Permission change control method and device, electronic equipment and readable storage medium

Abstract

The invention provides a permission change control method and device, electronic equipment and a readable storage medium, and the method comprises the steps: determining a to-be-changed product, and querying the permission control information and role configuration information of the to-be-changed product according to the to-be-changed product; receiving a change plan and operation time authorization information input by a manager for the to-be-changed product; for each target operator, determining the target change start time and the target change end time of the target operator from the operation time authorization information, determining the target role of the target operator from the role configuration information, and determining the target change operation authority of the target role from the authority control information, and granting the target change operation authority to the target operator in a target time period corresponding to the target change start time to the target change end time. By means of the method, accurate control over the change operation authority is achieved, and therefore the safety of the to-be-changed product is improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a control method, device, electronic device and readable storage medium for changing permissions. Background Art

[0002] For modern technology products, each technology product usually contains multiple services, and these services run in the server. In the process of maintaining and operating technology products, when one or some services in the technology product need to be changed, the staff of the technology product needs to change the service in the server.

[0003] Considering the security issues of technology products, currently, usually only staff with change authority can change the business of the technology product in the server. However, in the prior art, the staff's change authority usually exists all the time, that is, the staff can make any changes to the business of the technology product at any time, which is easy to affect the security of the technology product. Summary of the invention

[0004] In view of this, the purpose of this application is to provide a control method, device, electronic device and readable storage medium for change permissions, so as to achieve precise control of change operation permissions, thereby improving the security of the product to be changed.

[0005] In a first aspect, an embodiment of the present application provides a method for controlling change permissions, including:

[0006] Determine the product to be changed, and query the authority control information and role configuration information corresponding to the product to be changed according to the product to be changed; wherein the authority control information includes the change operation authority of each role under the product to be changed on the product to be changed; and the role configuration information includes the operator configured for each role under the product to be changed;

[0007] receiving a change plan and operation time authorization information for the product to be changed input by a manager; the operation time authorization information includes a change start time and a change end time configured for each target operator among the operators;

[0008] For each of the target operators, the target change start time and the target change end time of the target operator are determined from the operation time authorization information, the target role of the target operator is determined from the role configuration information, and the target change operation authority of the target role is determined from the authority control information, so as to grant the target operator the target change operation authority within the target time period corresponding to the target change start time to the target change end time.

[0009] In combination with the first aspect, an embodiment of the present application provides a first possible implementation of the first aspect, wherein, after granting the target change operation authority to the target operator, the method further includes:

[0010] If the current time exceeds the target change end time of the target operator, the target change operation authority granted to the target operator is revoked.

[0011] In combination with the first aspect, the embodiment of the present application provides a second possible implementation of the first aspect, wherein, after granting the target change operation authority to the target operator, the method further includes:

[0012] When any of the following change results input by the target operator is received, the target change operation authority granted to the target operator is revoked; the change results include: change success, change failure, change cancellation, and change time modification.

[0013] In combination with the second possible implementation of the first aspect, the embodiment of the present application provides a third possible implementation of the first aspect, wherein the determining the product to be changed, and querying the permission control information and role configuration information corresponding to the product to be changed according to the product to be changed, includes:

[0014] Creating a change process instance; wherein the process nodes contained in the change process instance are, in order of process sequence, a start node, a plan node, an approval node, an implementation node, a verification node, and an end node;

[0015] In the planning node, a product to be changed is determined from a plurality of products, and permission control information and role configuration information corresponding to the product to be changed are queried according to the product to be changed;

[0016] The receiving management personnel input the change plan and operation time authorization information for the product to be changed, including:

[0017] In the plan node, the change plan and operation time authorization information for the product to be changed input by the management personnel are received.

