Multi-dimensional based visual dynamic permission assignment method and apparatus

Abstract

The application provides a multi-dimensional-based visual dynamic permission allocation method and device, which comprises the following steps: configuring department compilation rules according to the association relationship among institutions, departments and table samples and permission allocation logic; dynamically displaying the dynamic multi-dimensional table of the association relationship among institutions, departments, table samples and users according to the department compilation rules; collecting permission data containing the operation permissions of departments and table samples and / or the affiliation relationship of departments and users according to the specified collection table style; and dynamically filtering the departments, table samples and operation permissions visible to users in the system function execution process according to the dynamic multi-dimensional table and the permission data.

Description

Technical Field

[0001] This application relates to the field of data management, and more particularly to a method and apparatus for multidimensional, visualized, and dynamic permission allocation. Background Technology

[0002] In recent years, with the continuous evolution of the market environment, enterprises have increasingly urgent needs to explore more flexible and efficient management methods, which has become a key element supporting their long-term development. Against this grand backdrop, how to deeply integrate software applications into enterprise development strategies and seamlessly connect them with the concept of refined management is particularly crucial.

[0003] In traditional software systems, the emphasis on refined management is achieved through user authorization and role authorization in the permission allocation system. However, when the number of units and users in an enterprise is too large, and there are too many personalized management requests from subordinate units, it may be necessary to create roles in separate tables or assign permissions to users separately. This can increase the overall system maintenance cost exponentially. Specifically, the traditional permission allocation system involves creating users and roles in the system and assigning permissions to users or roles. Taking report filling in the system as an example, suppose Group A has 10 subordinate units, each with different number of departments and different department permissions, and 100 report templates need to be filled in during the annual report period.

[0004] In a traditional permission allocation system, since users belong to different departments within different organizations, there are two ways to allocate permissions based on table-based permission requirements:

[0005] 1) User-specific permissions: Different users are given different permissions for filling out or viewing forms. Advantages: Permissions are clearly assigned to specific users, following their roles. Disadvantages: Adjustments are extremely labor-intensive when the number of users is large, or when there are subsequent changes such as new users, departures, or job transfers.

[0006] 2) Create roles on a 1:1 basis according to the number of tables, and assign permissions to the roles. Advantages: Assigning permissions by role, you can cancel or add corresponding roles when there are changes in users. Disadvantages: When there are a large number of tables, for example, 100 tables, you need to create at least 100 roles. Assuming that each table is further divided into filling and viewing roles, then you need to create 100 * 2 = 200 roles.

[0007] Therefore, the industry urgently needs an efficient permission allocation system to improve seamless collaboration between departments and employees of the system's users, ensure real-time information sharing and flow, and improve operational efficiency. Summary of the Invention

[0008] The purpose of this application is to provide a multi-dimensional, visual, dynamic permission allocation method and device. Through a table format, it enables flexible permission allocation and customized operation and maintenance, reducing the complexity of permission allocation and improving the precision, flexibility, and real-time nature of management. It achieves a top-down table, with each unit having its own unique format. Leveraging multi-dimensional features, different units can display different departments and table styles, reducing operational complexity.

[0009] To achieve the above objectives, the multidimensional visualization-based dynamic permission allocation method provided in this application specifically includes: configuring departmental organization rules based on the relationships and permission allocation logic between organizations, departments, and forms; dynamically displaying the permission relationships between organizations, departments, forms, and users based on the departmental organization rules to generate a dynamic multidimensional table; collecting permission data including the operation permissions of departments and forms and / or the affiliation relationships between departments and users based on a specified collection table style; and dynamically filtering the departments, forms, and operation permissions visible to users during system function execution based on the dynamic multidimensional table and the permission data.

[0010] In the above-mentioned multi-dimensional visualization-based dynamic permission allocation method, optionally, the department compilation rules include one or more combinations of department view permission acquisition mode, table sample view permission acquisition mode, and hybrid view permission acquisition mode; wherein, the department view permission acquisition mode is used to limit the department's operation permissions on the table sample; the table sample view permission acquisition mode is used to limit the department and user scope to which the table sample belongs; and the hybrid view permission acquisition mode is used to dynamically generate permission rules by combining the department view and the table sample view.

[0011] In the above-mentioned multidimensional visualization dynamic permission allocation method, optionally, the dynamic multidimensional table generated by dynamically displaying the permission associations between institutions, departments, forms and users according to the department compilation rules also includes: dynamically adjusting the scope of displayed departments and forms according to the organizational hierarchy through the dynamic multidimensional table, or configuring permission associations by dragging, checking or range input, or updating permission rules in real time and synchronizing them to one or more function combinations in the system function modules.

