review";

[0119] Time conditions:

[0120] If the review time is >= 3 days, a reminder will be sent;

[0121] Data Validation:

[0122] Asset Type and Budget Amount are required.

[0123] The flow path refers to the route or order in which tasks or information flow from one node to another in the workflow. Each node represents a specific step, and the flow path determines the execution order and direction of the workflow when specific conditions are met.

[0124] For example: If the application is approved, the flow path may be from the "Application Review" node to the "Asset Procurement" node; if the review is not passed, the flow path may be from the "Application Review" node directly to the "Notify Applicant" node.

[0125] In a specific implementation, when a computer device determines the execution logic of a business process node in response to an execution logic configuration operation on the business process node, it may determine the logical condition of the business process node in response to the logical condition configuration operation on the business process node; determine the flow path of the business process node when the corresponding logical condition is met in response to the flow path configuration operation on the logical condition; and determine the execution logic of the business process node based on the logical condition of the business process node and the flow path of the business process node.

[0126] The technical solution of this embodiment determines the logical conditions of the business process nodes in response to the logical condition configuration operation of the business process nodes; determines the flow path of the business process nodes when the corresponding logical conditions are met in response to the flow path configuration operation of the logical conditions; and determines the execution logic of the business process nodes according to the logical conditions of the business process nodes and the flow path of the business process nodes. In this way, by setting clear logical conditions, the automation of the process can be achieved and manual intervention can be reduced. The system can automatically determine the flow path according to the conditions, thereby speeding up the overall process processing speed. By optimizing the logical conditions and flow paths, unnecessary audits or repeated steps are reduced to ensure a smooth process. In addition, clear logical conditions can limit user input and operations to reduce the possibility of human errors. By setting a consistent execution logic, business operations are standardized to ensure compliance in all links.

[0127] In one embodiment, Figure 2 As shown, a business process processing method is provided. This embodiment takes the method applied to a computer device as an example for explanation. In this embodiment, the method includes the following steps:

[0128] Step S210, in response to an access request from the current user account logging into the asset management system to the current business process node in the business workflow process, determining at least one data to be displayed corresponding to the current business process node and a target user role corresponding to the current user account.

[0129] The business workflow process is configured according to the workflow configuration method based on role permissions as described above.

[0130] The current user account may refer to the user account that is currently logged into the asset management system and needs to perform business process processing.

[0131] The current business process node may refer to the business process node that the current user account is currently accessing.

[0132] Among them, the target user role refers to the user role corresponding to the current user account that currently logs into the asset management system to trigger the access request. Different user accounts can correspond to different user roles, or they may correspond to the same user role. For example, user account A can correspond to user role A, user account B corresponds to user role B, user account C corresponds to user role B, and so on.

[0133] In actual applications, the first corresponding relationship may be used to represent the corresponding relationship between account information corresponding to different user accounts and user roles.

[0134] Among them, the computer device can obtain account information corresponding to the current user account as target account information in response to the access request, and determine the user role corresponding to the current user account as the target user role according to the first corresponding relationship.

[0135] In a specific implementation, the computer device can respond to an access request from the current user account that logs into the asset management system to the current business process node in the business workflow process, determine at least one data to be displayed corresponding to the current business process node, and the target user role corresponding to the current user account.

[0136] Step S220 : determining target data matching the target user role in at least one piece of data to be displayed according to the mapping relationship between each piece of data to be displayed and the user role.

[0137] The target data may be the data to be displayed that can be displayed to the target user role among at least one data to be displayed corresponding to the current business process node, that is, the target user role has the authority to read only the data and / or manipulate the data for the target data.

