Resource application method and device, computer equipment and storage medium

Abstract

The invention relates to a resource application method and device, computer equipment and a storage medium. The method comprises the following steps: acquiring a resource application prompt submitted by a service management role; wherein the resource application prompt is generated by the service management role in a resource application interface for resource application operation of the to-be-applied resource; in response to the resource application prompt, displaying a resource auditing interface in a security auditing role corresponding to the business management role; in response to the auditing operation of the resource application reminding corresponding to the resource application request in the resource auditing interface by the security auditing role, generating a resource auditing result; and outputting a resource auditing result in a resource application interface corresponding to the business management role. According to the method, the service management role plays a role in limiting the authority of resource application, the security auditing role plays a role in examining and approving the resource application, the authority distribution of each role is clear, the reasonability of the resource application process is ensured, and the problem of differentiated processing of different role operations is solved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a resource application method, apparatus, computer equipment and storage medium. Background Art

[0002] With the development of computer technology, user rights allocation is one of the core functions of the system platform, and the demand for user rights management on cloud computing management platforms is even more important.

[0003] In traditional technologies, the commonly used role-based access control (RBAC) mechanism assigns all major permissions to a super administrator. Although this is convenient to operate and there is no role conflict, the power is highly concentrated, which is not conducive to permission control and clear responsibility. Therefore, there is a problem of unreasonable role permission allocation. Summary of the invention

[0004] Based on this, it is necessary to provide a resource application method, device, computer equipment and storage medium that can clearly allocate role permissions in response to the above technical problems.

[0005] In a first aspect, the present application provides a resource application method, comprising:

[0006] Obtain resource application reminders submitted by business management roles; wherein resource application reminders are generated by business management roles in resource application operations for resources to be applied for in the resource application interface;

[0007] In response to the resource application reminder, the resource review interface is displayed in the security review role corresponding to the business management role;

[0008] In response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, generating a resource audit result;

[0009] In the resource application interface corresponding to the business management role, output the resource review results.

[0010] In one embodiment, the method further comprises:

[0011] In response to a touch operation on any candidate interface control in the integrated management interface, displaying a role selection interface;

[0012] In response to a touch operation on at least one candidate user control in the role management interface, a candidate user corresponding to the candidate user control is obtained, and a user role of the candidate user in the candidate interface corresponding to the candidate interface control is determined to be an authorized role; the authorized role is used to indicate that the candidate user has viewing authority over the candidate interface;

[0013] In response to a touch operation on a management role control in the role management interface, a management role is selected from candidate users corresponding to at least one authorized role; the management role is used to indicate that the candidate user has management authority over the candidate interface.

[0014] In one embodiment, the method further comprises:

[0015] In response to an access operation to the candidate interface, determining a user role of the accessing user;

[0016] When the user role is an authorization role or an administrative role, the candidate interface is displayed;

[0017] When the user role is neither an authorization role nor an administrative role, a reminder indicating that the user does not have access rights is output.

[0018] In one of the embodiments, when the candidate interface is a non-resource application interface, the management role of the non-resource application interface includes at least one of a security audit role, a security monitoring role, and a security management role; when the candidate interface is a resource application interface, the management role of the resource application interface includes a business management role, a security audit role, and a security monitoring role.

[0019] In one embodiment, in response to the security audit role auditing the resource application reminder in the resource audit interface corresponding to the resource application request, generating a resource audit result includes:

[0020] In the case where the audit operation is audit failure, in response to the security audit role's audit failure operation on the resource application reminder corresponding to the resource application request in the resource audit interface, an audit result is generated;

[0021] When the audit operation is passed, in response to the security audit role's audit pass operation on the resource application reminder corresponding to the resource application request in the resource audit interface, an audit result is generated based on the resources to be applied for and the audit pass operation result.

[0022] In one embodiment, the method further comprises:

[0023] In response to the operation log generation request triggered by the security monitoring role in the resource monitoring interface, obtain each resource application request and the corresponding audit result;

[0024] Generate operation logs based on each resource application request and corresponding review results.

[0025] In a second aspect, the present application further provides a resource application device, including:

[0026] A reminder acquisition module is used to acquire resource application reminders submitted by business management roles; wherein the resource application reminders are generated by the business management role in the resource application interface for the resource to be applied for;

[0027] An audit display module is used to display a resource audit interface in the security audit role corresponding to the business management role in response to a resource application reminder;

[0028] A result generation module, for generating a resource audit result in response to the security audit role's audit operation on the resource application reminder corresponding to the resource application request in the resource audit interface;

[0029] The result output module is used to output the resource review results in the resource application interface corresponding to the business management role.

