Data processing method and device, equipment, medium and product

Abstract

The invention discloses a data processing method and device, equipment, a medium and a product, and relates to the technical field of big data. The method is applied to a target system, and the target system comprises multiple data engine modules. Receiving an access input to a target data engine module in the plurality of data engine modules; generating operation behavior information; obtaining first user login information, wherein the first user login information comprises a first user identifier; detecting whether first permission information corresponding to the first user identifier comprises access permission information of the target data engine module or not; under the condition that the first detection result represents that the first permission information comprises the access permission information, detecting whether the first permission information comprises operation permission information corresponding to the operation behavior information or not; and under the condition that the second detection result represents that the first permission information comprises the operation permission information, processing data in the target data engine module according to the operation behavior information. And the data processing efficiency and security are improved.

Description

Technical Field

[0001] The present application belongs to the field of big data technology, and in particular, relates to a data processing method, device, equipment, medium and product. Background Art

[0002] With the advancement of big data technology, the amount of data in organizations (such as enterprises) in various industries is growing at an exponential rate, and the sources and types of data are also increasing. This has prompted organizations to adopt multiple data engine modules to meet their diverse data processing needs. The data in these data engine modules are usually of different types and formats (or structures), and the access rights of different types and formats of data are different.

[0003] In the prior art, the data in various data engine modules are dispersed, and the various data engine modules are distributed in different systems. The system can only receive access inputs to the data corresponding to it, and verify the user's access rights, and process the corresponding data if the verification is passed.

[0004] However, since the data in various data engine modules are scattered in different systems, the data in different data engine modules may be inconsistent, which affects the data processing efficiency; and different data engine modules have different access rights. Since various data engine modules are distributed in different systems, the scattered access right information is easy to be confused. Therefore, only the access rights are verified, and the data security is low. In summary, the data processing method in the prior art has low data processing efficiency and security. Summary of the invention

[0005] An embodiment of the present application provides a data processing method, apparatus, equipment, medium and product. The method is applied to a target system, which includes multiple data engine modules. When the target system is in a successful login state, it receives access input to a target data engine module among the multiple data engine modules, that is, the multiple data engine modules are uniformly integrated in the target system. The target system can receive access input from any data engine and verify access permission information and operation permission information, thereby improving data processing efficiency and security.

[0006] In a first aspect, an embodiment of the present application provides a data processing method, which is applied to a target system, the target system includes multiple data engine modules, and the method includes:

[0007] When the target system is in a successfully logged-in state, receiving access input to a target data engine module among the multiple data engine modules;

[0008] generating operation behavior information in response to the access input;

[0009] Acquire first user login information, where the first user login information includes a first user identifier;

[0010] Detecting whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module, and obtaining a first detection result;

[0011] In the case where the first detection result indicates that the first permission information includes access permission information, detecting whether the first permission information includes operation permission information corresponding to the operation behavior information, and obtaining a second detection result;

[0012] When the second detection result indicates that the first permission information includes operation permission information, the data in the target data engine module is processed according to the operation behavior information.

[0013] In a possible implementation, detecting whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module to obtain a first detection result includes:

[0014] Get the identifier of the target data engine module;

[0015] It is detected whether the first permission information corresponding to the first user identifier includes access permission information corresponding to the identifier, and a first detection result is obtained.

[0016] In a possible implementation, before detecting whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module and obtaining the first detection result, the method further includes:

[0017] When the target system is in a successfully logged-in state, receiving a first input of first permission information;

[0018] In response to the first input, obtaining second user login information, where the second user login information includes a second user identifier;

[0019] Detecting whether the preset user identification list includes the second user identification, and obtaining a third detection result;

[0020] When the third detection result indicates that the preset user identifier list includes the second user identifier, the second permission information corresponding to the first user identifier is updated to the first permission information.