[0138] For example, at least one data to be displayed corresponding to the current business process node includes data 1 to be displayed, data 2 to be displayed, and data 3 to be displayed. For user role 1, the permissions for data 1 to be displayed, data 2 to be displayed, and data 3 to be displayed are all data manipulable, and the target data matching user role 1 includes data 1 to be displayed, data 2 to be displayed, and data 3 to be displayed. For user role 2, the permission for data 1 to be displayed is data manipulable, the permission for data 2 to be displayed is data read-only, and the permission for data 3 to be displayed is data hidden, and the target data matching user role 2 includes data 1 to be displayed and data 2 to be displayed. For user role 3, the permission for data 1 to be displayed is data read-only, the permission for data 2 to be displayed is data hidden, and the permission for data 3 to be displayed is data hidden, and the target data matching user role 3 includes data 1 to be displayed.

[0139] In a specific implementation, the computer device may determine the target data matching the target user role in at least one piece of data to be displayed according to the mapping relationship between each piece of data to be displayed and the user role.

[0140] Step S230: display the target data in the current business process node, and receive the business operation of the current user account on the target data.

[0141] In a specific implementation, the computer device may display the target data in the current business process node to receive the business operation of the current user account on the target data.

[0142] Specifically, the computer device may display the target data in a business process page corresponding to the current business process node to receive a business operation of the current user account for the target data.

[0143] In the above-mentioned workflow configuration method based on role permissions, by responding to the access request of the current user account that logs into the asset management system to the current business process node in the business workflow process, at least one data to be displayed corresponding to the current business process node and the target user role corresponding to the current user account are determined; the business workflow process is configured according to the workflow configuration method based on role permissions as mentioned above; according to the mapping relationship between each data to be displayed and the user role, the target data matching the target user role is determined in at least one data to be displayed; the target data is displayed in the current business process node, and the business operation of the current user account for the target data is received.

[0144] In this way, through a sophisticated role-based permission management mechanism, the operating permissions of different user roles at each process node can be precisely controlled to ensure the compliance and security of the business process. When a user account accesses a business process node, different target data can be displayed according to the different permissions of different user accounts. Only user accounts with permissions will display the target data, and user accounts without permissions can be prohibited from obtaining the target data, which can further improve data security.

[0145] In one embodiment, receiving a business operation of the current user account on the target data includes: determining the permission items of the target user role on the target data based on the mapping relationship between each data to be displayed and the user role; and displaying a prompt message when the business operation does not match the permission items of the target user role on the target data.

[0146] The prompt information is used to indicate that the current user account does not have the authority to perform business operations.

[0147] In a specific implementation, when a computer device receives a business operation of a current user account on target data, the computer device can determine the permission items of the target user role on the target data based on the mapping relationship between each data to be displayed and the user role. If the business operation does not match the permission items of the target user role on the target data, a prompt message is displayed to prompt that the current user account does not have the permission to perform the business operation.

[0148] For example, the target data that matches the target user role includes data 1 and data 2. The target user role's specific permission for data 1 is data manipulation, and the target user role's specific permission for data 2 is data read-only. If the current user account performs a data editing operation on data 2, the business operation does not match the data read-only permission item of the target user role for the target data, and the computer device displays a prompt message "You do not have permission to perform this operation."

[0149] It is understandable that if there is no target data matching the target user role in at least one of the data to be displayed corresponding to the current business process node, it means that the current user account does not have access rights to the current business process node, and the computer device displays a prompt message "You do not have permission to access this business process node."

[0150] The technical solution of this embodiment determines the permission items of the target user role for the target data based on the mapping relationship between each data to be displayed and the user role; when the business operation does not match the permission items of the target user role for the target data, a prompt message is displayed; the prompt message is used to prompt that the current user account does not have the authority to perform the business operation.

[0151] In this way, based on the mapping relationship between each data to be displayed and the user role, the permission items that the target user role has for the target data can be determined, so as to judge whether the business operations of the current user account for the target data match the permission items that the corresponding target user role has for the target data. In case of mismatch, a prompt will be given, which can effectively manage the operation permissions of different user roles at each node of the process, thereby realizing safe and compliant process management.