[0012] In the above-mentioned multi-dimensional visualization dynamic permission allocation method, optionally, the operation permissions include a superior unit viewing data of a subordinate unit, a designated department leader viewing data of all departments under this organization, and / or a cross-organizational department viewing data of subordinate units within a specified range.

[0013] In the above-mentioned multi-dimensional visualization dynamic permission allocation method, optionally, the method further includes: dynamically generating a permission filter chain based on the user's organization and department; the filter chain includes: determining the visible department range based on the organization associated with the user, filtering operable forms based on the association rules between departments and forms, and / or adjusting the read and write permissions of the final form based on permission exception settings.

[0014] In the above-mentioned multidimensional visualization dynamic permission allocation method, optionally, the operation permissions include batch importing the permission relationships of organizations, departments and users through a multidimensional table; and generating permission rules according to a preset template and associating them with business processes.

[0015] In the above-mentioned multidimensional visualization dynamic permission allocation method, optionally, the dynamic multidimensional table generated by dynamically displaying the permission associations between institutions, departments, table types and users according to the departmental compilation rules also includes: dynamically grouping the multidimensional table according to institutional level, department type and table type; and quickly locating the target permission configuration item by keyword retrieval.

[0016] This application also provides a multidimensional, visual, dynamic permission allocation device, comprising: a rule configuration module, a multidimensional table generation module, a permission acquisition module, and a permission execution module; the rule configuration module is used to configure department compilation rules according to the relationships between organizations, departments, and forms and the permission allocation logic; the multidimensional table generation module is used to dynamically display the permission relationships between organizations, departments, forms, and users and generate a dynamic multidimensional table according to the department compilation rules; the permission acquisition module is used to acquire permission data including the operation permissions of departments and forms and / or the affiliation relationships between departments and users according to a specified acquisition table style; the permission execution module is used to dynamically filter the departments, forms, and operation permissions visible to users during system function execution based on the dynamic multidimensional table and the permission data.

[0017] In the above-mentioned multidimensional visualization dynamic permission allocation device, optionally, the multidimensional table generation module includes a control unit, which is used to dynamically fold or expand the list of departments and table samples according to the organizational hierarchy, distinguish the read and write permission status of the table samples by color marking, and / or configure special permission scenarios using an integrated permission exception setting control.

[0018] In the aforementioned multi-dimensional visual dynamic permission allocation device, optionally, the permission execution module includes a query unit, a filtering unit, and a processing unit; the query unit is used to retrieve associated institutions and departments based on user identity; the filtering unit is used to generate an operable table sample range based on the association rules between departments and table samples; and the processing unit is used to adjust the final permission result in conjunction with permission exception settings.

[0019] In the above-mentioned multi-dimensional visual dynamic permission allocation device, optionally, the device further includes a task management module and a dynamic update module; the task management module is used to bind permission allocation tasks with business processes, the business processes including at least one of budget preparation, report filling, and approval processes; the dynamic update module is used to synchronize the changes to the system function interface in real time when user permissions or departmental rules change.

[0020] This application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the above-described method.

[0021] This application also provides a computer-readable storage medium storing a computer program that performs the above-described methods.

[0022] This application also provides a computer program product, including a computer program / instructions that, when executed by a processor, implement the steps of the above-described method.

[0023] The beneficial technical effects of this application are as follows: Based on a multi-dimensional, visualized, and dynamic permission allocation system, and with the help of flexible and diverse display formats of multi-dimensional tables, in addition to satisfying the basic requirement of flexible and dynamic permission allocation by multiple dimensions such as organization, department, and form, enabling collaborative autonomy and diverse organizational structures within each organization; the overall interface is simple and easy to use, allowing for direct customization of operations and maintenance, reducing system maintenance costs, improving seamless collaboration between departments and employees of the system's users, ensuring real-time information sharing and flow, and improving operational efficiency. Attached Figure Description

[0024] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, do not constitute a limitation thereof. In the drawings:

[0025] Figure 1 This is a flowchart illustrating a multi-dimensional, visual, dynamic permission allocation method provided in an embodiment of this application.

[0026] Figure 2 A logical diagram illustrating the departmental organization rules provided in an embodiment of this application;

[0027] Figure 3 This is a logical diagram illustrating the filtering of visible departments provided in an embodiment of this application;

[0028] Figure 4 This is a schematic diagram illustrating the read / write permission logic of a department filtering table and a retrieval table, provided as an embodiment of this application.