[0021] In a possible implementation, when the third detection result indicates that the preset user identifier list includes the second user identifier, updating the second permission information corresponding to the first user identifier to the first permission information includes:

[0022] If the third detection result indicates that the preset user identification list includes the second user identification, detecting whether the preset authority allocation information of the second user identification includes the authority allocation information of the first authority information, to obtain a fourth detection result;

[0023] When the fourth detection result indicates that the preset authority allocation information of the second user identifier includes the authority allocation information of the first authority information, the second authority information corresponding to the first user identifier is updated to the first authority information.

[0024] In a possible implementation, before detecting whether the preset user identifier list includes the second user identifier and obtaining the third detection result, the method further includes:

[0025] When the target system is in a successfully logged-in state, receiving a preset user identification list and a second input of preset authority allocation information of preset user identifications in the preset user identification list;

[0026] In response to the second input, obtaining third user login information;

[0027] When the third user login information includes the third user identifier, the initial user identifier list is updated to the preset user identifier list, and the initial authority allocation information of the initial user identifier in the initial user identifier list is updated to the preset authority allocation information of the preset user identifier.

[0028] In a possible embodiment, it also includes:

[0029] When the first detection result indicates that the first permission information does not include access permission information, or when the second detection result indicates that the first permission information does not include operation permission information, prompt information is displayed.

[0030] In a second aspect, an embodiment of the present application provides a data processing device, which is applied to a target system, the target system includes multiple data engine modules, and the device includes:

[0031] A receiving module, used for receiving access input to a target data engine module among the multiple data engine modules when the target system is in a successfully logged-in state;

[0032] A generating module, for generating operation behavior information in response to access input;

[0033] An acquisition module, used to acquire first user login information, where the first user login information includes a first user identifier;

[0034] A detection module, used to detect whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module, and obtain a first detection result;

[0035] The detection module is further configured to detect whether the first permission information includes operation permission information corresponding to the operation behavior information when the first detection result indicates that the first permission information includes access permission information, so as to obtain a second detection result;

[0036] The processing module is used to process the data in the target data engine module according to the operation behavior information when the second detection result indicates that the first permission information includes the operation permission information.

[0037] In a third aspect, an embodiment of the present application provides an electronic device, the device comprising:

[0038] a processor and a memory storing computer program instructions;

[0039] The processor implements any of the above data processing methods when executing computer program instructions.

[0040] In a fourth aspect, an embodiment of the present application provides a computer storage medium, on which computer program instructions are stored. When the computer program instructions are executed by a processor, any of the above-mentioned data processing methods is implemented.

[0041] In a fifth aspect, an embodiment of the present application provides a computer program product, characterized in that when the instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute any of the above-mentioned data processing methods.

[0042] The data processing method, apparatus, device, medium and product of the embodiments of the present application are applied to a target system, and the target system includes multiple data engine modules. The method includes: when the target system is in a successful login state, receiving access input to a target data engine module among the multiple data engine modules; generating operation behavior information in response to the access input; obtaining first user login information, the first user login information including a first user identifier; detecting whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module, and obtaining a first detection result; when the first detection result indicates that the first permission information includes access permission information, detecting whether the first permission information includes operation permission information corresponding to the operation behavior information, and obtaining a second detection result; when the second detection result indicates that the first permission information includes operation permission information, processing the data in the target data engine module according to the operation behavior information.

[0043] In this way, the method is applied to a target system, which includes multiple data engine modules. When the target system is in a successful login state, it receives access input to a target data engine module among the multiple data engine modules, that is, multiple data engine modules are uniformly integrated in the target system. The target system can receive access input from any data engine and verify access permission information and operation permission information, thereby improving data processing efficiency and security. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0045] Figure 1 It is a flowchart of a data processing method provided by an embodiment of the present application;

[0046] Figure 2 is a flowchart of a data processing method provided by another embodiment of the present application;

[0047] Figure 3 is a flowchart of a data processing method provided by yet another embodiment of the present application;

[0048] Figure 4 is a flowchart of a data processing method provided in yet another embodiment of the present application;

[0049] Figure 5 is a flowchart of a data processing method provided in yet another embodiment of the present application;

[0050] Figure 6 is a structural schematic diagram of a data processing device provided in yet another embodiment of the present application;

[0051] Figure 7 It is a structural diagram of an electronic device provided in yet another embodiment of the present application. DETAILED DESCRIPTION

[0052] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0053] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0054] It should be noted that the acquisition, storage, use and processing of data in the embodiments of the present application are in compliance with the relevant provisions of national laws and regulations.

