Permission proxy method and device, equipment, storage medium and program product

Abstract

The invention relates to a permission proxy method and device, equipment, a storage medium and a program product. The method comprises the steps of obtaining a page operation request of a target agented page; if the empowerment information of the agented type indicated by the page operation request is not queried, determining a target agented page responsible for agenting the operation authority of the target agented page from at least one candidate agented page; the target proxy page is responsible for proxy of the operation authority of at least one candidate proxy page; the at least one candidate agented page has a page hierarchical relationship; the candidate agented page at the back level inherits the operation authority of the candidate agented page at the front level; the target agented page is any one of the at least one candidate agented page; and if the page configuration information of the target agent page is successfully analyzed, performing permission verification on the page operation request based on the empowerment information obtained by analysis. By adopting the method, the page permission operation efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a permission proxy method, device, equipment, storage medium and program product. Background Art

[0002] With the development of computer technology, various business systems are frequently used in daily work and life. A business system contains many system pages, and a system page contains operations for multiple business objects, such as page data access permissions of the system page and operation permissions of buttons in the system page. In order to facilitate system management and the security of system data and the privacy of user data, it is often necessary to set different permissions for different system pages of the business system. After setting permissions, only users with corresponding permissions can access or operate the system pages accordingly.

[0003] The traditional way of setting system page permissions is usually to grant detailed individual authorization to all system pages. However, this authorization method is cumbersome to operate, and when permissions are reclaimed, they also need to be reclaimed one system page at a time, resulting in low efficiency in page permission operations. Summary of the invention

[0004] Based on this, it is necessary to provide a permission proxy method, device, equipment, storage medium and program product that can improve the efficiency of page permission operations in response to the above technical problems.

[0005] In a first aspect, the present application provides a rights proxy method, the method comprising:

[0006] Obtain the page operation request of the target proxied page in the business system;

[0007] If the authorization information of the proxy type indicated by the page operation request is not found, a target proxy page responsible for proxying the operation authority of the target proxy page is determined from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; the at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the earlier level; the target proxy page is any one of the at least one candidate proxy page;

[0008] Parsing the page configuration information of the target proxy page;

[0009] If the parsing is successful, the page operation request is subject to permission verification based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing.

[0010] In a second aspect, the present application provides a rights proxy device, the device comprising:

[0011] An acquisition module is used to acquire a page operation request of a target proxied page in a business system;

[0012] a determination module, configured to determine, if the authorization information of the proxy type indicated by the page operation request is not found, a target proxy page responsible for proxying the operation authority of the target proxy page from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; the at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at a later level inherits the operation authority of the candidate proxy page at a previous level; the target proxy page is any one of the at least one candidate proxy page;

[0013] A parsing module, used for parsing the page configuration information of the target proxy page;

[0014] The authorization verification module is used to verify the authorization of the page operation request based on the authorization information of the proxy type indicated by the page operation request obtained through the analysis if the analysis is successful.

[0015] In a third aspect, the present application provides a computer device including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the steps in the method embodiments of the present application are implemented.

[0016] In a fourth aspect, the present application provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps in the method embodiments of the present application.

[0017] In a fifth aspect, the present application provides a computer program product, including a computer program, which implements the steps in the method embodiments of the present application when the computer program is executed by a processor.

[0018] The above-mentioned permission proxy method, device, equipment, storage medium and program product obtain the page operation request of the target proxy page in the business system; if the authorization information of the proxy type indicated by the page operation request is not found, then determine the target proxy page responsible for the proxy operation permission of the target proxy page from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation permission of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation permission of the candidate proxy page at the previous level; the target proxy page is any one of at least one candidate proxy page; the page configuration information of the target proxy page is parsed; if the parsing is successful, the page operation request is verified based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing. Compared with the traditional system page permission setting method, the present application can quickly verify the permission of the page operation request by setting a proxy page in the business system, parsing the page configuration information for the operation permission configuration of multiple proxy pages on the proxy page, and based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing, thereby improving the verification efficiency. At the same time, since permissions can be transferred between system pages with a page hierarchy, and when permissions are reclaimed, only the permissions of the upper-level pages need to be reclaimed, and the permissions of the lower-level pages can be automatically reclaimed. There is no need to reclaim permissions from each system page, thereby improving the operational efficiency of page permissions. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 An application environment diagram of a permission proxy method in an embodiment;