[0030] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0031] Obtain resource application reminders submitted by business management roles; wherein resource application reminders are generated by business management roles in resource application operations for resources to be applied for in the resource application interface;

[0032] In response to the resource application reminder, the resource review interface is displayed in the security review role corresponding to the business management role;

[0033] In response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, generating a resource audit result;

[0034] In the resource application interface corresponding to the business management role, output the resource review results.

[0035] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0036] Obtain resource application reminders submitted by business management roles; wherein resource application reminders are generated by business management roles in resource application operations for resources to be applied for in the resource application interface;

[0037] In response to the resource application reminder, the resource review interface is displayed in the security review role corresponding to the business management role;

[0038] In response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, generating a resource audit result;

[0039] In the resource application interface corresponding to the business management role, output the resource review results.

[0040] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0041] Obtain resource application reminders submitted by business management roles; wherein resource application reminders are generated by business management roles in resource application operations for resources to be applied for in the resource application interface;

[0042] In response to the resource application reminder, the resource review interface is displayed in the security review role corresponding to the business management role;

[0043] In response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, generating a resource audit result;

[0044] In the resource application interface corresponding to the business management role, output the resource review results.

[0045] The resource application method, device, computer equipment and storage medium described above obtain resource application reminders submitted by business management roles; wherein, resource application reminders are generated by business management roles in resource application interfaces for resource application operations of resources to be applied for; in response to resource application reminders, resource audit interfaces are displayed in security audit roles corresponding to business management roles; in response to security audit roles' audit operations on resource application requests corresponding to resource application reminders in resource audit interfaces, resource audit results are generated; in resource application interfaces corresponding to business management roles, resource audit results are output. In this embodiment, the business management role plays a role in limiting the authority to apply for resources, and the security audit role plays a role in approving resource applications. The authority allocation of each role is clear, which ensures the rationality of the resource application process and solves the problem of differentiated processing of operations of different roles. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0047] FIG1 is an application environment diagram of a resource application method provided by this embodiment;

[0048] FIG2 is a schematic diagram of a flow chart of a resource application method provided in this embodiment;

[0049] FIG3 is a schematic diagram of a flow chart of a method for allocating permissions provided in this embodiment;

[0050] FIG4 is a structural block diagram of a resource application device provided in this embodiment;

[0051] FIG5 is an internal structure diagram of a first computer device provided in this embodiment;

[0052] FIG6 is a diagram showing the internal structure of a second type of computer device provided in this embodiment. DETAILED DESCRIPTION

[0053] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0054] The resource application method provided in the embodiment of the present application can be applied in the application environment shown in FIG. 1. The terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. The computer device obtains the resource application reminder submitted by the business management role; wherein the resource application reminder is generated by the business management role in the resource application interface for the resource application operation of the resource to be applied; in response to the resource application reminder, the security audit role corresponding to the business management role displays the resource audit interface; in response to the security audit role on the resource application reminder corresponding to the resource application request in the resource audit interface, the resource audit result is generated; in the resource application interface corresponding to the business management role, the resource audit result is output. The computer device can be either a terminal or a server. The terminal 102 can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices. The Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The server 104 may be implemented as an independent server or a server cluster consisting of multiple servers.

[0055] In an exemplary embodiment, as shown in FIG2 , a resource application method is provided, which is described by taking the method applied to the computer device in FIG1 as an example, and includes the following steps 201 to 204. Among them:

[0056] Step 201: Obtain a resource application reminder submitted by a business management role.

[0057] The business management role may be a role responsible for business logic, and the business management role may be used as an interface management role, and may also be used as a resource management role to apply for resources. The resource application reminder is generated by the business management role in the resource application interface for the resource application operation of the resource to be applied.

[0058] Specifically, the computer device of the business management role obtains the resource application operation of the business management role on the resource to be applied for in the resource application interface, and generates a resource application reminder; sends the resource application reminder to the computer device of the security audit role; the computer device of the security audit role obtains the resource application reminder submitted by the business management role.

[0059] Step 202, in response to the resource application reminder, displaying a resource audit interface in the security audit role corresponding to the business management role.

[0060] Among them, the security audit role can be responsible for the level and job change of the confidential information management role, the approval of the business management role's behavior (mainly resource application), and the review and supervision of the operation behavior of the security monitoring role.

[0061] Specifically, the computer device of the security audit role responds to the resource application reminder and displays a resource audit interface in the security audit role corresponding to the business management role.