[0055] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0056] With the advancement of big data technology, the amount of data in organizations (such as enterprises) in various industries is growing at an exponential rate, and the sources and types of data are also increasing. This has prompted organizations to adopt multiple data engine modules to meet their diverse data processing needs. The data in these data engine modules are usually of different types and formats, and the access rights of different types and formats of data are different.

[0057] In the prior art, the data in various data engine modules are dispersed, and the various data engine modules are distributed in different systems. The system can only receive access inputs to the data corresponding to it, and verify the user's access rights, and process the corresponding data if the verification is passed.

[0058] However, since the data in various data engine modules are scattered in different systems, the data in different data engine modules may be inconsistent, which affects the data processing efficiency; and different data engine modules have different access rights. Since various data engine modules are distributed in different systems, the scattered access right information is easy to be confused. Therefore, only the access rights are verified, and the data security is low. In summary, the data processing method in the prior art has low data processing efficiency and security.

[0059] In order to solve the problems of the prior art, the embodiments of the present application provide a data processing method, device, equipment, medium and product. The data processing method provided in the embodiments of the present application is applied to a target system, and the target system includes multiple data engine modules. When the target system is in a successful login state, it receives access input to a target data engine module among the multiple data engine modules, that is, multiple data engine modules are uniformly integrated in the target system, and the target system can receive access input from any data engine, and verify the access permission information and operation permission information, thereby improving the processing efficiency and security of data.

[0060] Here, multiple data engine modules are integrated into the target system through the target system's plug-in module and target interface. The data format (or structure) in multiple data engine modules is consistent, and the permission management method is consistent. The data in multiple data engine modules forms a metadata lake, standardizing data directory operations and unifying all metadata management and governance.

[0061] The following first introduces the data processing method provided in the embodiment of the present application. Figure 1 As shown, the data processing method provided in the embodiment of the present application includes the following steps.

[0062] S110. When the target system is in a successfully logged-in state, receiving access input to a target data engine module among the multiple data engine modules.

[0063] Here, the target data engine module is any one of the multiple data engine modules. The multiple data engine modules may include, but are not limited to, database catalog modules, database schema modules, database table modules, JDBC (Java Database Connectivity) data modules, cloud data modules, and Haoop data modules.

[0064] In some embodiments, before receiving access input to a target data engine module among the multiple data engine modules, receiving login input of the target system; the login input includes first user login information and a login key. If the first user login information and the login key match, updating the state of the target system to a successful login state.

[0065] In some embodiments, the access input may include, but is not limited to, any one of a query input, a modification input, and a deletion input for data in the target data engine module.

[0066] S120 . Generate operation behavior information in response to the access input.

[0067] Here, the operation behavior information is the operation behavior information corresponding to the access input.

[0068] In some embodiments, if the access input is a query input for data in a target data engine module, query behavior information of the data is generated; if the access input is a modification input for data in a target data engine module, modification behavior information of the data is generated; if the access input is a deletion input for data in a target data engine module, deletion behavior information of the data is generated.

[0069] S130: Obtain first user login information, where the first user login information includes a first user identifier.

[0070] Here, the first user login information is necessary information for a user to log in to the target system.

[0071] In some embodiments, the first user identification may include at least one of a user number, a user name, and a user ID.

[0072] S140: Detect whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module, and obtain a first detection result.

[0073] Here, the first permission information is set in advance.

[0074] In some embodiments, the first permission information may include access permission information of the data engine.