[0020] Figure 2 A schematic diagram of a flow chart of a method for authorization proxy in one embodiment;

[0021] Figure 3 A schematic diagram of configuring the operation permissions of multiple proxy pages in a proxy page in one embodiment;

[0022] Figure 4 A schematic diagram of configuring the operation permissions of a proxy page in one embodiment;

[0023] Figure 5 A schematic diagram of configuring the operation permissions of a proxy page in another embodiment;

[0024] Figure 6 A schematic diagram of a field source parameter in one embodiment;

[0025] Figure 7 A schematic diagram of mapping field processing mode parameters in one embodiment;

[0026] Figure 8 A schematic diagram of parameter mapping configuration in one embodiment;

[0027] Fig. 9 Another is a flowchart of a method for proxying permissions in an embodiment;

[0028] Fig.10 is a structural block diagram of a rights proxy device in one embodiment;

[0029] FIG. 11 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0030] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0031] The permission proxy method provided in this application can be applied to Figure 1 In the application environment shown. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can be set up separately and can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other servers. Among them, the terminal 102 can be but not limited to various desktop computers, laptops, smart phones and tablets. The server 104 can be an independent physical server, or it can be a server cluster or distributed system composed of multiple physical servers, or it can be a cloud server that provides cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, cloud security, host security and other network security services, CDN, and big data and artificial intelligence platforms and other basic cloud computing services. The terminal 102 and the server 104 can be directly or indirectly connected via wired or wireless communication, and this application is not limited here.

[0032] The terminal 102 can obtain a page operation request of a target proxy page in the business system. If the authorization information of the proxy type indicated by the page operation request is not found, the terminal 102 can determine the target proxy page responsible for proxying the operation authority of the target proxy page from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the previous level; the target proxy page is any one of the at least one candidate proxy page. The terminal 102 can obtain the page configuration information of the target proxy page from the server 104 and parse the page configuration information of the target proxy page. If the parsing is successful, the terminal 102 can perform permission verification on the page operation request based on the authorization information of the proxy type indicated by the parsed page operation request.

[0033] It is understood that this embodiment does not limit this. It is understood that Figure 1 The application scenarios are only for illustration and are not limited to this.

[0034] In one embodiment, Figure 2 As shown, a permission proxy method is provided. In this embodiment, the method is applied to Figure 1 The terminal 102 in the example is used as an example to illustrate, and the following steps are included:

[0035] Step 202: Obtain a page operation request of a target proxied page in the business system.

[0036] The proxied page is a system page that is proxied for page operation authority verification in the business system.

[0037] Specifically, the business system includes multiple system pages, and the user can trigger any system page to request a corresponding operation on the system page. The terminal can generate a page operation request in response to the user's trigger operation. It can be understood that the system page triggered by the user is the target proxied page.

[0038] Step 204, if the authorization information of the proxy type indicated by the page operation request is not found, then determine the target proxy page responsible for proxying the operation authority of the target proxy page from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the subsequent level inherits the operation authority of the candidate proxy page at the previous level; the target proxy page is any one of the at least one candidate proxy page.

[0039] Among them, the proxy type may include the target proxy page and the operation object (such as a button, etc.) in the target proxy page. It can be understood that the page operation request of the target proxy page can be a request to view the page data of the target proxy page, or a request to perform a corresponding operation on the operation object in the target proxy page (for example, to operate a button in the target proxy page). The proxy page is a system page for proxy page operation authority verification in the business system. The page hierarchical relationship can be understood as a nested relationship between pages, for example, page A can enter page B, and page B can enter page C. Page A can enter page B, which can be understood as page A is a page at the previous level, page B is a page at the next level, and page A can also be understood as a parent page and page B is a child page. Page B can enter page C, which can be understood as page B is a page at the previous level, page C is a page at the next level, and page B is a parent page and page C is a child page. Page B can enter page C, which can be understood as page B is a page at the previous level, page C is a page at the next level, and page B is a parent page and page C is a child page.