[0062] Step 203 , in response to the security audit role's audit operation on the resource application reminder corresponding to the resource application request in the resource audit interface, a resource audit result is generated.

[0063] Specifically, in response to the security audit role's audit operation on the resource application reminder corresponding to the resource application request in the resource audit interface, if the audit operation is a passed audit, a resource audit passed result is generated; if the audit operation is a failed audit, a failed audit result is generated.

[0064] In some embodiments, in response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, a resource audit result is generated, including: when the audit operation is a failed audit, in response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, an audit result is generated; when the audit operation is a passed audit, in response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, an audit result is generated based on the resources to be applied for and the audit passed operation result.

[0065] Specifically, when the audit operation is a failed audit, in response to the security audit role's failed audit operation on the resource application reminder in the resource audit interface corresponding to the resource application request, an failed audit result is generated; when the audit operation is a passed audit, in response to the security audit role's passed audit operation on the resource application reminder in the resource audit interface corresponding to the resource application request, and based on the resources to be applied for and the passed audit operation result, an passed audit result is generated.

[0066] Step 204: Output the resource review result in the resource application interface corresponding to the business management role.

[0067] Specifically, when the audit operation is audit failure, the resource audit result is displayed as audit failure in the resource application interface corresponding to the business management role; when the audit operation is audit passed, the resource audit result is displayed as audit passed in the resource application interface corresponding to the business management role, and the resources to be applied for are displayed.

[0068] It should be noted that, in some embodiments, the method also includes: in response to an operation log generation request triggered by a security monitoring role in a resource monitoring interface, obtaining each resource application request and the corresponding audit result; generating an operation log according to each resource application request and the corresponding audit result.

[0069] Among them, the security monitoring role can be responsible for the security monitoring of all users except oneself. That is, monitoring, tracking and analyzing the operation behaviors of the system management role, security audit role and business management role. In particular, checking the operation logs of administrators.

[0070] Specifically, in response to an operation log generation request triggered by a security monitoring role in a monitoring interface, each resource application request and the audit results of the corresponding resource application request are obtained; an operation log is generated according to each resource application request and the audit results of the corresponding resource application request.

[0071] The above-mentioned resource application method obtains the resource application reminder submitted by the business management role; wherein the resource application reminder is generated by the business management role in the resource application interface for the resource to be applied for the resource; in response to the resource application reminder, the security audit role corresponding to the business management role displays the resource audit interface; in response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, a resource audit result is generated; in the resource application interface corresponding to the business management role, the resource audit result is output. In this embodiment, the business management role plays a role in limiting the authority to apply for resources, and the security audit role plays a role in approving resource applications. The authority allocation of each role is clear, which ensures the rationality of the resource application process and solves the problem of differentiated processing of operations of different roles.

[0072] In an exemplary embodiment, as shown in FIG3 , a method for allocating permissions is provided, which is described by taking the method applied to the computer device in FIG1 as an example, and includes the following steps 301 to 303. Among them:

[0073] Step 301, in response to a touch operation on any candidate interface control in the integrated management interface, display a role selection interface.

[0074] Specifically, a new interface permission management menu is added to the comprehensive management interface. In this menu, interface permissions can be added, deleted, or modified. Each interface permission is a separate function. When editing interface permissions, the network link (uniform resource location, URL) is required because the URL is used as the path for page jumps. For the touch operation of the candidate interface controls in any interface permission management menu, the role selection interface is displayed.

[0075] Step 302, in response to a touch operation on at least one candidate user control in the role management interface, obtaining a candidate user corresponding to the candidate user control, and determining that the user role of the candidate user in the candidate interface corresponding to the candidate interface control is an authorized role.

[0076] The authorization role is used to indicate that the candidate user has the permission to view the candidate interface.

[0077] Specifically, a role management menu is added to the role management interface. This menu can set permissions for the role. In response to a touch operation on at least one candidate user control in the role management interface, the corresponding page permissions are checked according to the functional requirements of the role, that is, the role has the functions represented by the page permissions, and the candidate user corresponding to the candidate user control is obtained, and the user role of the candidate user in the candidate interface corresponding to the candidate interface control is determined to be an authorized role.

[0078] Step 303: In response to a touch operation on a management role control in the role management interface, a management role is selected from candidate users corresponding to at least one authorized role.

[0079] The management role is used to indicate that the candidate user has management authority over the candidate interface.

[0080] Specifically, in response to the touch operation of the management role control in the role management interface, a user management menu is added to the role management interface. In addition to setting relevant user information, this menu mainly has the function of binding and unbinding roles. If a user is selected to bind the management role, the user is the administrator role and has relevant page permissions.