[0075] S150: When the first detection result indicates that the first permission information includes access permission information, detect whether the first permission information includes operation permission information corresponding to the operation behavior information to obtain a second detection result.

[0076] In some embodiments, the first permission information may include operation permission information of the data engine.

[0077] Specifically, first detect whether the first permission information corresponding to the first user identifier includes the access permission information of the target data engine module, that is, first verify the user's access permission. In the case where the first detection result indicates that the first permission information includes the access permission information, that is, in the case where the access permission verification passes, detect whether the first permission information includes the operation permission information corresponding to the operation behavior information.

[0078] It is understandable that when the access permission check is passed, the data in the target data engine module may not be processed according to the operation behavior information, and it is also necessary to detect whether the first permission information includes the operation permission information corresponding to the operation behavior information.

[0079] S160: When the second detection result indicates that the first permission information includes operation permission information, process the data in the target data engine module according to the operation behavior information.

[0080] Here, the operation authority information is the operation authority information corresponding to the operation behavior information.

[0081] In this way, the method is applied to a target system, which includes multiple data engine modules. When the target system is in a successful login state, it receives access input to a target data engine module among the multiple data engine modules, that is, multiple data engine modules are uniformly integrated in the target system. The target system can receive access input from any data engine and verify access permission information and operation permission information, thereby improving data processing efficiency and security.

[0082] Based on this, in some embodiments, Figure 2 As shown, the above S140 may specifically include:

[0083] S141, obtaining an identifier of a target data engine module;

[0084] S142: Detect whether the first permission information corresponding to the first user identifier includes access permission information corresponding to the identifier, and obtain a first detection result.

[0085] Here, the identification of the target data engine module may include at least one of a number of the target data engine module, a name of the target data engine module, and an ID of the target data engine module.

[0086] In some embodiments, the access permission information includes an identifier of a data engine module. Specifically, the access permission information in the first permission information is detected to see whether it includes an identifier that is consistent with the identifier of a target data engine module. If the access permission information in the first permission information includes an identifier that is consistent with the identifier of a target data engine module, then the first permission information corresponding to the first user identifier includes access permission information of the target data engine module.

[0087] In this way, through the identification of the target data engine module, it is possible to accurately detect whether the first permission information corresponding to the first user identification includes the access permission information of the target data engine module, thereby improving data security.

[0088] Based on this, in some embodiments, Figure 3 As shown, before the above S140, the method may further include:

[0089] S131, when the target system is in a successfully logged-in state, receiving a first input of first permission information;

[0090] S132. In response to the first input, obtain second user login information, where the second user login information includes a second user identifier;

[0091] S133, detecting whether the preset user identification list includes the second user identification, and obtaining a third detection result;

[0092] S134: When the third detection result indicates that the preset user identifier list includes the second user identifier, update the second permission information corresponding to the first user identifier to the first permission information.

[0093] Here, the preset user identification list is set in advance. The second permission information is set in advance.

[0094] In some embodiments, the second user identification in the above S132 may include at least one of a user number, a user name, and a user ID.

[0095] In some embodiments, before receiving the first input of the first permission information, receiving a login input of the target system; the login input includes the second user login information and the login key. If the second user login information and the login key match, updating the state of the target system to a successful login state.

[0096] In some embodiments, the preset user identification list includes a preset user identification, and the first input is an update input of the permission information corresponding to the first user identification. In the above S134, when the third detection result indicates that the preset user identification list includes the second user identification, updating the second permission information corresponding to the first user identification to the first permission information includes: when the second user identification is consistent with the preset user identification, updating the second permission information corresponding to the first user identification to the first permission information.

[0097] It should be noted that, when the second user identifier is consistent with the preset user identifier, the target system successfully logged in with the second user identifier has the ability to allocate and update permission information.

[0098] In this way, the ability to update permission information is restricted. Only the target system that successfully logs in with the second user ID can update the permission information corresponding to the first user ID. The second user ID must be consistent with the preset user ID in the preset user ID list, thereby improving data security.

