Authority management method and device, electronic equipment and readable storage medium

Abstract

The invention discloses an authority management method and device, electronic equipment and a readable storage medium, and the authority management method comprises the steps: obtaining a background management database, and storing employee data in the background management database; receiving a check request instruction sent by the first user and corresponding to a second user; determining a user permission range of the first user and employee data of the second user according to the viewing request instruction; determining first data corresponding to the user permission range of the first user in the employee data; and displaying the employee data of the second user under the condition that the first data contains the employee data of the second user. By means of the scheme, real-time sharing of human resource data of all departments can be completed, and sensitive information of employees is protected by setting the permission range; and the working efficiency is improved by adopting an online process management mode with the business process of each department.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a permission management method, device, electronic device and readable storage medium. Background Art

[0002] At present, enterprises and organizations use human resource systems to manage employees' basic information, work performance, office records, assessments, salaries and other related matters, analyze, plan and adjust the human resource management of enterprises, and make human resources effectively serve group goals. However, the management process in the human resource system is currently only used by human resource department managers, and there are communication barriers between employees in different departments. In addition, sensitive information between employees in the human resource system is not protected, resulting in reduced work efficiency and security of sensitive information. Therefore, it is necessary to optimize the permission configuration of the human resource system. Summary of the invention

[0003] The purpose of the embodiments of the present application is to provide a permission management method, device, electronic device and readable storage medium, which can solve the problem that there are communication barriers in cross-departmental collaboration among employees of various departments, and sensitive information between employees in the human resources system is not protected, resulting in reduced work efficiency and security of sensitive information.

[0004] In view of this, an embodiment of the first aspect of the present invention provides a rights management method.

[0005] An embodiment of the second aspect of the present invention provides a rights management device.

[0006] An embodiment of a third aspect of the present invention provides an electronic device.

[0007] An embodiment of a fourth aspect of the present invention provides a readable storage medium.

[0008] In order to achieve the above-mentioned purpose, an embodiment of the first aspect of the present invention provides a permission management method, which includes: obtaining a background management database, in which employee data is stored; receiving a viewing request instruction corresponding to a second user issued by a first user; determining the user authority scope of the first user and the employee data of the second user according to the viewing request instruction; determining the first data corresponding to the user authority scope of the first user in the employee data; and displaying the employee data of the second user when the first data contains the employee data of the second user.

[0009] According to the permission management method proposed in the present invention, the permission of employees to use the human resources system is configured and planned, and the permission management method of the human resources system is combined with software and connected with the existing applet, so that employees can apply for business and handle processes through the applet while protecting their own sensitive information. Realize the real-time sharing and updating of human resources data of various departments, adopt the online process management method with the business processes of various departments, promote information circulation and collaboration, and improve work efficiency and information security. The present invention can obtain the employee's own data and background management data through the human resources system. When the system detects that the user sends a view request instruction on the system, the system analyzes the user's view request instruction and its corresponding employee data, determines the employee type of the employee, and assigns its corresponding permissions. By analyzing whether the employee data corresponding to the view request instruction is included in its permission range, the mobile terminal interface display content is output. When the employee data corresponding to the view request instruction is included in the permission range, the object employee data is displayed; when the employee data corresponding to the view request instruction is not included in the permission range, the mobile terminal interface displays the desensitized content. That is, the independent background management system can perform corresponding read permission configuration for data permissions, making the permission configuration of the human resources system more flexible, and not only for human resources management personnel, improving the information circulation and collaboration efficiency between departments. In the human resources system, sensitive database information is encrypted and stored to ensure that sensitive employee information will not be leaked during the information flow between departments, thereby improving employee information security.

[0010] It can be understood that the present invention transplants the human resources system to the mobile terminal for work use, connects it with the existing mini-programs, and allows employees to apply for business and handle processes through the mini-programs, thereby improving the usability and simplicity of the system and promoting collaboration between departments.

[0011] In the above technical solution, obtaining the background management database specifically includes: dividing the employee data into first employee data, second employee data and third employee data according to the privacy of the employee data; encrypting the second employee data to form encrypted employee data, and encrypting the third employee data to form confidential employee data; storing the first employee data, encrypted employee data and confidential employee data in the background management database.