[0152] In another embodiment, Figure 3 As shown, a business process processing method is provided, which is described by taking the method applied to a computer device as an example, and includes the following steps:

[0153] Step S302, in response to a business process node creation operation in the asset management system, determining a business process node created in the asset management system.

[0154] Step S304: In response to the execution order configuration operation on the business process nodes, the execution order of the business process nodes is determined.

[0155] Step S306 , in response to the logic condition configuration operation on the business process node, determining the logic condition of the business process node.

[0156] Step S308, in response to the flow path configuration operation of the logical condition, determining the flow path of the business process node when the corresponding logical condition is met.

[0157] Step S310, determining the execution logic of the business process node according to the logical condition of the business process node and the flow path of the business process node.

[0158] Step S312, for any data to be displayed in the business process node, in response to the role permission configuration operation on each permission item of any data to be displayed, determining the mapping relationship between each permission item of any data to be displayed and each user role.

[0159] Step S314 , obtaining a mapping relationship between each data to be displayed and a user role in the business process node according to the mapping relationship between each permission item of each data to be displayed and each user role.

[0160] Step S316, configuring the business workflow process of the asset management system according to the execution order, execution logic and mapping relationship of the business process nodes.

[0161] Step S318, in response to the access request of the current user account logging into the asset management system to the current business process node in the business workflow process, determine at least one data to be displayed corresponding to the current business process node and the target user role corresponding to the current user account.

[0162] Step S320: determining target data matching the target user role in at least one piece of data to be displayed according to the mapping relationship between each piece of data to be displayed and the user role.

[0163] Step S322: display the target data in the current business process node, and determine the permission items that the target user role has for the target data according to the mapping relationship between each data to be displayed and the user role.

[0164] Step S324: When the business operation does not match the permission item of the target user role for the target data, a prompt message is displayed.

[0165] It should be noted that the specific limitations of the above steps can refer to the specific limitations of a workflow configuration method based on role permissions and a business process processing method mentioned above.

[0166] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0167] Based on the same inventive concept, the embodiment of the present application also provides an asset management system for implementing the above-mentioned workflow configuration method based on role permissions. The asset management system is introduced in three aspects:

[0168] 1. System architecture and data processing flow:

[0169] System architecture:

[0170] This system adopts B / S (browser / server) architecture, which is mainly composed of three parts: front-end display layer, back-end service layer and database layer. The front-end display layer is responsible for interacting with user accounts, the back-end service layer is responsible for data processing and business logic implementation; the database layer stores role permission information.

[0171] 1.1 Role authority management module:

[0172] 1.1.1 Workflow configuration module:

[0173] Execution body: workflow engine.

[0174] Description: Based on actual needs, users can use the role permission management mechanism to accurately control the operation permissions of different user roles on each node.

[0175] 2. Application scenario description:

[0176] Enterprise IT Asset Management:

[0177] Description: Within the enterprise, the management user account uses this system to set role permissions for user accounts across the company to achieve workflow management. Through the workflow engine, the management user account can configure the operation permissions of different user roles at each business process node to ensure the compliance and security of the business process.

[0178] 3. Interface display:

[0179] In order to facilitate the understanding of those skilled in the art, Figure 4 A schematic diagram of a business process page is provided.

[0180] Role-based permission management mechanism: Through the built-in sophisticated role-based permission management mechanism, the operation permissions of different user roles at each business process node can be accurately controlled.

[0181] In this way, through the workflow configuration method based on role permissions and integrated into the IT asset management system, the applicability and scalability of the system are significantly improved. It overcomes the limitations of related technologies in IT asset management systems. It realizes the personalized configuration capability of workflow processes, allowing users to freely define business process nodes, execution order and execution logic according to actual needs, greatly improving the adaptability and flexibility of business processes. At the same time, the system has a built-in sophisticated role permission management mechanism, which can accurately control the operation permissions of different user roles at each node of the process to ensure the compliance and security of business processes. This system not only simplifies the management difficulty of complex business processes, but also significantly improves organizational operational efficiency and data security. It is an important tool for the digital transformation of modern enterprises.