[0099] Based on this, in some embodiments, Figure 4 As shown, the above S134 may specifically include:

[0100] S135. When the third detection result indicates that the preset user identification list includes the second user identification, detect whether the preset permission allocation information of the second user identification includes the permission allocation information of the first permission information, and obtain a fourth detection result.

[0101] S136: When the fourth detection result indicates that the preset permission allocation information of the second user identifier includes the permission allocation information of the first permission information, update the second permission information corresponding to the first user identifier to the first permission information.

[0102] Here, the authority allocation information represents the allocation capability of the first authority information. The preset authority allocation information of the second user identifier is set in advance.

[0103] In some embodiments, when the second user identifier is consistent with the preset user identifier, the ability to update the first permission information is not necessarily available. It is also necessary to detect whether the preset permission allocation information of the second user identifier includes the permission allocation information of the first permission information. When the fourth detection result indicates that the preset permission allocation information of the second user identifier includes the permission allocation information of the first permission information, the target system that successfully logs in with the second user identifier has the ability to allocate and update the first permission information.

[0104] In this way, the ability to update the first permission information is restricted. Only when the target system is successfully logged in with the second user identifier and the preset permission allocation information of the second user identifier includes the permission allocation information of the first permission information, can the first permission information corresponding to the first user identifier be updated. Among them, the second user identifier must be consistent with the preset user identifier in the preset user identifier list, thereby further improving the security of the data.

[0105] Based on this, in some embodiments, Figure 5 As shown, before the above S133, the method may further include:

[0106] S210, when the target system is in a successfully logged-in state, receiving a preset user identification list and a second input of preset authority allocation information of a preset user identification in the preset user identification list;

[0107] S220, in response to the second input, obtaining third user login information;

[0108] S230: When the third user login information includes a third user identifier, update the initial user identifier list to a preset user identifier list, and update the initial authority allocation information of the initial user identifier in the initial user identifier list to the preset authority allocation information of the preset user identifier.

[0109] Here, the third user ID is set in advance, and the target system that successfully logs in with the third user ID has the ability to update the user ID list and the authority allocation information. The initial user ID list and the initial authority allocation information of the initial user ID in the initial user ID list are set in advance. The second input includes the update input of the user ID list and the authority allocation information.

[0110] In some embodiments, before receiving the preset user identification list and the second input of the preset permission allocation information of the preset user identification in the preset user identification list, receiving the login input of the target system; the login input includes the third user login information and the login key. If the third user login information and the login key match, the state of the target system is updated to a successful login state.

[0111] In this way, the ability to update the user identification list and authority allocation information is restricted. Only the target system that successfully logs in with the third user identification can update the user identification list and authority allocation information, further improving data security.

[0112] Based on this, in some embodiments, the method may further include:

[0113] When the first detection result indicates that the first permission information does not include access permission information, or when the second detection result indicates that the first permission information does not include operation permission information, prompt information is displayed.

[0114] Here, the prompt message is set in advance. For example, the prompt message is "No permission".

[0115] In some embodiments, the prompt information includes first sub-prompt information and second sub-prompt information. When the first detection result indicates that the first permission information does not include access permission information, or the second detection result indicates that the first permission information does not include operation permission information, displaying the prompt information includes: when the first detection result indicates that the first permission information does not include access permission information, displaying the first sub-prompt information; when the second detection result indicates that the first permission information does not include operation permission information, displaying the second sub-prompt information.

[0116] As an example, the first sub-prompt information is “no access authority” and the second sub-prompt information is “no operation authority”.

[0117] In this way, when the data in the target data engine cannot be processed, a prompt message is displayed to remind the user that he or she does not have permission, thereby reducing the user's waiting time and improving the user experience.