[0029] Figure 5A This is a schematic diagram illustrating the data collection department and form permissions provided in one embodiment of this application;

[0030] Figure 5B This is a schematic diagram illustrating the relationship between the data collection department and the user, provided in an embodiment of this application.

[0031] Figure 6A schematic diagram of the structure of a multi-dimensional visual dynamic permission allocation device provided in an embodiment of this application;

[0032] Figure 7 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0033] The following will describe in detail the implementation methods of this application with reference to the accompanying drawings and embodiments, so as to fully understand how this application uses technical means to solve technical problems and achieve technical effects, and to implement it accordingly. It should be noted that, as long as there is no conflict, the various embodiments and features in each embodiment of this application can be combined with each other, and the resulting technical solutions are all within the protection scope of this application.

[0034] Furthermore, the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0035] Please refer to Figure 1 As shown, the multi-dimensional, visual, dynamic permission allocation method provided in this application specifically includes:

[0036] S101 configures departmental staffing rules based on the relationships and permission allocation logic between organizations, departments, and forms;

[0037] S102 dynamically displays the permission relationships between organizations, departments, forms, and users according to the departmental compilation rules, generating a dynamic multidimensional table.

[0038] S103 collects permission data, including the operation permissions of departments and forms and / or the affiliation between departments and users, according to the specified collection form style;

[0039] S104 dynamically filters the departments, forms, and operation permissions visible to users during the system function execution process based on the dynamic multidimensional table and the permission data.

[0040] In the above embodiments, this application establishes and provides a multi-dimensional, visual, dynamic permission allocation method based on existing standard permission systems. Utilizing the flexible and diverse display formats of multi-dimensional tables, it configures the relationships between organizations, departments, table formats, and users through dynamically generated multi-dimensional tables, achieving flexible permission allocation, meeting the needs of refined management, and facilitating collaboration between different units, departments, and employees. This ensures real-time information sharing and flow, and improves operational efficiency. For details, please refer to... Figure 2As shown, by enabling departmental organization rule settings, rules for filling in and viewing forms between organizations, departments, and forms are configured for specific tasks, as well as rules for filling in and viewing forms between organizations, departments, and users, forming the basic rule data of the permission system; then, permission allocation rules are responded to during the opening and execution of specific functions of the entire system; the specific implementation methods of each step will be described in detail in subsequent embodiments, and will not be described in detail here.

[0041] In one embodiment of this application, the departmental organization rules include one or more combinations of departmental view permission collection mode, table template view permission collection mode, and hybrid view permission collection mode. The departmental view permission collection mode is used to limit the department's operation permissions on the table template; the table template view permission collection mode is used to limit the department and user scope to which the table template belongs; and the hybrid view permission collection mode is used to dynamically generate permission rules by combining the departmental view and the table template view. Subsequently, a departmental organization permission maintenance table model and related multi-dimensional tables are automatically generated based on the selected table template, and a new departmental editing permission collection task is added simultaneously. Depending on the selected permission collection table template, the final generated model varies slightly, including departmental view permission collection, table template view permission collection, and hybrid view permission collection, respectively.

[0042] In one embodiment of this application, the operation permissions include a superior unit viewing data of a subordinate unit, a designated department leader viewing data of all departments under their organization, and / or a cross-organizational department viewing data of subordinate units within a specified scope. In another embodiment, the operation permissions include batch importing organizational, departmental, and user permission relationships through a multidimensional table; and generating permission rules based on a preset template and associating them with business processes.

[0043] Specifically, in practical work, the configuration interface of the entire permission collection visualization device utilizes the flexible and diverse display format of multidimensional tables to dynamically generate multidimensional tables based on the relationships between organizations, departments, and table templates. The client independently operates and collects relevant data, forming a rule-based data system for the permission system between organizations, departments, table templates, and between organizations / departments and users. In actual projects, the development of response department permission filters is divided into the following parts:

[0044] 1) Find the department under the organization based on the user (exceptions may apply);

[0045] 2) Based on the scope of the departmental judgment table;

[0046] 3) Determine the read and write permissions for the table based on the department's permission table.