[0018] In combination with the third possible implementation of the first aspect, the embodiment of the present application provides a fourth possible implementation of the first aspect, wherein, for each of the target operators, determining the target change start time and the target change end time of the target operator from the operation time authorization information, determining the target role of the target operator from the role configuration information, and determining the target change operation permission of the target role from the permission control information, so as to grant the target operator the target change operation permission within the target time period corresponding to the target change start time to the target change end time, including:

[0019] In the approval node, the approval result input by the approval personnel for the change plan and the operation time authorization information is received; when the approval result is approved, the change plan, the operation time authorization information, the permission control information and the role configuration information are sent to the permission control system, so that the permission control system determines the target change start time and the target change end time of each target operator from the operation time authorization information, determines the target role of the target operator from the role configuration information, and determines the target change operation permission of the target role from the permission control information, so as to grant the target operator the target change operation permission within the target time period corresponding to the target change start time to the target change end time.

[0020] In combination with the third possible implementation of the first aspect, the embodiment of the present application provides a fifth possible implementation of the first aspect, wherein when any of the following change results input by the target operator is received, the target change operation authority granted to the target operator is revoked, including:

[0021] In the implementation node, the change result input by the target operator is received; when the received change result is change failure, change cancellation or change time modification, the change result is sent to the authority control system so that the authority control system takes back the target change operation authority granted to the target operator; when the received change result is change success, the change result is sent to the verification node;

[0022] In the verification node, a verification result input by a verification personnel is received. When the verification result is a passed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a first prompt message indicating a successful change to the user terminal of the manager; when the verification result is a failed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a second prompt message indicating a failed change to the user terminal of the manager.

[0023] In combination with the fifth possible implementation of the first aspect, the embodiment of the present application provides a sixth possible implementation of the first aspect, wherein the product to be changed includes multiple businesses, and when the target operator's target change operation authority is to change the target business in the product to be changed, the verification personnel determines whether the target business is changed successfully by logging into the target business system running the target business. When the target business is changed successfully, the verification result entered by the verification personnel is verification passed; when the target business change fails, the verification result entered by the verification personnel is verification failed.

[0024] In a second aspect, an embodiment of the present application further provides a control device for changing permissions, including:

[0025] A determination module is used to determine the product to be changed, and query the authority control information and role configuration information corresponding to the product to be changed according to the product to be changed; wherein the authority control information includes the change operation authority of each role under the product to be changed on the product to be changed; and the role configuration information includes the operator configured for each role under the product to be changed;

[0026] A receiving module, configured to receive a change plan and operation time authorization information for the product to be changed input by a manager; the operation time authorization information includes a change start time and a change end time configured for each target operator among the operators;

[0027] The authorization module is used to determine, for each target operator, the target change start time and the target change end time of the target operator from the operation time authorization information, determine the target role of the target operator from the role configuration information, and determine the target change operation authority of the target role from the authority control information, so as to grant the target operator the target change operation authority within the target time period corresponding to the target change start time to the target change end time.

[0028] In combination with the second aspect, the embodiment of the present application provides a first possible implementation of the second aspect, wherein the device further includes:

[0029] The first reclaiming module is used to revoke the target change operation authority granted to the target operator after the authorization module grants the target change operation authority to the target operator if the current time exceeds the target change end time of the target operator.

[0030] In combination with the second aspect, the embodiment of the present application provides a second possible implementation of the second aspect, wherein the device further includes:

[0031] The second revoke module is used to revoke the target change operation authority granted to the target operator after the authorization module grants the target operator the target change operation authority, when receiving any of the following change results input by the target operator; the change results include: change success, change failure, change cancellation, and change time modification.

[0032] In combination with the second possible implementation of the second aspect, the embodiment of the present application provides a third possible implementation of the second aspect, wherein the determination module, when used to determine the product to be changed, and querying the permission control information and role configuration information corresponding to the product to be changed according to the product to be changed, is specifically used to:

[0033] Creating a change process instance; wherein the process nodes contained in the change process instance are, in order of process sequence, a start node, a plan node, an approval node, an implementation node, a verification node, and an end node;

[0034] In the planning node, a product to be changed is determined from a plurality of products, and permission control information and role configuration information corresponding to the product to be changed are queried according to the product to be changed;

[0035] When the receiving module is used to receive the change plan and operation time authorization information for the product to be changed input by the management personnel, it is specifically used to:

[0036] In the plan node, the change plan and operation time authorization information for the product to be changed input by the management personnel are received.