[0118] In the multi-engine big data environment of the prior art, each engine usually has its own permission control mechanism, which leads to decentralized permission management. This decentralized permission management method not only increases the complexity and cost of management, but also increases security risks. For example, if an enterprise uses multiple data engines, it needs to configure and maintain independent permission control policies for each engine, which is not only time-consuming and labor-intensive, but also prone to errors. In addition, decentralized permission control may also lead to permission leakage or abuse, because the permission control mechanism of each engine may have security vulnerabilities or configuration errors.

[0119] In the embodiment provided by the present application, by integrating the data of different data engines, a unified model and interface are provided to ensure the consistency and availability of rights management. This uniformity simplifies the data processing process, improves efficiency and user experience. A plug-in design is adopted so that new data engines can be more easily integrated into the target system. This design increases the flexibility and scalability of the system, allowing the system to be easily upgraded and expanded as technology develops. The rights of all data engines are uniformly managed, and a unified rights control strategy is provided to ensure the security of data and reduce the risk of rights leakage or abuse. Based on the user identification to update the rights information, this fine-grained rights management method improves the security and access efficiency of data. The system includes the rights range of the first user identification, the second user identification and the third user identification. This hierarchical structure makes the rights allocation clearer and is easy to manage and maintain.

[0120] The embodiments provided in this application protect data from unauthorized access or modification, which is particularly important for data-sensitive application scenarios. It can improve data processing efficiency and data security in a multi-data engine environment, reduce maintenance costs, improve system performance, and have good scalability and flexibility.

[0121] Based on the data processing method provided in the above embodiment, the present application also provides a specific implementation of a data processing device. Please refer to the following embodiment.

[0122] See also Figure 6 The data processing device 300 provided in the embodiment of the present application is applied to a target system, the target system includes multiple data engine modules, and the device 300 includes:

[0123] The receiving module 310 is used to receive access input to a target data engine module among the multiple data engine modules when the target system is in a successfully logged-in state;

[0124] A generating module 320, for generating operation behavior information in response to the access input;

[0125] The acquisition module 330 is used to acquire the first user login information, where the first user login information includes a first user identifier;

[0126] The detection module 340 is used to detect whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module, and obtain a first detection result;

[0127] The detection module 340 is further configured to detect whether the first permission information includes operation permission information corresponding to the operation behavior information, and obtain a second detection result when the first detection result indicates that the first permission information includes access permission information;

[0128] The processing module 350 is used to process the data in the target data engine module according to the operation behavior information when the second detection result indicates that the first permission information includes the operation permission information.

[0129] Based on this, in some embodiments, the detection module 340 may be specifically used to:

[0130] Get the identifier of the target data engine module;

[0131] It is detected whether the first permission information corresponding to the first user identifier includes access permission information corresponding to the identifier, and a first detection result is obtained.

[0132] Based on this, in some embodiments, the apparatus 300 may further include:

[0133] The receiving module 310 is further configured to detect whether the first permission information corresponding to the first user identifier includes the access permission information of the target data engine module, and before obtaining the first detection result, receive a first input of the first permission information when the target system is in a successful login state;

[0134] The acquisition module 330 is further configured to acquire second user login information in response to the first input, where the second user login information includes a second user identifier;

[0135] The detection module 340 is further used to detect whether the preset user identification list includes the second user identification, and obtain a third detection result;

[0136] The updating module is configured to update the second permission information corresponding to the first user identifier to the first permission information when the third detection result indicates that the preset user identifier list includes the second user identifier.

[0137] Based on this, in some embodiments, the update module can be specifically used to:

[0138] If the third detection result indicates that the preset user identification list includes the second user identification, detecting whether the preset authority allocation information of the second user identification includes the authority allocation information of the first authority information, to obtain a fourth detection result;

[0139] When the fourth detection result indicates that the preset authority allocation information of the second user identifier includes the authority allocation information of the first authority information, the second authority information corresponding to the first user identifier is updated to the first authority information.