[0040] Specifically, after obtaining the page operation request of the target proxy page, the terminal can first query the authorization information of the proxy type indicated by the page operation request from the storage space. If the authorization information of the proxy type indicated by the page operation request is not queried from the storage space, the terminal can determine the target proxy page responsible for the operation authority of the proxy target proxy page from at least one candidate proxy page of the business system.

[0041] Step 206: parse the page configuration information of the target proxy page.

[0042] The page configuration information is information generated when configuring the operation authority of at least one candidate proxy page in the target proxy page.

[0043] In one embodiment, after determining the target proxy page, the terminal may pull the page configuration information of the target proxy page from the server, and parse the pulled page configuration information of the target proxy page.

[0044] Step 208: If the parsing is successful, the page operation request is authenticated based on the authorization information of the proxy type indicated by the parsed page operation request.

[0045] Specifically, if the page configuration information of the target proxy page is parsed successfully, the terminal can perform permission verification on the page operation request based on the authorization information of the proxy type indicated by the parsed page operation request, and store the authorization information of the proxy type indicated by the parsed page operation request in the storage space, so that the next page operation request can directly use the authorization verification without the need to re-execute the target proxy page responsible for the operation authority of the proxy target proxy page and parse the page configuration information of the target proxy page, thereby improving the response speed of the page operation request.

[0046] In the above-mentioned authority proxy method, a page operation request of a target proxy page in a business system is obtained; if the authorization information of the proxy type indicated by the page operation request is not found, then a target proxy page responsible for the proxy operation authority of the target proxy page is determined from at least one candidate proxy page in the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the previous level; the target proxy page is any one of at least one candidate proxy page; the page configuration information of the target proxy page is parsed; if the parsing is successful, the page operation request is authorized to be verified based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing. Compared with the traditional system page authority setting method, the present application can quickly verify the authority of the page operation request by setting a proxy page in the business system, parsing the page configuration information for the operation authority configuration of multiple proxy pages on the proxy page, and based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing, thereby improving the authority verification efficiency. At the same time, since permissions can be transferred between system pages with a page hierarchy, and when permissions are reclaimed, only the permissions of the upper-level pages need to be reclaimed, and the permissions of the lower-level pages can be automatically reclaimed. There is no need to reclaim permissions from each system page, thereby improving the operational efficiency of page permissions.

[0047] In one embodiment, the method further includes: if the parsing fails, performing permission verification on the page operation request based on the native permission verification logic set for the target proxied page in the business system.

[0048] Among them, the native permission verification logic is the permission verification logic originally set for the target proxy page in the business system. It can be understood that the permission proxy method of this application will not destroy the native permission verification logic and process in the business system. This application retains the native permission verification logic and process in the business system, and adds additional permission proxy logic and process for page operation requests, which can improve the operational efficiency of page permissions.

[0049] Specifically, the terminal can obtain a page operation request of a target proxy page in the business system. If the authorization information of the proxy type indicated by the page operation request is not queried from the storage space, the terminal can determine the target proxy page responsible for the proxy operation authority of the target proxy page from at least one candidate proxy page in the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the previous level; the target proxy page is any one of the at least one candidate proxy page. The terminal can parse the page configuration information of the target proxy page. If the parsing is successful, the terminal can perform permission verification on the page operation request based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing, and store the authorization information in the storage space. If the parsing of the page configuration information of the target proxy page fails, the terminal can perform permission verification on the page operation request based on the native permission verification logic set for the target proxy page in the business system.

[0050] In the above embodiment, in the case that the parsing of the page configuration information of the target proxy page fails, the page operation request is verified by the native permission verification logic set for the target proxied page in the business system, and only the request with the target proxied page operation permission will be executed, so as to ensure the security of the target proxied page even if the parsing of the page configuration information fails.