[0037] In combination with the third possible implementation of the second aspect, an embodiment of the present application provides a fourth possible implementation of the second aspect, wherein the authorization module is used to determine, for each of the target operators, a target change start time and a target change end time of the target operator from the operation time authorization information, determine the target role of the target operator from the role configuration information, and determine the target change operation authority of the target role from the authority control information, so as to grant the target operator the target change operation authority within the target time period corresponding to the target change start time to the target change end time, specifically for:

[0038] In the approval node, the approval result input by the approval personnel for the change plan and the operation time authorization information is received; when the approval result is approved, the change plan, the operation time authorization information, the permission control information and the role configuration information are sent to the permission control system, so that the permission control system determines the target change start time and the target change end time of each target operator from the operation time authorization information, determines the target role of the target operator from the role configuration information, and determines the target change operation permission of the target role from the permission control information, so as to grant the target operator the target change operation permission within the target time period corresponding to the target change start time to the target change end time.

[0039] In combination with the fourth possible implementation of the second aspect, the embodiment of the present application provides a fifth possible implementation of the second aspect, wherein the second reclaiming module is used to revoke the target change operation authority granted to the target operator when receiving any of the following change results input by the target operator, and is specifically used to:

[0040] In the implementation node, the change result input by the target operator is received; when the received change result is change failure, change cancellation or change time modification, the change result is sent to the authority control system so that the authority control system takes back the target change operation authority granted to the target operator; when the received change result is change success, the change result is sent to the verification node;

[0041] In the verification node, a verification result input by a verification personnel is received. When the verification result is a passed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a first prompt message indicating a successful change to the user terminal of the manager; when the verification result is a failed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a second prompt message indicating a failed change to the user terminal of the manager.

[0042] In combination with the fifth possible implementation of the second aspect, an embodiment of the present application provides a sixth possible implementation of the second aspect, wherein the product to be changed includes multiple businesses, and when the target operator's target change operation authority is to change the target business in the product to be changed, the verification personnel determines whether the target business has been changed successfully by logging into the target business system running the target business. When the target business is changed successfully, the verification result entered by the verification personnel is verification passed; when the target business change fails, the verification result entered by the verification personnel is verification failed.

[0043] In a third aspect, an embodiment of the present application further provides an electronic device, comprising: a processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor and the memory communicate through the bus, and when the machine-readable instructions are executed by the processor, the steps in any possible implementation of the first aspect above are performed.

[0044] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps in any possible implementation of the first aspect described above are executed.

[0045] The embodiment of the present application provides a control method, device, electronic device and readable storage medium for changing permissions, wherein in the method, after determining the product to be changed, the permission control information and role configuration information corresponding to the product to be changed are directly queried, and the change plan and operation time authorization information for the product to be changed input by the manager are received. Among them, the permission control information contains the change operation permissions of each role under the product to be changed to the product to be changed; the role configuration information contains the operators configured for each role under the product to be changed; the operation time authorization information includes the change start time and change end time configured for each target operator among the operators. When granting the change operation permission to each target operator, specifically for each target operator, the target change start time and target change end time of the target operator are determined from the operation time authorization information, the target role of the target operator is determined from the role configuration information, and the target change operation permission of the target role is determined from the permission control information, so as to grant the target change operation permission to the target operator within the target time period corresponding to the target change start time to the target change end time. In this way, each target operator can have the target change operation authority only within the target time period specified for him / her, that is, the target operator is only allowed to make changes to the product to be changed within his / her corresponding target time period, thereby achieving precise control of the change operation authority and thus improving the security of the product to be changed.