[0012] In this technical solution, employee data with different confidentiality levels are encrypted by analyzing the privacy of employee data, and corresponding data permissions are set. Employee sensitive information data is encrypted in the human resources system database, and the employee data is divided into first employee data, encrypted employee data, and confidential employee data and stored in the background management database. The mobile page of the human resources system uses a desensitized method to display the content in the background management database, so that the corresponding employee data is displayed under each data permission, and the sensitive information of employees is protected during the cross-departmental collaboration process. By encrypting employee data, the human resources system can not only realize mobile office and cross-departmental collaboration, but also ensure that sensitive information of employees is not leaked during the work process.

[0013] Among them, the privacy of employee data can be divided according to the employee privacy and confidentiality management system. Among them, only human resources management personnel can view and manage user privacy data, that is, confidential employee data, such as salary, benefits, rewards and punishment records, etc.

[0014] In the above technical solution, determining the user authority scope of the first user and the employee data of the second user specifically includes: determining the employee data corresponding to the first user in the background management database; determining the employee type of the first user based on the employee data of the first user, the employee types including human resources management specialists and on-the-job employees; determining the user authority scope of the first user based on the employee type of the first user; and determining the employee data corresponding to the second user in the background management database.

[0015] In this technical solution, before performing permission configuration management, the system will first analyze the employee type of the user who sends the viewing request instruction, and identify whether the user is an employed employee or a human resources management specialist through the employee data in the background management database. The system identifies the user type and displays the corresponding user interface for different user types on the mobile terminal, thereby improving the usability of the human resources system. For example, when the system identifies that the user who sends the viewing request instruction is a human resources management specialist, the mobile terminal interface can display more human resources management data, allowing human resources management personnel to access and manage data more conveniently; when the system identifies that the user who sends the viewing request instruction is an employed person, the mobile terminal interface will display more employee information-related interfaces, reducing the user's learning curve and improving the usability of the system.

[0016] It is understandable that by identifying employee types and displaying different interfaces on mobile devices, the human resources system can be made easier to use, which can not only reduce the learning curve of employees, but also enable human resources management specialists to access and manage data more conveniently. The use of the human resources system is not limited to human resources management specialists within the company, but can be used by all employees, thereby expanding the scope of use of the human resources system and promoting information flow and collaboration.

[0017] In the above technical solution, the user authority scope of the first user is determined according to the employee type of the first user, including: when the employee type of the first user is a human resources management specialist, the user authority scope is determined to be the first authority scope; when the employee type of the first user is an in-service employee, the in-service employee level corresponding to the first user is determined; and the user authority scope of the first user is determined according to the in-service employee level.

[0018] In this technical solution, the authority scope of the human resources management specialist is the highest authority scope, that is, the first authority scope. Human resources management personnel from all departments can perform human resources management through the mobile platform, and can view and manage across departments, promote inter-departmental collaboration, and complete real-time sharing and updating of human resources data of all departments.

[0019] In the above technical solution, the user authority range of the first user is determined by the level of the employed employee, specifically including: when the employed employee is at the first level, the user authority range is the fourth authority range; when the employed employee is at the second level, the user authority range is the third authority range; when the employed employee is at the third level, the user authority range is the second authority range; Among them, the first authority scope includes the second authority scope, and the first authority scope has the authority to modify the background management database; the second authority scope includes the third authority scope; and the third authority scope includes the fourth authority scope.

[0020] In this technical solution, when a user sends a viewing request instruction and the user is a human resources management specialist, the user is given permission to view and manage the data in the human resources system, and can modify or add or delete employee data in the background management data. When the employee type is an in-service employee, the permission range of the in-service employee is configured through the review rules, and corresponding user permission ranges are assigned to employees of each level. The review rules between departments are the same, that is, the permissions of in-service employees in various departments are uniformly configured. The permissions are configured through unified review rules to improve the scientificity and fairness of employee permission configuration. In-service employees of various departments can configure corresponding read permissions for menus and data permissions when communicating across departments, making the configuration of the human resources system more flexible and improving the efficiency of information flow when employees work across departments.

[0021] Among them, the review rules include but are not limited to job grade review and length of service review. The purpose is to allocate human resources system permissions to employees in various departments by formulating unified review rules. As long as the permission configuration can be achieved, the above review rules must ensure scientificity and fairness.