[0051] In one embodiment, the page configuration information of the target proxy page is parsed, including: parsing the page configuration information of the target proxy page to obtain a page hierarchy relationship between at least one candidate proxied page that the target proxy page is responsible for proxying; and obtaining authorization information of the proxy type indicated by the page operation request of the target proxied page based on the page hierarchy relationship between at least one candidate proxied page.

[0052] In the above embodiment, since permissions can be transferred between at least one candidate proxied page having a page hierarchy relationship, it is possible to start from the target proxied page and query the parent page of the target proxied page upwards level by level based on the page hierarchy relationship between at least one candidate proxied page, so as to obtain the authorization information of the proxy type indicated by the page operation request of the target proxied page from the operation permission configuration information of the parent page of the target proxied page, thereby improving the accuracy of the authorization information of the proxy type indicated by the page operation request.

[0053] In one embodiment, the method further includes: obtaining at least one proxy page to be configured for the business system; for each proxy page to be configured, configuring a page hierarchy relationship between at least one candidate proxy page in the proxy page to be configured; for each candidate proxy page of the subsequent level in at least one candidate proxy page, configuring a target field source parameter and a target mapping field processing method parameter corresponding to the candidate proxy page of the subsequent level; the target field source parameter is used to indicate that the candidate proxy page of the subsequent level inherits the operation authority from the corresponding page of the previous level; the target mapping field processing method parameter is used to determine the placement position of the inherited operation authority in the candidate proxy page of the subsequent level; after the field source and mapping field processing method configuration for at least one candidate proxy page is completed, obtaining the candidate proxy page corresponding to the proxy page to be configured.

[0054] In the above embodiment, by configuring proxy information with operation permissions of at least one candidate proxied page in a page hierarchy relationship on the proxy page to be configured, permission transfer can be achieved between system pages with a page hierarchy relationship, and when permissions are recovered, only the permissions of the upper-level pages need to be recovered, and the permissions of the lower-level pages can be automatically recovered. There is no need to recover permissions from each system page, thereby improving the operating efficiency of page permissions.

[0055] In one embodiment, the step of configuring target field source parameters corresponding to candidate proxied pages at a later level includes: for each candidate proxied page at a later level among at least one candidate proxied page, selecting one from a first field source parameter, a second field source parameter and a third field source parameter that are preset as the target field source parameter corresponding to the candidate proxied page at a later level; the first field source parameter is used to indicate that the candidate proxied page at the later level obtains operation permissions from the field value of the corresponding page at the previous level; the second field source parameter is used to indicate that the candidate proxied page at the later level obtains operation permissions from the permission acquisition function of the corresponding page at the previous level; the third field source parameter is used to indicate that the candidate proxied page at the later level obtains operation permissions from the field value defined for the corresponding page at the previous level.

[0056] In the above embodiment, by configuring the field source parameters displayed for the candidate proxied pages in the proxy page to be configured, so as to indicate that the candidate proxied pages at the later level inherit the operation permissions from the corresponding pages at the previous level, the configuration process is simple and convenient, thereby improving the efficiency of the proxy configuration of the operation permissions of the candidate proxied pages.

[0057] In one embodiment, the step of configuring the target mapping field processing mode parameter corresponding to the candidate proxied page at the subsequent level includes: for each candidate proxied page at the subsequent level in at least one candidate proxied page, selecting one from a preset first candidate mapping field processing mode parameter, a second candidate mapping field processing mode parameter, a third candidate mapping field processing mode parameter, and a fourth candidate mapping field processing mode parameter as the target mapping field processing mode parameter corresponding to the candidate proxied page at the subsequent level; the first candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in the filtering area of ​​the candidate proxied page at the subsequent level; the second candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in the display area of ​​the candidate proxied page at the subsequent level; the third candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in the custom parameter area of ​​the candidate proxied page at the subsequent level; and the fourth candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in the built-in parameter area of ​​the candidate proxied page at the subsequent level.