[0182] Based on the same inventive concept, the embodiment of the present application also provides a role-based permission workflow configuration device for implementing the above-mentioned role-based permission workflow configuration method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above-mentioned method, so the specific limitations in one or more role-based permission workflow configuration device embodiments provided below can refer to the limitations of the role-based permission workflow configuration method above, and will not be repeated here.

[0183] In an exemplary embodiment, Figure 5 As shown, a workflow configuration device based on role permissions is provided, including: a node creation module 510, a sequence determination module 520, a logic determination module 530, a permission configuration module 540 and a process configuration module 550, wherein:

[0184] The node creation module 510 is used to determine the business process node created in the asset management system in response to the business process node creation operation in the asset management system.

[0185] The sequence determination module 520 is used to determine the execution sequence of the business process nodes in response to the execution sequence configuration operation on the business process nodes.

[0186] The logic determination module 530 is used to determine the execution logic of the business process node in response to the execution logic configuration operation on the business process node.

[0187] The permission configuration module 540 is used to determine the mapping relationship between each data to be displayed and the user role in the business process node in response to the role permission configuration operation on the business process node; the role permission configuration operation is used to configure the user role that can operate the data to be displayed.

[0188] The process configuration module 550 is used to configure the business workflow process of the asset management system according to the execution order, the execution logic and the mapping relationship of the business process nodes.

[0189] In one embodiment, the permission configuration module 540 is specifically used to determine, for any data to be displayed, a mapping relationship between each permission item of the data to be displayed and each user role in response to a role permission configuration operation on each permission item of the data to be displayed; and obtain a mapping relationship between each data to be displayed and the user role in the business process node based on the mapping relationship between each permission item of the data to be displayed and each user role.

[0190] In one embodiment, the execution logic configuration operation includes a logic condition configuration operation and a flow path configuration operation, and the logic determination module 530 is specifically used to determine the logic condition of the business process node in response to the logic condition configuration operation on the business process node; determine the flow path of the business process node when the corresponding logic condition is met in response to the flow path configuration operation on the logic condition; determine the execution logic of the business process node based on the logic condition of the business process node and the flow path of the business process node.

[0191] Each module in the above-mentioned workflow configuration device based on role permissions can be implemented in whole or in part by software, hardware and a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each of the above modules.

[0192] Based on the same inventive concept, the embodiment of the present application also provides a business process processing device for implementing the business process processing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more business process processing device embodiments provided below can refer to the limitations on the business process processing method above, and will not be repeated here.

[0193] In an exemplary embodiment, Figure 6As shown, a business process processing device is provided, including: a first determination module 610, a second determination module 620 and a display module 630, wherein:

[0194] The first determination module 610 is used to respond to an access request from the current user account that logs into the asset management system to the current business process node in the business workflow process, and determine at least one data to be displayed corresponding to the current business process node and the target user role corresponding to the current user account; the business workflow process is configured according to the workflow configuration method based on role permissions as described above.

[0195] The second determination module 620 is configured to determine target data matching the target user role in the at least one data to be displayed according to the mapping relationship between each of the data to be displayed and the user role.

[0196] The display module 630 is used to display the target data in the current business process node and receive the business operation of the current user account for the target data.

[0197] In one embodiment, the display module 630 is specifically used to determine the permission items that the target user role has for the target data based on the mapping relationship between each data to be displayed and the user role; when the business operation does not match the permission items that the target user role has for the target data, a prompt message is displayed; the prompt message is used to prompt that the current user account does not have the authority to perform the business operation.

[0198] Each module in the above-mentioned business process processing device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0199] In an exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG7. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, a workflow configuration method and / or a business process processing method based on role permissions is implemented. The display unit of the computer device is used to form a visually visible picture, and can be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covered on the display screen, or a key, trackball, or touchpad provided on the computer device housing, or an external keyboard, touchpad, or mouse, etc.