[0081] In some embodiments, when the candidate interface is a non-resource application interface, the management role of the non-resource application interface includes at least one of a security audit role, a security monitoring role, and a security management role; when the candidate interface is a resource application interface, the management role of the resource application interface includes a business management role, a security audit role, and a security monitoring role.

[0082] Among them, the security management role can be responsible for system configuration and user management. The main modules include management center, login security, etc. It mainly manages roles, organizations and users, is responsible for the changes and adjustments of the organization to which a certain user belongs, and is responsible for various role settings related to user permissions. Login security mainly sets login methods, password strength and other settings.

[0083] For example, select the corresponding permissions according to the four management roles proposed in this article. The security management role has the function of system management, and is responsible for the management permissions such as user management and role management related to the management center, as well as the login security setting permissions. Log in to the system management account, select the security audit role, set the permission to approve the business management role to apply for resources, and the permission to view the security monitoring role operation log; then select the security monitoring role, set the permission to view the operation logs of the remaining management roles (i.e., security audit role, security monitoring role, and business management role); finally, select the business management role to set the permission to view and operate (add, delete, modify, etc.) all cloud resources, and the permission to apply for resources. Then realize the permission control mechanism of the four administrators.

[0084] In some embodiments, the method also includes: determining the user role of the accessing user in response to an access operation on the candidate interface; displaying the candidate interface when the user role is an authorization role or a management role; and outputting a reminder of no access rights when the user role is neither an authorization role nor a management role.

[0085] For example, when a user logs in, the page permissions are obtained through the bound role. When the user visits a function page, if the user has the page permissions, the function can be accessed normally. Otherwise, a 403 mark will be displayed, indicating that the user has no permission to access the page.

[0086] In response to a touch operation on any candidate interface control in the comprehensive management interface, this embodiment displays a role selection interface; in response to a touch operation on at least one candidate user control in the role management interface, the candidate user corresponding to the candidate user control is obtained, and the user role of the candidate user in the candidate interface corresponding to the candidate interface control is determined to be an authorized role; the authorized role is used to indicate that the candidate user has viewing authority over the candidate interface; in response to a touch operation on the management role control in the role management interface, a management role is selected from the candidate users corresponding to at least one authorized role; the management role is used to indicate that the candidate user has management authority over the candidate interface. This embodiment does not assign all permissions to one role to avoid power concentration. The four roles can completely separate the three security management roles from the business management roles to avoid the problem of improper authority allocation. And because the four roles are assigned the most basic permissions, corresponding changes can be made for different application scenarios and customer needs.

[0087] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0088] Based on the same inventive concept, the embodiment of the present application also provides a resource application device for implementing the resource application method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more resource application device embodiments provided below can refer to the limitations on the resource application method above, and will not be repeated here.

[0089] In an exemplary embodiment, as shown in FIG4 , a resource application device is provided, comprising: a reminder acquisition module 10, an audit display module 11, a result generation module 12 and a result output module 13, wherein:

[0090] The reminder acquisition module 10 is used to acquire the resource application reminder submitted by the business management role; wherein the resource application reminder is generated by the business management role in the resource application interface for the resource to be applied for the resource;

[0091] The audit display module 11 is used to display a resource audit interface in the security audit role corresponding to the business management role in response to the resource application reminder;

[0092] A result generating module 12, for generating a resource audit result in response to the audit operation of the security audit role on the resource application reminder corresponding to the resource application request in the resource audit interface;

[0093] The result output module 13 is used to output the resource review result in the resource application interface corresponding to the business management role.

[0094] In one embodiment, the resource application device in Figure 4 also includes a role allocation module, which is used to display a role selection interface in response to a touch operation on any candidate interface control in the comprehensive management interface; in response to a touch operation on at least one candidate user control in the role management interface, obtain the candidate user corresponding to the candidate user control, and determine that the user role of the candidate user in the candidate interface corresponding to the candidate interface control is an authorized role; the authorized role is used to indicate that the candidate user has viewing authority over the candidate interface; in response to a touch operation on the management role control in the role management interface, select a management role from the candidate user corresponding to at least one authorized role; the management role is used to indicate that the candidate user has management authority over the candidate interface.

[0095] In one embodiment, the role assignment module is also used to determine the user role of the accessing user in response to an access operation on the candidate interface; when the user role is an authorization role or a management role, the candidate interface is displayed; when the user role is neither an authorization role nor a management role, a reminder of no access rights is output.