[0140] Based on this, in some embodiments, the apparatus 300 may further include:

[0141] The receiving module 310 is further configured to receive a preset user identification list and a second input of preset permission allocation information of a preset user identification in the preset user identification list before detecting whether the second user identification is included in the preset user identification list and obtaining the third detection result, when the target system is in a successful login state;

[0142] The acquisition module 330 is further configured to acquire the third user login information in response to the second input;

[0143] The updating module is used to update the initial user identification list to the preset user identification list when the third user login information includes the third user identification, and to update the initial authority allocation information of the initial user identification in the initial user identification list to the preset authority allocation information of the preset user identification.

[0144] Based on this, in some embodiments, the apparatus 300 may further include:

[0145] The display module is used to display prompt information when the first detection result indicates that the first permission information does not include access permission information, or when the second detection result indicates that the first permission information does not include operation permission information.

[0146] The various modules of the data processing device provided in the embodiment of the present application can realize the functions of the various steps of the data processing method provided above and achieve the corresponding technical effects, which will not be described in detail here for the sake of brevity.

[0147] Based on the same inventive concept, an embodiment of the present application also provides an electronic device.

[0148] Figure 7 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application is shown.

[0149] The electronic device may include a processor 401 and a memory 402 storing computer program instructions.

[0150] Specifically, the processor 401 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0151] Memory 402 may include a large capacity memory for data or instructions. By way of example and not limitation, memory 402 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, memory 402 may include a removable or non-removable (or fixed) medium. In appropriate cases, memory 402 may be inside or outside of an integrated gateway disaster recovery device. In a specific embodiment, memory 402 is a non-volatile solid-state memory.

[0152] The memory may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Therefore, generally, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to one aspect of the present disclosure.

[0153] The processor 401 implements any one of the data processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 402 .

[0154] In one example, the electronic device may further include a communication interface 403 and a bus 410. Figure 7 As shown, the processor 401, the memory 402, and the communication interface 403 are connected via a bus 410 and communicate with each other.

[0155] The communication interface 403 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0156] The bus 410 includes hardware, software or both, coupling the components of the electronic device to each other. For example, but not limitation, the bus may include an accelerated graphics port (Accelerated Graphics Port, AGP) or other graphics bus, an enhanced industry standard architecture (Extended Industry Standard Architecture, EISA) bus, a front side bus (Front Side Bus, FSB), a hypertransport (Hyper Transport, HT) interconnection, an industry standard architecture (Industry Standard Architecture, ISA) bus, an infinite bandwidth interconnection, a low pin count (Linear Predictive Coding, LPC) bus, a memory bus, a micro channel architecture (MicroChannel Architecture, MCA) bus, a peripheral component interconnect (Peripheral Component Interconnect, PCI) bus, a PCI-Express (Peripheral Component Interconnect-X, PCI-X) bus, a serial advanced technology attachment (Serial Advanced Technology Attachment, SATA) bus, a video electronics standard association local (VESA Local Bus, VLB) bus or other suitable buses or a combination of two or more of these. Where appropriate, the bus 410 may include one or more buses. Although the embodiments of the present application describe and illustrate a specific bus, the present application considers any suitable bus or interconnection. The electronic device can execute the data processing method in the embodiments of the present invention, thereby realizing the above-mentioned data processing method.

[0157] In addition, in combination with the data processing method in the above embodiments, the present application embodiment can provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the data processing methods in the above embodiments is implemented.

[0158] The present application also provides a computer program product. When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes each process of implementing any one of the above-mentioned data processing method embodiments.