[0022] In the above technical solution, determining the first data corresponding to the user authority scope of the first user in the employee data includes: when the user authority scope of the first user is the first authority scope, the first data corresponding to the first user is the first employee data, encrypted employee data and confidential employee data in the background management database; when the user authority scope of the first user is the second authority scope, the first data corresponding to the first user is the first employee data and encrypted employee data in the background management database corresponding to the second authority scope; when the user authority scope of the first user is the third authority scope, the first data corresponding to the first user is the first employee data and encrypted employee data in the background management database corresponding to the third authority scope; when the user authority scope of the first user is the fourth authority scope, the first data corresponding to the first user is the first employee data in the background management database.

[0023] In this technical solution, the system analyzes the user data that can be viewed under the corresponding authority scope of the user by analyzing the authority scope of the user. When the authority scope of the user is the second authority scope, that is, the user is at the third level, such as a department manager, the basic information and encrypted employee data of subordinate project managers and employees, or subordinate employees of the same level in other departments can be viewed, and cross-departmental communication and collaboration can be promoted by understanding the information of subordinate employees and subordinate employees of other departments; when the authority scope of the user is the third authority scope, that is, the user is at the second level, such as a project manager, the basic information and encrypted employee data of subordinate employees can be viewed, and the employee information within the project can be understood to improve work efficiency and departmental collaboration; when the authority scope of the user is the fourth authority scope, that is, the user is at the first level, such as an employee, the basic information of the company's personnel can be understood, and on the basis of promoting information flow and collaboration, the information between employees of the same level can be protected to improve the security of employees' private information.

[0024] In the above technical solution, when the first data contains the employee data of the second user, the employee data of the second user is displayed, including: judging whether the first data contains the employee data of the second user: when the first data contains the employee data of the second user, displaying the employee data of the second user; otherwise, displaying the desensitized content.

[0025] In this technical solution, the human resources system outputs the review request result on the mobile terminal interface by analyzing whether the first data contains the employee data of the second user, ensuring that the user's viewing request instruction meets the user's authority range and preventing the employee's private information from being leaked. Only data that meets the user's authority range and the viewing request instruction matching conditions can display the employee data of the employee corresponding to the viewing request instruction on the mobile terminal interface. When the viewing request instruction does not match the user's authority range, the review conditions are not met, and the review request result will not be displayed on the mobile terminal interface, and the desensitized content will be displayed to protect employee information from being leaked during cross-departmental work on the mobile terminal.

[0026] An embodiment of the second aspect of the present invention provides a permission management device, which includes: an acquisition module for acquiring a background management database; a receiving module for receiving a viewing request instruction corresponding to a second user issued by a first user; a determination module for determining first data corresponding to the user permission range of the first user in employee data; and an encryption module for encrypting encrypted employee data and confidential employee data.

[0027] In this technical solution, the acquisition module is used to obtain employee data and background management data, and the human resources department and business process handling data of each department are obtained to achieve the establishment of the database of the mobile terminal of the human resources system and the real-time sharing and updating of human resources data of each department, ensuring the accuracy and real-time performance of the data of the mobile terminal of the human resources system. The encryption module is used to encrypt and store employee data to ensure that sensitive information in the human resources mobile terminal database is encrypted and protected, and the encrypted information is displayed on the mobile terminal page in a desensitized manner to improve the security of information in the database.

[0028] An embodiment of the third aspect of the present invention provides an electronic device, including a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the permission management method in the first aspect.

[0029] An embodiment of the fourth aspect of the present invention provides a readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed by a processor, the steps of the permission management method in the first aspect are implemented.

[0030] Additional aspects and advantages of the present invention will become apparent from the following description or may be learned by practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 A schematic diagram showing a flow chart of a method for managing rights according to an embodiment of the present application is shown; Figure 2 A schematic diagram showing a flow chart of a method for managing rights according to an embodiment of the present application is shown; Figure 3 A schematic diagram showing a flow chart of a method for managing rights according to an embodiment of the present application is shown; Figure 4 A schematic diagram showing a flow chart of a method for managing rights according to an embodiment of the present application is shown; Figure 5 A schematic diagram showing a flow chart of a method for managing rights according to an embodiment of the present application is shown; Figure 6 A schematic block diagram of the structure of a rights management device according to an embodiment of the present application is shown; Figure 7 A schematic structural block diagram of an electronic device according to an embodiment of the present application is shown; Figure 8 A schematic block diagram of an interface of a mobile terminal of a human resources system according to an embodiment of the present application is shown; Fig. 9 A schematic block diagram of an interface of a mobile terminal of a human resources system according to an embodiment of the present application is shown; Fig.10 A schematic block diagram of an interface of a mobile terminal of a human resources system according to an embodiment of the present application is shown; Fig.11 A schematic block diagram of the interface of a mobile terminal of a human resources system according to an embodiment of the present application is shown.