[0046] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0048] Figure 1 A flowchart of a method for controlling permission change provided in an embodiment of the present application is shown;

[0049] Figure 2 A schematic diagram showing permission control information provided by an embodiment of the present application is shown;

[0050] Figure 3 A schematic diagram showing role configuration information provided by an embodiment of the present application is shown;

[0051] Figure 4A schematic diagram showing an example of a change process provided in an embodiment of the present application is shown;

[0052] Figure 5 A schematic diagram showing an operation time authorization information provided by an embodiment of the present application;

[0053] Figure 6 A schematic diagram showing the structure of a control device for changing permissions provided in an embodiment of the present application is shown;

[0054] Figure 7 A schematic structural diagram of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0055] To make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments. The components of the embodiments of the present application generally described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those skilled in the art without making creative work belong to the scope of protection of the present application.

[0056] Considering the security issues of technology products, currently, usually only staff with change authority can change the business of the technology product in the server. However, in the prior art, the staff's change authority usually always exists, that is, the staff can make any changes to the business of the technology product at any time, which is easy to affect the security of the technology product. Based on this, the embodiments of the present application provide a control method, device, electronic device and readable storage medium for changing authority to achieve precise control of change operation authority, thereby improving the security of the product to be changed, which is described below through embodiments.

[0057] To facilitate understanding of this embodiment, a control method for changing permissions disclosed in the embodiment of this application is first described in detail. The method is applied to a process engine system, such as Figure 1 As shown, the method includes the following steps S101-S103:

[0058] S101: Determine the product to be changed, and query the permission control information and role configuration information corresponding to the product to be changed according to the product to be changed; wherein the permission control information includes the change operation permissions of each role under the product to be changed on the product to be changed; and the role configuration information includes the operators configured for each role under the product to be changed.

[0059] In this embodiment, each technology product usually includes multiple services, and the product to be changed refers to a technology product whose at least one service needs to be changed. Each technology product (or each product to be changed) corresponds to its own authority control information and role configuration information.

[0060] For example, Figure 2 As shown, an example of permission control information corresponding to a product to be changed is shown. In this example, different roles under the product to be changed correspond to different change operation permissions.

[0061] like Figure 3 As shown, an example of role configuration information corresponding to a product to be changed is shown. In this example, each role under the product to be changed corresponds to a respective operator.

[0062] In a possible implementation manner, when executing step S101, the following steps S1011-S1012 may be specifically performed:

[0063] S1011: Create a change process instance; wherein the process nodes included in the change process instance are, in order of process sequence, a start node, a plan node, an approval node, an implementation node, a verification node, and an end node.

[0064] In this embodiment, the process engine system creates a change process instance in response to the administrator's creation operation for the change process instance of the product to be changed, such as Figure 4 As shown, the various process nodes included in the change process instance are, in order of process sequence, the start node, the plan node, the approval node, the implementation node, the verification node and the end node.

[0065] S1012: In a planning node, a product to be changed is determined from a plurality of products, and according to the product to be changed, permission control information and role configuration information corresponding to the product to be changed are queried.

[0066] In this embodiment, in the planning node, the process engine system responds to the selection operation of the manager for the product to be changed from the multiple products to determine the product to be changed from the multiple products.

[0067] S102: receiving a change plan and operation time authorization information for the product to be changed input by a manager; the operation time authorization information includes a change start time and a change end time configured for each target operator among the operators.

[0068] In this embodiment, the change plan includes information such as the change content and change time of the product to be changed. Figure 5 As shown, an example of operation time authorization information is shown, and the target operator is the operator required to change the product to be changed this time.

[0069] In a possible implementation, when executing step S102, the following steps may be specifically followed: In a planning node, receiving the change plan and operation time authorization information for the product to be changed input by the manager.

[0070] S103: For each target operator, determine the target change start time and target change end time of the target operator from the operation time authorization information, determine the target role of the target operator from the role configuration information, and determine the target change operation authority of the target role from the authority control information, so as to grant the target operator the target change operation authority within the target time period corresponding to the target change start time to the target change end time.