[0159] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0160] The functional blocks shown in the structural block diagram described above can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), appropriate firmware, plug-in, function card, etc. When implemented in software, the elements of the present application are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or communication link by a data signal carried in a carrier. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (Read-Only Memory, ROM), flash memory, erasable read-only memory (Erasable ReadOnly Memory, EROM), floppy disks, compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), optical discs, hard disks, optical fiber media, radio frequency (Radio Frequency, RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0161] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0162] Aspects of the present disclosure are described above with reference to the flowchart and / or block diagram of the method, device (system) and computer program product according to the embodiment of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0163] The above are only specific implementation methods of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A data processing method, characterized in that: Applied to a target system, the target system includes multiple data engine modules, and the method includes: When the target system is in a successfully logged-in state, receiving access input to a target data engine module among the multiple data engine modules; generating operation behavior information in response to the access input; Acquire first user login information, where the first user login information includes a first user identifier; Detecting whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module, and obtaining a first detection result; In the case where the first detection result indicates that the first permission information includes the access permission information, detecting whether the first permission information includes the operation permission information corresponding to the operation behavior information, and obtaining a second detection result; In a case where the second detection result indicates that the first permission information includes the operation permission information, the data in the target data engine module is processed according to the operation behavior information.

2. The data processing method according to claim 1, characterized in that: The detecting whether the first permission information corresponding to the first user identifier includes the access permission information of the target data engine module, and obtaining a first detection result, includes: Obtaining the identifier of the target data engine module; It is detected whether the first permission information corresponding to the first user identifier includes the access permission information corresponding to the identifier, and a first detection result is obtained.

3. The data processing method according to claim 1, characterized in that: Before detecting whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module and obtaining the first detection result, the method further includes: When the target system is in a successfully logged-in state, receiving a first input of the first permission information; In response to the first input, obtaining second user login information, where the second user login information includes a second user identifier; Detecting whether the preset user identification list includes the second user identification, and obtaining a third detection result; When the third detection result indicates that the preset user identification list includes the second user identification, the second permission information corresponding to the first user identification is updated to the first permission information.

4. The data processing method according to claim 3, characterized in that: When the third detection result indicates that the preset user identification list includes the second user identification, updating the second permission information corresponding to the first user identification to the first permission information includes: If the third detection result indicates that the preset user identification list includes the second user identification, detecting whether the preset authority allocation information of the second user identification includes the authority allocation information of the first authority information, to obtain a fourth detection result; When the fourth detection result indicates that the preset authority allocation information of the second user identifier includes the authority allocation information of the first authority information, the second authority information corresponding to the first user identifier is updated to be the first authority information.

5. The data processing method according to claim 3, characterized in that: Before detecting whether the preset user identification list includes the second user identification and obtaining the third detection result, the method further includes: When the target system is in a successfully logged-in state, receiving the preset user identification list and second input of preset authority allocation information of preset user identifications in the preset user identification list; In response to the second input, obtaining third user login information; In the case where the third user login information includes a third user identifier, the initial user identifier list is updated to the preset user identifier list, and the initial authority allocation information of the initial user identifier in the initial user identifier list is updated to the preset authority allocation information of the preset user identifier.

6. The data processing method according to claim 1, characterized in that: Also includes: When the first detection result indicates that the first authority information does not include the access authority information, or when the second detection result indicates that the first authority information does not include the operation authority information, prompt information is displayed.

7. A data processing device, characterized in that: Applied to a target system, the target system includes multiple data engine modules, and the device includes: A receiving module, configured to receive access input to a target data engine module among the multiple data engine modules when the target system is in a successfully logged-in state; A generating module, used for generating operation behavior information in response to the access input; An acquisition module, configured to acquire first user login information, wherein the first user login information includes a first user identifier; a detection module, configured to detect whether the first permission information corresponding to the first user identifier includes access permission information of the target data engine module, and obtain a first detection result; The detection module is further configured to detect whether the first permission information includes the operation permission information corresponding to the operation behavior information, to obtain a second detection result, when the first detection result indicates that the first permission information includes the access permission information; A processing module is used to process the data in the target data engine module according to the operation behavior information when the second detection result indicates that the first permission information includes the operation permission information.

8. An electronic device, characterized in that: The device comprises: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the data processing method according to any one of claims 1 to 6 is implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the data processing method according to any one of claims 1 to 6 is implemented.

10. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute the data processing method as described in any one of claims 1 to 6.

Images