[0032] in, Figure 6 and Figure 7 The corresponding relationship between the reference numerals and the component names is as follows: 900: authority management device; 902: acquisition module; 904: receiving module; 906: determination module; 908: encryption module; 1000: electronic device; 1002: processor; 1004: memory. DETAILED DESCRIPTION

[0033] In order to more clearly understand the above-mentioned purposes, features and advantages of the embodiments of the present invention, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings and specific implementation methods. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0034] In the following description, many specific details are set forth to facilitate a full understanding of the present application. However, the embodiments of the present invention may also be implemented in other ways different from those described herein. Therefore, the scope of protection of the present application is not limited to the specific embodiments disclosed below.

[0035] The following is combined with Figures 1 to 11, the permission management method, device, electronic device and readable storage medium provided in the embodiments of the present application are described in detail through specific embodiments and their application scenarios.

[0036] This embodiment provides a rights management method, the rights management method is as follows Figure 1 As shown, including: Step S102: Acquire the background management database; Step S104: receiving a viewing request instruction corresponding to the second user sent by the first user; Step S106: determining the user authority range of the first user and the employee data of the second user according to the viewing request instruction; Step S108: determining first data corresponding to the user authority range of the first user in the employee data; Step S110: displaying the employee data of the second user when the first data includes the employee data of the second user.

[0037] According to the permission management method proposed in this embodiment, the permission of employees to use the human resources system is configured and planned, and the permission management method of the human resources system is combined with software and connected with the existing applet, so that employees can apply for business and handle processes through the applet while protecting their own sensitive information. Realize the real-time sharing and updating of human resources data of various departments, adopt online process management mode with the business processes of various departments, promote information circulation and collaboration, and improve work efficiency and information security. The present invention can obtain the employee's own data and background management data through the human resources system. When the system detects that the user sends a view request instruction on the system, the system analyzes the user's view request instruction and its corresponding employee data, determines the employee type of the employee, and assigns its corresponding permissions. By analyzing whether the employee data corresponding to the view request instruction is included in the scope of its authority, the mobile terminal interface display content is output. When the employee data corresponding to the view request instruction is included in the scope of authority, the object employee data is displayed; when the employee data corresponding to the view request instruction is not included in the scope of authority, the mobile terminal interface displays the desensitized content. That is, the independent background management system can perform corresponding read permission configuration for data permissions, making the permission configuration of the human resources system more flexible, and not only for human resources management personnel, improving the information circulation and collaboration efficiency between departments. In the human resources system, sensitive database information is encrypted and stored to ensure that sensitive employee information will not be leaked during the information flow between departments, thereby improving employee information security.

[0038] It can be understood that the present invention transplants the human resources system to the mobile terminal for work use, connects it with the existing mini-programs, and allows employees to apply for business and handle processes through the mini-programs, thereby improving the usability and simplicity of the system and promoting collaboration between departments.

[0039] The mobile terminal operation interface in the present invention is as follows Figure 8 and Fig. 9 As shown, human resource management personnel can process messages through the mobile terminal. The human resource mobile terminal interface can display the message center, which can display the human resource management specialist's personal to-do items, my requests, completed processes, copies to me, and the number of people waiting to join. Among them, common functions can display management functions according to the use habits of human resource management specialists. Common functions include but are not limited to: personnel files, resignation applications, job grade evaluation, attendance check-in and leave applications; human resource management specialists can also view the monthly statistics of the number of formal interns who joined the company and the number of formal interns who left the company on the mobile terminal interface, and can directly view the company's total number of employees and the ratio of men to women, as well as the number of formal staff and interns. The human resource mobile terminal interface will also display the calendar and process arrangements, and transmit the relevant matters submitted by the company's personnel to the human resource department through personnel announcements. Through the design of this mobile terminal interface, the ease of use of the human resource system and the efficiency of human resource management are improved.