[0071] In this embodiment, in the approval node, the approval result input by the approving personnel for the change plan and operation time authorization information is received; when the approval result is approved, the change plan, operation time authorization information, permission control information and role configuration information are sent to the permission control system, so that the permission control system determines the target change start time and target change end time of the target operator from the operation time authorization information for each target operator, determines the target role of the target operator from the role configuration information, and determines the target change operation permission of the target role from the permission control information, so as to grant the target operator the target change operation permission within the target time period corresponding to the target change start time to the target change end time.

[0072] In a possible implementation manner, after the target operator is granted the target change operation authority, the following steps may be performed:

[0073] If the current time exceeds the target change end time of the target operator, the target change operation authority granted to the target operator is revoked.

[0074] When any of the following change results input by the target operator is received, the target change operation authority granted to the target operator is revoked; the change results include: change success, change failure, change cancellation, and change time modification.

[0075] In a possible implementation, Figure 4 As shown, when receiving any of the following change results input by the target operator in the execution step, the target change operation authority granted to the target operator is revoked, and the following steps can be specifically performed:

[0076] In the implementation node, the change result input by the target operator is received; when the received change result is change failure, change cancellation or change time modification, the change result is sent to the authority control system so that the authority control system can revoke the target change operation authority granted to the target operator; when the received change result is change success, the change result is sent to the verification node;

[0077] In the verification node, a verification result input by the verification personnel is received. When the verification result is a passed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a first prompt message indicating a successful change to the user end of the manager; when the verification result is a failed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a second prompt message indicating a failed change to the user end of the manager.

[0078] Among them, the product to be changed contains multiple businesses. When the target operator's target change operation authority is to change the target business in the product to be changed, the verification personnel logs in to the target business system that runs the target business to determine whether the target business has been changed successfully. When the target business is changed successfully, the verification result entered by the verification personnel is verification passed; when the target business fails to change, the verification result entered by the verification personnel is verification failed.

[0079] Based on the same technical concept, the embodiment of the present application also provides a control device for changing permissions, such as Figure 6 As shown, the device comprises:

[0080] The determination module 601 is used to determine the product to be changed, and query the authority control information and role configuration information corresponding to the product to be changed according to the product to be changed; wherein the authority control information includes the change operation authority of each role under the product to be changed on the product to be changed; and the role configuration information includes the operator configured for each role under the product to be changed;

[0081] A receiving module 602 is used to receive a change plan and operation time authorization information for the product to be changed input by a manager; the operation time authorization information includes a change start time and a change end time configured for each target operator among the operators;

[0082] Authorization module 603 is used to determine, for each target operator, the target change start time and the target change end time of the target operator from the operation time authorization information, determine the target role of the target operator from the role configuration information, and determine the target change operation authority of the target role from the authority control information, so as to grant the target operator the target change operation authority within the target time period corresponding to the target change start time to the target change end time.

[0083] Optionally, the device further comprises:

[0084] The first reclaiming module is used to revoke the target change operation authority granted to the target operator after the authorization module 603 grants the target change operation authority to the target operator if the current time exceeds the target change end time of the target operator.

[0085] Optionally, the device further comprises:

[0086] The second revoke module is used to revoke the target change operation authority granted to the target operator after the authorization module 603 grants the target operator the target change operation authority, when receiving any of the following change results input by the target operator; the change results include: change success, change failure, change cancellation, and change time modification.

[0087] Optionally, when the determination module 601 is used to determine the product to be changed, and to query the authority control information and role configuration information corresponding to the product to be changed according to the product to be changed, it is specifically used to:

[0088] Creating a change process instance; wherein the process nodes contained in the change process instance are, in order of process sequence, a start node, a plan node, an approval node, an implementation node, a verification node, and an end node;

[0089] In the planning node, a product to be changed is determined from a plurality of products, and permission control information and role configuration information corresponding to the product to be changed are queried according to the product to be changed;

[0090] When the receiving module 602 is used to receive the change plan and operation time authorization information for the product to be changed input by the manager, it is specifically used to:

[0091] In the plan node, the change plan and operation time authorization information for the product to be changed input by the management personnel are received.