[0058] In the above embodiment, by configuring the mapping field processing method parameters displayed for the candidate proxy page in the proxy page to be configured, the placement position of the inherited operation authority in the candidate proxy page at the subsequent level is determined. The configuration process is simple and convenient, thereby improving the efficiency of the proxy configuration of the operation authority of the candidate proxy page.

[0059] The field source parameter is used to indicate the source of the authority of the proxy page. The mapping field processing method parameter is used to indicate that the authority obtained from the proxy page is transferred to the specified proxy page.

[0060] In one embodiment, Figure 3 As shown, in the process of configuring the operation permissions of multiple proxied pages (for example, the two proxied pages of "Association Item Type Integration Configuration" and "Association Item") in the proxy page, for each proxied page, the field source parameters and mapping field processing method parameters displayed for the proxied page in the proxy page are configured to implement the proxy configuration of the operation permissions for the proxied page.

[0061] In one embodiment, Figure 4 As shown, the multiple proxied pages include three proxied pages: "context instance", "IPD tree form" and "work item dynamics". Figure 4 It is shown that the operation authority of the proxy page "context instance" is being configured in the proxy page. Figure 5 It is shown that the operation authority of the proxy "IPD Tree Form" which is the proxy page is being configured in the proxy page.

[0062] In one embodiment, Figure 6 As shown in , the field source parameters can include three parameters: parent page (i.e., the first field source parameter), page display parameter (i.e., the second field source parameter), and custom parameter (i.e., the third field source parameter). Figure 7 As shown, the mapping field processing method parameters may include four parameters: page display and filtering (i.e., the first candidate mapping field processing method parameter), page display only (i.e., the second candidate mapping field processing method parameter), custom parameters (i.e., the third candidate mapping field processing method parameter), and page built-in parameters (i.e., the fourth candidate mapping field processing method parameter).

[0063] In one embodiment, Figure 4 and Figure 5 As shown in , the parameters displayed for multiple proxied pages in the proxy page also include mapping field parameters and field value parameters. Among them, the field value parameter is a custom parameter. The mapping field parameter is a parameter mapped from the parent page to the child page (i.e., the proxied page). Figure 8 As shown, by mapping the field value parameter of field value 1 to the mapping field parameter of mapping field 1, the permission proxy configuration can be implemented, and after the configuration is completed, it is used for permission control.

[0064] In the above embodiment, by configuring the field source parameters and mapping field processing method parameters displayed for the candidate proxied page in the proxy page to be configured, the proxy configuration of the operation authority of the candidate proxied page is realized. The configuration process is simple and convenient, which can improve the efficiency of the proxy configuration of the operation authority of the candidate proxied page.

[0065] In one embodiment, the method further includes: if authorization information of the proxy type indicated by the page operation request is queried, then based on the queried authorization information of the proxy type indicated by the page operation request, performing permission verification on the page operation request.

[0066] Specifically, after obtaining the page operation request of the target proxy page, the terminal can first query the authorization information of the proxy type indicated by the page operation request from the storage space. If the authorization information of the proxy type indicated by the page operation request is not queried from the storage space, the terminal can determine the target proxy page responsible for the operation authority of the target proxy page from at least one candidate proxy page of the business system. Parse the page configuration information of the target proxy page. If the parsing is successful, the terminal can perform authorization verification on the page operation request based on the authorization information of the proxy type indicated by the parsed page operation request, and store the authorization information of the proxy type indicated by the parsed page operation request in the storage space, so that the next page operation request can directly use the authorization verification without having to perform the steps of determining the target proxy page responsible for the operation authority of the target proxy page again, and parsing the page configuration information of the target proxy page, thereby improving the response speed of the page operation request. If the authorization information of the proxy type indicated by the page operation request is queried from the storage space, the terminal can perform authorization verification on the page operation request based on the authorization information of the proxy type indicated by the queried page operation request.

[0067] In the above embodiment, if the authorization information of the proxy type indicated by the page operation request is queried from the storage space, the page operation request is verified for authority based on the authorization information of the proxy type indicated by the queried page operation request. There is no need to again execute the steps of determining the target proxy page responsible for the operation authority of the proxy target proxy page and parsing the page configuration information of the target proxy page, thereby improving the response speed of the page operation request.