[0040] There is no limitation on the mobile device, which can be an IOS device, an Android device, or other mobile devices, as long as it can run the human resources system.

[0041] In one embodiment, a backend management database is obtained, such as Figure 2 As shown, specifically including: Step S1022: dividing the employee data into first employee data, second employee data and third employee data according to the privacy of the employee data; Step S1024: encrypting the second employee data to form encrypted employee data, and encrypting the third employee data to form confidential employee data; Step S1026: storing the first employee data, encrypted employee data and confidential employee data in the background management database.

[0042] In this embodiment, employee data of different confidentiality levels are encrypted by analyzing the privacy of employee data, and corresponding data permissions are set. Employee sensitive information data is encrypted in the human resources system database, and the employee data is divided into first employee data, encrypted employee data, and confidential employee data and stored in the background management database. The mobile terminal page of the human resources system uses a desensitized method to display the content in the background management database, so that the corresponding employee data is displayed under each data permission, and the sensitive information of employees is protected during the cross-departmental collaboration process. By encrypting employee data, the human resources system can not only realize mobile office and cross-departmental collaboration, but also ensure that sensitive information of employees is not leaked during the work process.

[0043] Among them, the privacy of employee data can be divided according to the company's employee privacy and confidentiality management system. For example, the basic employee data of an employee may include name, gender, age, contact number, etc.; the encrypted employee data of an employee may include work performance, personal living habits, hobbies, health status, marital status, etc.; the confidential employee data of an employee may include work performance, salary, reward and punishment records, children's information, etc. The present invention does not limit the above-mentioned company employee privacy and confidentiality management system, and it can be adjusted according to the company's management, as long as it ensures a sound employee privacy protection system.

[0044] Understandably, only human resources management personnel can view and manage user privacy data, that is, confidential employee data, such as salary, benefits, rewards and punishment records, etc.

[0045] In addition, the method of encrypting and storing employee data in the embodiment is not limited to the Electronic Code Book (ECB), Computer Based Education (CBE) and Encryption of sub key database. As long as the employee data in the human resources system can be encrypted and stored, the method of encryption storage is not limited.

[0046] In one embodiment, the user authority range of the first user and the employee data of the second user are determined, such as Figure 3 As shown, specifically including: Step S1062: Determine the employee data corresponding to the first user in the background management database; Step S1064: determining the employee type of the first user according to the employee data of the first user, where the employee types include human resources management specialists and on-the-job employees; Step S1066: Determine the user authority scope of the first user according to the employee type of the first user; Step S1068: Determine the employee data corresponding to the second user in the background management database.

[0047] In this embodiment, before performing permission configuration management, the system will first analyze the employee type of the user who sends the viewing request instruction, and identify whether the user is an in-service employee or a human resources management specialist through the employee data in the background management database. The system identifies the user type and displays the corresponding user interface for different user types on the mobile terminal, thereby improving the usability of the human resources system. For example, when the system identifies that the user who sends the viewing request instruction is a human resources management specialist, the mobile terminal interface can display more human resources management data, allowing human resources management personnel to access and manage data more conveniently; when the system identifies that the user who sends the viewing request instruction is an in-service employee, the mobile terminal interface will display more employee information-related interfaces, reducing the user's learning curve and improving the usability of the system.

[0048] It is understandable that by identifying employee types and displaying different interfaces on mobile devices, the human resources system can be made easier to use, which can not only reduce the learning curve of employees, but also enable human resources management specialists to access and manage data more conveniently. The use of the human resources system is not limited to human resources management specialists within the company, but can be used by all employees, thereby expanding the scope of use of the human resources system and promoting information flow and collaboration.

[0049] For example, Fig. 9 As shown, human resource management personnel can enter the mobile interface of the human resource system to manage and view the change application approval and rank review application process. They can also view pending and completed tasks on this interface to improve the work efficiency of human resource management personnel.

[0050] For example, Fig.10 As shown, after the human resources management personnel processes the employee transfer approval, they can enter the special page for transfer approval on the mobile interface of the human resources system to view the application information and flow opinions corresponding to the employee transfer approval, and display the employee's transfer information and employee data before the change on the special page for transfer approval.