[0092] Optionally, the authorization module 603 is used to determine, for each of the target operators, a target change start time and a target change end time of the target operator from the operation time authorization information, determine a target role of the target operator from the role configuration information, and determine a target change operation permission of the target role from the permission control information, so as to grant the target operator the target change operation permission within a target time period corresponding to the target change start time to the target change end time, specifically for:

[0093] In the approval node, the approval result input by the approval personnel for the change plan and the operation time authorization information is received; when the approval result is approved, the change plan, the operation time authorization information, the permission control information and the role configuration information are sent to the permission control system, so that the permission control system determines the target change start time and the target change end time of each target operator from the operation time authorization information, determines the target role of the target operator from the role configuration information, and determines the target change operation permission of the target role from the permission control information, so as to grant the target operator the target change operation permission within the target time period corresponding to the target change start time to the target change end time.

[0094] Optionally, when the second reclaiming module is used to revoke the target change operation authority granted to the target operator upon receiving any of the following change results input by the target operator, it is specifically used to:

[0095] In the implementation node, the change result input by the target operator is received; when the received change result is change failure, change cancellation or change time modification, the change result is sent to the authority control system so that the authority control system takes back the target change operation authority granted to the target operator; when the received change result is change success, the change result is sent to the verification node;

[0096] In the verification node, a verification result input by a verification personnel is received. When the verification result is a passed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a first prompt message indicating a successful change to the user terminal of the manager; when the verification result is a failed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a second prompt message indicating a failed change to the user terminal of the manager.

[0097] Optionally, the product to be changed includes multiple businesses. When the target operator's target change operation authority is to change the target business in the product to be changed, the verification personnel logs into the target business system running the target business to determine whether the target business has been changed successfully. When the target business has been changed successfully, the verification result entered by the verification personnel is verification passed; when the target business has failed to be changed, the verification result entered by the verification personnel is verification failed.

[0098] Figure 7 A structural diagram of an electronic device provided for an embodiment of the present application includes: a processor 701, a memory 702 and a bus 703, wherein the memory 702 stores machine-readable instructions executable by the processor 701. When the electronic device runs the above-mentioned information processing method, the processor 701 communicates with the memory 702 through the bus 703, and the processor 701 executes the machine-readable instructions to perform the method steps described in Example 1.

[0099] The embodiment of the present application further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the method steps described in the first embodiment are executed.

[0100] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices, electronic devices, and computer-readable storage media can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0101] In the several embodiments provided in the present application, it should be understood that the disclosed methods, devices, electronic devices and computer-readable storage media can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of devices or modules can be electrical, mechanical or other forms.

[0102] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0103] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0104] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile computer-readable storage medium that is executable by a processor. Based on this understanding, the technical solution of the present application can essentially be embodied in the form of a software product, or in other words, the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0105] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The protection scope of the present application is not limited thereto. Although the present application is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed in the present application, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A control method for changing permissions, characterized in that: include: Determine the product to be changed, and query the authority control information and role configuration information corresponding to the product to be changed according to the product to be changed; wherein the authority control information includes the change operation authority of each role under the product to be changed on the product to be changed; and the role configuration information includes the operator configured for each role under the product to be changed; receiving a change plan and operation time authorization information for the product to be changed input by a manager; the operation time authorization information includes a change start time and a change end time configured for each target operator among the operators; For each of the target operators, the target change start time and the target change end time of the target operator are determined from the operation time authorization information, the target role of the target operator is determined from the role configuration information, and the target change operation authority of the target role is determined from the authority control information, so as to grant the target operator the target change operation authority within the target time period corresponding to the target change start time to the target change end time.