[0200] Those skilled in the art will understand that the structure shown in FIG. 7 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0201] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0202] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0203] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0204] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0205] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0206] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0207] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A workflow configuration method based on role permissions, characterized in that: The method comprises: In response to a business process node creation operation in the asset management system, determining a business process node created in the asset management system; In response to an execution order configuration operation on the business process nodes, determining an execution order of the business process nodes; In response to an execution logic configuration operation on the business process node, determining the execution logic of the business process node; In response to a role authority configuration operation on the business process node, determining a mapping relationship between each to-be-displayed data and a user role in the business process node; the role authority configuration operation is used to configure a user role that can operate the to-be-displayed data; The business workflow process of the asset management system is configured according to the execution order, the execution logic and the mapping relationship of the business process nodes.

2. The method according to claim 1, characterized in that The step of determining the mapping relationship between each to-be-displayed data in the business process node and the user role in response to the role authority configuration operation on the business process node includes: For any data to be displayed, in response to a role permission configuration operation on each permission item of the data to be displayed, determining a mapping relationship between each permission item of the data to be displayed and each user role; According to the mapping relationship between each permission item of each data to be displayed and each user role, the mapping relationship between each data to be displayed and the user role in the business process node is obtained.

3. The method according to claim 1, characterized in that The execution logic configuration operation includes a logic condition configuration operation and a flow path configuration operation, and the determination of the execution logic of the business process node in response to the execution logic configuration operation on the business process node includes: In response to the logic condition configuration operation on the business process node, determining the logic condition of the business process node; In response to the flow path configuration operation of the logical condition, determining the flow path of the business process node when the corresponding logical condition is met; The execution logic of the business process node is determined according to the logical condition of the business process node and the flow path of the business process node.

4. A business process processing method, characterized in that: The method comprises: In response to an access request from a current user account logging into the asset management system to a current business process node in a business workflow process, determining at least one to-be-displayed data corresponding to the current business process node and a target user role corresponding to the current user account; the business workflow process is configured according to the workflow configuration method based on role authority as described in any one of claims 1 to 3; According to the mapping relationship between each of the to-be-displayed data and the user role, determining the target data matching the target user role in the at least one to-be-displayed data; The target data is displayed in the current business process node, and a business operation of the current user account on the target data is received.

5. The method according to claim 4, characterized in that The receiving the business operation of the current user account for the target data includes: Determining the permission item of the target user role for the target data according to the mapping relationship between each of the to-be-displayed data and the user role; In the case where the business operation does not match the permission item of the target user role for the target data, a prompt message is displayed; the prompt message is used to prompt that the current user account does not have the permission to perform the business operation.

6. A workflow configuration device based on role authority, characterized in that: The device comprises: A node creation module, for determining a business process node created in the asset management system in response to a business process node creation operation in the asset management system; An order determination module, configured to determine the execution order of the business process nodes in response to an execution order configuration operation on the business process nodes; A logic determination module, configured to determine the execution logic of the business process node in response to an execution logic configuration operation on the business process node; A permission configuration module, for determining a mapping relationship between each to-be-displayed data and a user role in the business process node in response to a role permission configuration operation on the business process node; the role permission configuration operation is used to configure a user role that can operate the to-be-displayed data; A process configuration module is used to configure the business workflow process of the asset management system according to the execution order, the execution logic and the mapping relationship of the business process nodes.

7. A business process processing device, characterized in that: The device comprises: A first determination module is used to determine, in response to an access request from a current user account logging into the asset management system to a current business process node in a business workflow process, at least one to-be-displayed data corresponding to the current business process node and a target user role corresponding to the current user account; the business workflow process is configured according to the workflow configuration method based on role authority as described in any one of claims 1 to 3; A second determination module, configured to determine target data matching the target user role in the at least one data to be displayed according to a mapping relationship between each of the data to be displayed and the user role; The display module is used to display the target data in the current business process node and receive the business operation of the current user account for the target data.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images