[0068] In one embodiment, Fig. 9As shown, the terminal can obtain the page operation request of the target proxy page (i.e., page A) in the business system. If the authorization information of the proxy type indicated by the page operation request is not queried from the storage space, the terminal can determine the target proxy page (i.e., page B) responsible for proxying the operation authority of the target proxy page from at least one candidate proxy page in the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the previous level; the target proxy page is any one of the at least one candidate proxy page. The terminal can parse the page configuration information of the target proxy page to obtain the page hierarchy relationship between at least one candidate proxy page that the target proxy page is responsible for proxying. The terminal can obtain the authorization information of the proxy type indicated by the page operation request of the target proxy page according to the page hierarchy relationship between at least one candidate proxy page. If the parsing is successful, the terminal can perform authority verification on the page operation request based on the authorization information of the proxy type indicated by the parsed page operation request, and store the authorization information in the storage space. If the permission verification of the page operation request is successful, the terminal can skip the process of verifying the permission of the page operation request based on the native permission verification logic set for the target proxied page in the business system, and directly respond to the page operation request for business processing. If the permission verification of the page operation request fails, the terminal can terminate the page operation request and give a prompt message that the verification failed. If the parsing fails, the terminal can verify the permission of the page operation request based on the native permission verification logic set for the target proxied page in the business system. If the authorization information of the proxied type indicated by the page operation request is queried from the storage space, the terminal can verify the permission of the page operation request based on the authorization information of the proxied type indicated by the queried page operation request.

[0069] It should be understood that, although each step in the flow chart of the above-mentioned embodiments is shown in order, these steps are not necessarily performed in order. Unless there is a clear explanation in this article, the execution of these steps does not have strict order restrictions, and these steps can be performed in other orders. Moreover, at least a portion of the steps in the above-mentioned embodiments may include a plurality of sub-steps or a plurality of stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and the execution order of these sub-steps or stages is not necessarily performed in order, but can be performed in turn or alternately with at least a portion of other steps or sub-steps or stages of other steps.

[0070] In one embodiment, Fig.10 As shown, a rights proxy device 1000 is provided, and the device specifically includes:

[0071] The acquisition module 1002 is used to acquire a page operation request of a target proxied page in the business system;

[0072] The determination module 1004 is used to determine, if the authorization information of the proxy type indicated by the page operation request is not found, a target proxy page responsible for proxying the operation authority of the target proxy page from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the earlier level; the target proxy page is any one of the at least one candidate proxy page;

[0073] The parsing module 1006 is used to parse the page configuration information of the target proxy page;

[0074] The authorization verification module 1008 is used to verify the authorization of the page operation request based on the authorization information of the proxy type indicated by the page operation request obtained through the analysis if the analysis is successful.

[0075] In one embodiment, the authorization verification module 1008 is also used to verify the authorization of the page operation request based on the native authorization verification logic set for the target proxied page in the business system if the parsing fails.

[0076] In one embodiment, the parsing module 1006 is also used to parse the page configuration information of the target proxy page to obtain the page hierarchy relationship between at least one candidate proxied page that the target proxy page is responsible for proxying; based on the page hierarchy relationship between at least one candidate proxied page, obtain the authorization information of the proxy type indicated by the page operation request of the target proxied page.

[0077] In one embodiment, the apparatus further comprises:

[0078] A configuration module is used to obtain at least one proxy page to be configured for a business system; for each proxy page to be configured, configure a page hierarchy relationship between at least one candidate proxy page in the proxy page to be configured; for each candidate proxy page at a later level in at least one candidate proxy page, configure a target field source parameter and a target mapping field processing method parameter corresponding to the candidate proxy page at the later level; the target field source parameter is used to indicate that the candidate proxy page at the later level inherits the operation authority from the corresponding page at the previous level; the target mapping field processing method parameter is used to determine the placement position of the inherited operation authority in the candidate proxy page at the later level; after the field source and mapping field processing method configuration for at least one candidate proxy page is completed, obtain the candidate proxy page corresponding to the proxy page to be configured.