2. The method according to claim 1, characterized in that: After granting the target change operation authority to the target operator, the method further includes: If the current time exceeds the target change end time of the target operator, the target change operation authority granted to the target operator is revoked.

3. The method according to claim 1, characterized in that: After granting the target change operation authority to the target operator, the method further includes: When any of the following change results input by the target operator is received, the target change operation authority granted to the target operator is revoked; the change results include: change success, change failure, change cancellation, and change time modification.

4. The method according to claim 3, characterized in that: The determining of the product to be changed, and querying the authority control information and role configuration information corresponding to the product to be changed according to the product to be changed, includes: Creating a change process instance; wherein the process nodes contained in the change process instance are, in order of process sequence, a start node, a plan node, an approval node, an implementation node, a verification node, and an end node; In the planning node, a product to be changed is determined from a plurality of products, and permission control information and role configuration information corresponding to the product to be changed are queried according to the product to be changed; The receiving management personnel input the change plan and operation time authorization information for the product to be changed, including: In the plan node, the change plan and operation time authorization information for the product to be changed input by the management personnel are received.

5. The method according to claim 4, characterized in that: The step of determining, for each target operator, a target change start time and a target change end time of the target operator from the operation time authorization information, determining a target role of the target operator from the role configuration information, and determining the target change operation authority of the target role from the authority control information, so as to grant the target operator the target change operation authority within a target time period corresponding to the target change start time to the target change end time, includes: In the approval node, the approval result input by the approval personnel for the change plan and the operation time authorization information is received; when the approval result is approved, the change plan, the operation time authorization information, the permission control information and the role configuration information are sent to the permission control system, so that the permission control system determines the target change start time and the target change end time of each target operator from the operation time authorization information, determines the target role of the target operator from the role configuration information, and determines the target change operation permission of the target role from the permission control information, so as to grant the target operator the target change operation permission within the target time period corresponding to the target change start time to the target change end time.

6. The method according to claim 4, characterized in that: When receiving any of the following change results input by the target operator, revoking the target change operation authority granted to the target operator includes: In the implementation node, the change result input by the target operator is received; when the received change result is change failure, change cancellation or change time modification, the change result is sent to the authority control system so that the authority control system takes back the target change operation authority granted to the target operator; when the received change result is change success, the change result is sent to the verification node; In the verification node, a verification result input by a verification personnel is received. When the verification result is a passed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a first prompt message indicating a successful change to the user terminal of the manager; when the verification result is a failed verification, the verification result is sent to the authority control system so that the authority control system revokes the target change operation authority granted to the target operator, and sends a second prompt message indicating a failed change to the user terminal of the manager.

7. The method according to claim 6, characterized in that: The product to be changed includes multiple businesses. When the target operator's target change operation authority is to change the target business in the product to be changed, the verification personnel logs into the target business system running the target business to determine whether the target business has been changed successfully. When the target business has been changed successfully, the verification result entered by the verification personnel is verification passed; when the target business has failed to be changed, the verification result entered by the verification personnel is verification failed.

8. A control device for changing authority, characterized in that: include: A determination module is used to determine the product to be changed, and query the authority control information and role configuration information corresponding to the product to be changed according to the product to be changed; wherein the authority control information includes the change operation authority of each role under the product to be changed on the product to be changed; and the role configuration information includes the operator configured for each role under the product to be changed; A receiving module, configured to receive a change plan and operation time authorization information for the product to be changed input by a manager; the operation time authorization information includes a change start time and a change end time configured for each target operator among the operators; The authorization module is used to determine, for each target operator, the target change start time and the target change end time of the target operator from the operation time authorization information, determine the target role of the target operator from the role configuration information, and determine the target change operation authority of the target role from the authority control information, so as to grant the target operator the target change operation authority within the target time period corresponding to the target change start time to the target change end time.

9. An electronic device, characterized in that: include: A processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor and the memory communicate via the bus, and when the machine-readable instructions are executed by the processor, the steps of the method as described in any one of claims 1 to 7 are performed.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are executed.

Images