[0051] For example, Fig.11 As shown, when the human resources management personnel completes the approval process for employee changes, the process end status bar will show the current status as completed, and the overall approval process and all change notifications for the employee changes can be viewed on the mobile interface of the human resources system to ensure that the corresponding employee data in the background management database is updated in real time.

[0052] In one embodiment, the user authority scope of the first user is determined according to the employee type of the first user, such as Figure 4 As shown, including: Step S10662: When the employee type of the first user is a human resources management specialist, determining the user authority range to be a first authority range; Step S10664: when the employee type of the first user is an incumbent employee, determining the incumbent employee level corresponding to the first user; Step S10666: Determine the user authority scope of the first user according to the employee level.

[0053] In this embodiment, the human resources management specialist has the highest authority scope, that is, the first authority scope. When a user sends a viewing request instruction and the user is a human resources management specialist, the user is given authority to view and manage the data in the human resources system. Among them, human resources management personnel of each department can perform human resources management through the mobile platform, and can view and manage across departments, promote inter-departmental collaboration, and complete the real-time sharing and updating of human resources data of each department.

[0054] In one embodiment, determining the user authority scope of the first user by the on-the-job employee level specifically includes: When the employee is at the first level, the user authority range is the fourth authority range; When the employee is at the second level, the user authority range is the third authority range; When the employee is at the third level, the user authority range is the second authority range; Among them, the first authority scope includes the second authority scope, and the first authority scope has the authority to modify the background management database; the second authority scope includes the third authority scope; and the third authority scope includes the fourth authority scope.

[0055] In this embodiment, when a user sends a viewing request instruction, and the user is a human resources management specialist, the user is given permission to view and manage the data in the human resources system, and can modify or add or delete employee data in the background management data. When the employee type is an in-service employee, the permission range of the in-service employee is configured through the review rules, and corresponding user permission ranges are assigned to employees of each level. The review rules between departments are the same, that is, the in-service employees of various departments are uniformly configured with permissions. The permissions are configured through unified review rules, which improves the scientificity and fairness of employee permission configuration. In-service employees of various departments can perform corresponding read permission configuration for menus and data permissions when communicating across departments, making the configuration of the human resources system more flexible and improving the efficiency of information flow when employees work across departments.

[0056] Among them, the review rules include but are not limited to job grade review and length of service review. The purpose is to allocate human resources system permissions to employees in various departments by formulating unified review rules. As long as the permission configuration can be achieved, the above review rules must ensure scientificity and fairness.

[0057] In one embodiment, determining first data corresponding to a user authority range of a first user in employee data includes: In the case where the user authority range of the first user is the first authority range, the first data corresponding to the first user is the first employee data, encrypted employee data and confidential employee data in the background management database; In the case where the user authority range of the first user is the second authority range, the first data corresponding to the first user is the first employee data and the encrypted employee data in the background management database corresponding to the second authority range; In the case where the user authority range of the first user is the third authority range, the first data corresponding to the first user is the first employee data and the encrypted employee data in the background management database corresponding to the third authority range; When the user authority range of the first user is the fourth authority range, the first data corresponding to the first user is the first employee data in the background management database.

[0058] In this embodiment, the system analyzes the user data that can be viewed under the corresponding authority scope of the user by analyzing the authority scope of the user. When the authority scope of the user is the second authority scope, that is, the user is at the third level, such as a department manager, the basic information and encrypted employee data of subordinate project managers and employees, or subordinate employees of the same level in other departments can be viewed, and cross-departmental communication and collaboration can be promoted by understanding the information of subordinate employees and subordinate employees of other departments; when the authority scope of the user is the third authority scope, that is, the user is at the second level, such as a project manager, the basic information and encrypted employee data of subordinate employees can be viewed, and the employee information within the project can be understood to improve work efficiency and departmental collaboration; when the authority scope of the user is the fourth authority scope, that is, the user is at the first level, such as an employee, the basic information of the company's personnel can be understood, and on the basis of promoting information flow and collaboration, the information between employees of the same level can be protected to improve the security of employees' private information.

[0059] Optionally, the fourth authority scope may also be engineers of different levels, and the second and third authority scopes may also be other managers or management of the same level, as long as the authority scopes are ensured to be employees of the same rating level of the company and there are obvious level differences between different authority scopes.