[0079] In one embodiment, the configuration module is also used to select one from the preset first field source parameter, second field source parameter and third field source parameter as the target field source parameter corresponding to the candidate proxy page at the subsequent level for each candidate proxy page at the subsequent level in at least one candidate proxy page; the first field source parameter is used to indicate that the candidate proxy page at the subsequent level obtains the operation permission from the field value of the corresponding prior level page; the second field source parameter is used to indicate that the candidate proxy page at the subsequent level obtains the operation permission from the permission acquisition function of the corresponding prior level page; the third field source parameter is used to indicate that the candidate proxy page at the subsequent level obtains the operation permission from the field value defined for the corresponding prior level page.

[0080] In one embodiment, the configuration module is further used to select one of the preset first candidate mapping field processing method parameter, the second candidate mapping field processing method parameter, the third candidate mapping field processing method parameter and the fourth candidate mapping field processing method parameter as the target mapping field processing method parameter corresponding to the candidate proxy page at the subsequent level for each candidate proxy page at the subsequent level in at least one candidate proxy page; the first candidate mapping field processing method parameter is used to indicate that the inherited operation authority is placed in the filtering area of ​​the candidate proxy page at the subsequent level; the second candidate mapping field processing method parameter is used to indicate that the inherited operation authority is placed in the display area of ​​the candidate proxy page at the subsequent level; the third candidate mapping field processing method parameter is used to indicate that the inherited operation authority is placed in the custom parameter area of ​​the candidate proxy page at the subsequent level; and the fourth candidate mapping field processing method parameter is used to indicate that the inherited operation authority is placed in the built-in parameter area of ​​the candidate proxy page at the subsequent level.

[0081] In one embodiment, the authorization verification module 1008 is also used to verify the authorization of the page operation request based on the authorization information of the proxy type indicated by the page operation request if the authorization information of the proxy type indicated by the page operation request is queried.

[0082] The above-mentioned authority proxy device obtains the page operation request of the target proxy page in the business system; if the authorization information of the proxy type indicated by the page operation request is not found, then the target proxy page responsible for the proxy operation authority of the target proxy page is determined from at least one candidate proxy page in the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the previous level; the target proxy page is any one of at least one candidate proxy page; the page configuration information of the target proxy page is parsed; if the parsing is successful, the page operation request is verified based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing. Compared with the traditional system page authority setting method, the present application can quickly verify the authority of the page operation request by setting a proxy page in the business system, parsing the page configuration information for the operation authority configuration of multiple proxy pages on the proxy page, and based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing, thereby improving the authority verification efficiency. At the same time, since permissions can be transferred between system pages with a page hierarchy, and when permissions are reclaimed, only the permissions of the upper-level pages need to be reclaimed, and the permissions of the lower-level pages can be automatically reclaimed. There is no need to reclaim permissions from each system page, thereby improving the operational efficiency of page permissions.

[0083] Each module in the above-mentioned authority proxy device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each of the above modules.

[0084] In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG11. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a permission proxy method is implemented. The display unit of the computer device is used to form a visually visible image, and can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device can be a touch layer covered on the display screen, or a button, trackball or touchpad set on the computer device casing, or an external keyboard, touchpad or mouse, etc.

[0085] Those skilled in the art will understand that the structure shown in FIG. 11 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0086] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0087] In one embodiment, a computer-readable storage medium is provided, storing a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0088] In one embodiment, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the steps in the above method embodiments are implemented.

[0089] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0090] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), tape, floppy disk, flash memory or optical memory, etc. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM).

[0091] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0092] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A rights proxy method, characterized in that: The method comprises: Obtain the page operation request of the target proxied page in the business system; If the authorization information of the proxy type indicated by the page operation request is not found, a target proxy page responsible for proxying the operation authority of the target proxy page is determined from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; the at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at the later level inherits the operation authority of the candidate proxy page at the earlier level; the target proxy page is any one of the at least one candidate proxy page; Parsing the page configuration information of the target proxy page; If the parsing is successful, the page operation request is subject to permission verification based on the authorization information of the proxy type indicated by the page operation request obtained by the parsing.