[0096] In one embodiment, the role assignment module is also used to, when the candidate interface is a non-resource application interface, the management role of the non-resource application interface includes at least one of a security audit role, a security monitoring role and a security management role; when the candidate interface is a resource application interface, the management role of the resource application interface includes a business management role, a security audit role and a security monitoring role.

[0097] In one embodiment, the result generation module 12 is also used to generate an audit result in response to the security audit role's audit failure operation on the resource application reminder in the resource audit interface corresponding to the resource application request, when the audit operation is audit failure; in response to the security audit role's audit success operation on the resource application reminder in the resource audit interface corresponding to the resource application request, when the audit operation is audit success, and generate an audit result based on the resources to be applied for and the audit success operation result.

[0098] In one embodiment, the resource application device in Figure 4 also includes a log generation module, which is used to respond to the operation log generation request triggered by the security monitoring role in the resource monitoring interface, obtain each resource application request and the corresponding audit result; and generate an operation log based on each resource application request and the corresponding audit result.

[0099] Each module in the resource application device can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0100] In an exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG5. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, a resource application method is implemented.

[0101] In an exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG6. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner may be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a resource application method is implemented. The display unit of the computer device is used to form a visually visible picture, which may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0102] Those skilled in the art will understand that the structures shown in FIGS. 5 and 6 are merely block diagrams of partial structures related to the scheme of the present application, and do not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device may include more or fewer components than those shown in the figures, or combine certain components, or have a different arrangement of components.

[0103] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0104] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0105] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0106] It should be noted that the data involved in this application (including but not limited to data used for analysis, stored data, displayed data, etc.) are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0107] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0108] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0109] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A resource application method, characterized in that: The method comprises: Obtaining a resource application reminder submitted by a business management role; wherein the resource application reminder is generated by a resource application operation of the business management role on a resource application interface for a resource to be applied for; In response to the resource application reminder, displaying a resource audit interface at the security audit role corresponding to the business management role; In response to the security audit role's audit operation on the resource application request corresponding to the resource application reminder in the resource audit interface, generating a resource audit result; The resource review result is output in the resource application interface corresponding to the business management role.

2. The method according to claim 1, characterized in that The method further comprises: In response to a touch operation on any candidate interface control in the integrated management interface, displaying a role selection interface; In response to a touch operation on at least one candidate user control in the role management interface, a candidate user corresponding to the candidate user control is obtained, and a user role of the candidate user in the candidate interface corresponding to the candidate interface control is determined to be an authorized role; the authorized role is used to indicate that the candidate user has viewing authority for the candidate interface; In response to a touch operation on a management role control in the role management interface, a management role is selected from candidate users corresponding to at least one authorized role; the management role is used to indicate that the candidate user has management authority over the candidate interface.

3. The method according to claim 2, characterized in that The method further comprises: In response to an access operation to the candidate interface, determining a user role of the accessing user; When the user role is an authorization role or a management role, displaying the candidate interface; When the user role is neither the authorization role nor the management role, a reminder of no access rights is output.

4. The method according to claim 2, characterized in that: When the candidate interface is a non-resource application interface, the management role of the non-resource application interface includes at least one of a security audit role, a security monitoring role and a security management role; when the candidate interface is a resource application interface, the management role of the resource application interface includes a business management role, a security audit role and a security monitoring role.

5. The method according to claim 1, characterized in that The generating of a resource audit result in response to the audit operation of the security audit role on the resource application reminder corresponding to the resource application request in the resource audit interface includes: In the case where the audit operation is audit failure, in response to the security audit role's audit failure operation on the resource application reminder corresponding to the resource application request in the resource audit interface, generating an audit result; When the audit operation is passed, the security audit role responds to the resource application reminder in the resource audit interface corresponding to the resource application request passing the audit operation, and generates an audit result based on the resources to be applied for and the audit passing operation result.

6. The method according to claim 1, characterized in that The method further comprises: In response to the operation log generation request triggered by the security monitoring role in the resource monitoring interface, obtain each resource application request and the corresponding audit result; An operation log is generated based on each of the resource application requests and corresponding review results.

7. A resource application device, characterized in that: The device comprises: A reminder acquisition module, used to acquire a resource application reminder submitted by a business management role; wherein the resource application reminder is generated by a resource application operation of the business management role on a resource application interface for a resource to be applied for; An audit display module, configured to display a resource audit interface in the security audit role corresponding to the business management role in response to the resource application reminder; A result generation module, for generating a resource audit result in response to the security audit role's audit operation on the resource application reminder corresponding to the resource application request in the resource audit interface; The result output module is used to output the resource review result in the resource application interface corresponding to the business management role.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images