[0060] In one embodiment, when the first data includes employee data of the second user, the employee data of the second user is displayed, such as Figure 5 As shown, including: Step S1102: Determine whether the first data contains the employee data of the second user: Step S1104: when the first data includes the employee data of the second user, displaying the employee data of the second user; Step S1106: Otherwise, display the desensitized content.

[0061] In this embodiment, the human resources system outputs the review request result on the mobile terminal interface by analyzing whether the first data contains the employee data of the second user, ensuring that the user's viewing request instruction meets the user's authority range and preventing the employee's private information from being leaked. Only data that meets the user's authority range and the viewing request instruction matching conditions can display the employee data of the employee corresponding to the viewing request instruction on the mobile terminal interface. When the viewing request instruction does not match the user's authority range, the review conditions are not met, and the review request result will not be displayed on the mobile terminal interface, and the desensitized content will be displayed to protect employee information from being leaked during cross-departmental work on the mobile terminal.

[0062] In the process of displaying the mobile interface of the human resources system, the sensitive information of employees is displayed in a desensitized manner, that is, in the process of displaying the mobile page, the sensitive information is deformed by the desensitization rules to achieve the protection of sensitive privacy data. The invention does not limit the desensitization tools and rules, and can be directly referenced on data sources such as Excel, TXT, Oracle, MS SQLServer, MySQL, Hadoop, etc., and it only needs to ensure that the sensitive information of employees can be displayed in a desensitized manner.

[0063] like Figure 6 As shown, in an embodiment of the present application, a rights management device 900 is provided, and the rights management device 900 includes: The acquisition module 902 is used to acquire the background management database; The receiving module 904 is used to receive a viewing request instruction corresponding to the second user issued by the first user; A determination module 906, configured to determine first data corresponding to a user authority range of a first user in the employee data; An encryption module 908, for encrypting encrypted employee data and confidential employee data; Optionally, the acquisition module 902 is further used to determine review rules, and the authority configuration levels can be divided according to the review rules; Optionally, the acquisition module 902 is further used to acquire human resources data of each department and business process handling data of each department; Optionally, the determination module 906 is further configured to classify the employee data into basic employee data, encrypted employee data and human resource management data according to the privacy of the employee data.

[0064] Optionally, the encryption module 908 encrypts and stores employee data in a database in a manner including but not limited to an electronic code book (ECB), a cipher block chain (CBE) and encryption of sub key database. As long as employee data in the human resources system can be encrypted and stored, the encryption storage method is not limited.

[0065] In this embodiment, the acquisition module 902 acquires employee data and background management data, and acquires the human resources department and business process handling data of each department, so as to realize the establishment of the database of the mobile terminal of the human resources system and the real-time sharing and updating of the human resources data of each department, thereby ensuring the accuracy and real-time performance of the data of the mobile terminal of the human resources system. The encryption module 908 encrypts and stores the employee data, ensures that the sensitive information of the human resources mobile terminal database is encrypted and protected, and displays the encrypted information on the mobile terminal page in a desensitized manner, thereby improving the security of the information in the database.

[0066] An electronic device 1000 is provided in an embodiment of the present application. Figure 7 As shown, the electronic device includes a processor 1002, a memory 1004, and a program or instruction stored in the memory 1004 and executable on the processor 1002. When the program or instruction is executed by the processor, each process of an embodiment of the method for managing rights of a human resources system is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be described here.

[0067] The processor is the processor in the electronic device in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0068] The embodiment of the present application further provides a readable storage medium, on which programs or instructions are stored. When the programs or instructions are executed by the processor, the various processes of the embodiment of the permission management method of the human resources system are implemented, and the same technical effect can be achieved. To avoid repetition, they will not be repeated here.

[0069] According to the permission management method, device, electronic device and readable storage medium provided by the present invention, the permission configuration of the human resources system can be made more flexible, and it is not only for human resources management personnel; through the use of the human resources system mobile terminal, the information flow and collaboration efficiency between departments can be improved. In the human resources system, sensitive information in the database is encrypted and stored to ensure that sensitive information of employees will not be leaked during the information flow between departments, thereby improving the security of employee information.