2. The method according to claim 1, characterized in that: The parsing of the page configuration information of the target proxy page includes: Parsing the page configuration information of the target proxy page to obtain a page hierarchy relationship between the at least one candidate proxy page that the target proxy page is responsible for proxying; According to the page hierarchical relationship between the at least one candidate proxied page, the authorization information of the proxied type indicated by the page operation request of the target proxied page is obtained.

3. The method according to claim 1, characterized in that The method further comprises: Obtaining at least one proxy page to be configured for the business system; For each of the proxy pages to be configured, configuring at least one page hierarchical relationship between candidate proxy pages in the proxy page to be configured; For each candidate proxy page at a later level among the at least one candidate proxy page, a target field source parameter and a target mapping field processing mode parameter corresponding to the candidate proxy page at the later level are configured; the target field source parameter is used to indicate that the candidate proxy page at the later level inherits the operation authority from the corresponding page at the previous level; the target mapping field processing mode parameter is used to determine the placement position of the inherited operation authority in the candidate proxy page at the later level; After the field source and mapping field processing method for the at least one candidate proxied page are configured, a candidate proxy page corresponding to the proxy page to be configured is obtained.

4. The method according to claim 3, characterized in that The step of configuring the target field source parameters corresponding to the candidate proxied pages at the subsequent level includes: For each candidate proxy page at a subsequent level among the at least one candidate proxy page, one is selected from a first field source parameter, a second field source parameter and a third field source parameter that are preset as a target field source parameter corresponding to the candidate proxy page at the subsequent level; the first field source parameter is used to indicate that the candidate proxy page at the subsequent level obtains operation permissions from the field value of the corresponding prior level page; the second field source parameter is used to indicate that the candidate proxy page at the subsequent level obtains operation permissions from the permission acquisition function of the corresponding prior level page; the third field source parameter is used to indicate that the candidate proxy page at the subsequent level obtains operation permissions from the field value defined for the corresponding prior level page.

5. The method according to claim 3, characterized in that: The step of configuring the target mapping field processing method parameters corresponding to the candidate proxied page at the subsequent level includes: For each candidate proxy page at a subsequent level among the at least one candidate proxy page, one is selected from a first candidate mapping field processing mode parameter, a second candidate mapping field processing mode parameter, a third candidate mapping field processing mode parameter, and a fourth candidate mapping field processing mode parameter that are preset as a target mapping field processing mode parameter corresponding to the candidate proxy page at the subsequent level; the first candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in a filtering area of ​​the candidate proxy page at the subsequent level; the second candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in a display area of ​​the candidate proxy page at the subsequent level; the third candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in a custom parameter area of ​​the candidate proxy page at the subsequent level; and the fourth candidate mapping field processing mode parameter is used to indicate that the inherited operation authority is placed in a built-in parameter area of ​​the candidate proxy page at the subsequent level.

6. The method according to any one of claims 1 to 5, characterized in that: The method further comprises: If the authorization information of the proxy type indicated by the page operation request is found, the page operation request is subjected to authority verification based on the authorization information of the proxy type indicated by the page operation request.

7. A rights proxy device, characterized in that: The device comprises: An acquisition module is used to acquire a page operation request of a target proxied page in a business system; a determination module, configured to determine, if the authorization information of the proxy type indicated by the page operation request is not found, a target proxy page responsible for proxying the operation authority of the target proxy page from at least one candidate proxy page of the business system; the target proxy page is responsible for proxying the operation authority of at least one candidate proxy page; the at least one candidate proxy page has a page hierarchy relationship; the candidate proxy page at a later level inherits the operation authority of the candidate proxy page at a previous level; the target proxy page is any one of the at least one candidate proxy page; A parsing module, used for parsing the page configuration information of the target proxy page; The authorization verification module is used to verify the authorization of the page operation request based on the authorization information of the proxy type indicated by the page operation request obtained through the analysis if the analysis is successful.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images