[0070] In the present invention, the terms "first", "second", and "third" are used for descriptive purposes only and should not be understood as indicating or implying relative importance; the term "plurality" refers to two or more, unless otherwise clearly defined. The terms "installed", "connected", "connected", "fixed", etc. should be understood in a broad sense. For example, "connected" can be a fixed connection, a detachable connection, or an integral connection; "connected" can be a direct connection or an indirect connection through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0071] In the description of the present invention, it is necessary to understand that the directions or positional relationships indicated by terms such as “upper”, “lower”, “left”, “right”, “front” and “back” are based on the directions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or unit referred to must have a specific direction, be constructed and operated in a specific orientation, and therefore, cannot be understood as a limitation on the present invention.

[0072] In the description of this specification, the description of the terms "one embodiment", "some embodiments", "specific embodiments", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0073] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A rights management method, characterized in that: include: Obtaining a background management database, wherein employee data is stored in the background management database; Receiving a viewing request instruction corresponding to a second user issued by a first user; Determining the user authority scope of the first user and the employee data of the second user according to the viewing request instruction; Determine first data corresponding to the user authority range of the first user in the employee data; In a case where the first data includes employee data of the second user, the employee data of the second user is displayed.

2. The rights management method according to claim 1, characterized in that: The obtaining of the backend management database specifically includes: According to the privacy of employee data, employee data is divided into first employee data, second employee data and third employee data; Encrypting the second employee data to form encrypted employee data, and encrypting the third employee data to form confidential employee data; The first employee data, the encrypted employee data and the confidential employee data are stored in the background management database.

3. The rights management method according to claim 1, characterized in that: The determining the user authority scope of the first user and the employee data of the second user specifically includes: Determine employee data corresponding to the first user in the background management database; Determining the employee type of the first user according to the employee data of the first user, where the employee type includes a human resources management specialist and an in-service employee; determining a user authority scope of the first user according to the employee type of the first user; Employee data corresponding to the second user in the background management database is determined.

4. The rights management method according to claim 3, characterized in that: The determining the user authority scope of the first user according to the employee type of the first user includes: In the case where the employee type of the first user is a human resources management specialist, determining the user authority scope to be a first authority scope; In a case where the employee type of the first user is an incumbent employee, determining an incumbent employee level corresponding to the first user; The user authority scope of the first user is determined according to the on-the-job employee level.

5. The rights management method according to claim 4, characterized in that: The determining the user authority scope of the first user according to the level of the on-the-job employee specifically includes: When the employee is at the first level, the user authority range is the fourth authority range; When the employee is at the second level, the user authority range is the third authority range; When the employee is at the third level, the user authority range is the second authority range; Among them, the first authority scope includes the second authority scope, and the first authority scope has the authority to modify the background management database; the second authority scope includes the third authority scope; and the third authority scope includes the fourth authority scope.

6. The rights management method according to claim 5, characterized in that: Determining first data corresponding to the user authority range of the first user in the employee data includes: In the case where the user authority range of the first user is the first authority range, the first data corresponding to the first user is the first employee data, encrypted employee data and confidential employee data in the background management database; In the case where the user authority range of the first user is the second authority range, the first data corresponding to the first user is the first employee data and the encrypted employee data in the background management database corresponding to the second authority range; In the case where the user authority range of the first user is the third authority range, the first data corresponding to the first user is the first employee data and encrypted employee data in the background management database corresponding to the third authority range; When the user authority range of the first user is the fourth authority range, the first data corresponding to the first user is the first employee data in the background management database.

7. The rights management method according to claim 1, characterized in that: In a case where the first data includes employee data of the second user, displaying the employee data of the second user includes: Determine whether the first data includes the employee data of the second user: When the first data includes the employee data of the second user, displaying the employee data of the second user; Otherwise, the anonymized content is displayed.

8. A rights management device, characterized in that: include: Acquisition module, used to obtain the background management database; A receiving module, configured to receive a viewing request instruction corresponding to a second user issued by a first user; A determination module, used to determine first data corresponding to a user authority range of a first user in the employee data; An encryption module is used to encrypt encrypted employee data and confidential employee data.

9. An electronic device, characterized in that: The method comprises a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the rights management method as claimed in any one of claims 1 to 7.

10. A readable storage medium, characterized in that: The readable storage medium stores a program or an instruction, and when the processor executes the program or the instruction, the steps of the rights management method according to any one of claims 1 to 7 are implemented.

Images