[0047] In addition to following the aforementioned relatively standard permission filtering methods, the overall design process also needs to adapt to individual and differentiated management models, such as: superior units viewing data from subordinate units, finance department leaders viewing data from all departments under their unit, and subordinate departments within the scope of their authority viewing data from subordinate units. All of these require adaptation to permission exception settings. Furthermore, when departmental configuration rules are enabled, all places in the system that require access permissions, such as process approval and task monitoring, need to respond to this visual and dynamic permission allocation method based on departmental configuration.

[0048] In one embodiment of this application, the method may further include: dynamically generating a permission filter chain based on the user's organization and department; the filter chain includes: determining the scope of visible departments based on the organization associated with the user, filtering operable forms based on the association rules between departments and forms, and / or adjusting the read and write permissions of the final form based on permission exception settings.

[0049] For details, please refer to [link / reference]. Figure 3 As shown, the process for filtering visible departments based on permissions is as follows:

[0050] First, the user logs in. After verifying the user's identity, the staffing function is opened to specify the task. Based on the user's identity, the total staffing of departments and the detailed departments configured in the permission table are displayed. Alternatively, the user is determined to be an exception role for further analysis.

[0051] The following situations exist when determining whether a user belongs to an exceptional role:

[0052] After determining to enable exceptions at this level:

[0053] Determine whether the currently selected organization in the compilation table is the organization or regulatory agency to which the exception user belongs; if so, display the total number of departments and detailed departments; if not, query the department compilation permission table by the selected organization and return the department.

[0054] After determining to enable the subordinate exception:

[0055] Determine whether the currently selected organization in the compilation table is a subordinate organization of the exception user or a regulatory agency; if so, display the total number of departments and detailed departments; if not, query the department compilation permission table according to the selected organization and return the department.

[0056] In determining the situation of "father looking after son":

[0057] If so, display the total number of departments and the departments configured in the department staffing authority table; otherwise, query the department staffing authority table according to the selected organization and return the departments.

[0058] Please refer to this again. Figure 4 As shown, the process for filtering by department and obtaining read / write permissions for the table is as follows:

[0059] First, log in as a user. You can open the task query, where the visible table range in the task is the visible table range of the reporting dimension. You can also open the task compilation and select to switch departments, such as detailed departments or department totals.

[0060] When selecting departmental totals, determine whether the user is an exception user:

[0061] If so, proceed to the total node configuration table range judgment: if it is within the table range, directly display the total node table range; if it is not within the table range, perform the analysis of the last-level unit. If it is within the last-level unit, display the sum of the visible table ranges of all detailed departments; if it is not within the table range, determine whether there are detailed departments. If there are, display the sum of the visible table ranges of all corresponding detailed departments. If not, directly read the number of the department total table of the lower-level organization. If the total node configuration table of the direct lower-level organization has a table, read it directly; otherwise, read the entire set of the detailed department table of the direct lower-level organization.

[0062] If not, then perform a parent-to-child judgment. If not, then enter the above total node configuration table range for judgment. If so, then determine the display based on the configured table range: take the intersection of the entire set of table ranges configured in the departmental structure of the current user's organization / regulatory agency and the total node table range, and follow the principle of vertical proximity of the organization; or, take the intersection of the entire set of table ranges configured in the departmental structure of the current user's organization / regulatory agency and the visible table range of the detailed departments, and follow the principle of vertical proximity of the organization.

[0063] When selecting a specific department, the table range for the department's organizational structure is displayed.

[0064] In one embodiment of this application, the dynamic multidimensional table generated by dynamically displaying the permission relationships between organizations, departments, forms, and users according to the departmental organization rules further includes: dynamically adjusting the scope of displayed departments and forms based on organizational level through the dynamic multidimensional table, configuring permission relationships through drag-and-drop, check-and-select, or range input, or updating permission rules in real time and synchronizing them to one or more functional combinations in the system functional modules; dynamically grouping by organizational level, department type, and form category through the multidimensional table; and quickly locating target permission configuration items through keyword retrieval.

[0065] Specifically, in practical work, the characteristics of dynamic multidimensional tables can be used to dynamically display the scope of departments and table formats based on organizational hierarchy. During this process, users with different permissions can see different table format data. Users can also determine the relationship between permissions through drag-and-drop, checkboxes, or range input methods, or update permission rules in real time when new needs arise to facilitate flexible configuration of table format display. Furthermore, users can also dynamically group data based on different attribute types, such as organizational hierarchy, department type, and table format classification, or use keyword search to locate the target permission configuration location. This process can be implemented using existing technologies, which will not be detailed here.

[0066] Overall, the multi-dimensional, visual, dynamic permission allocation method provided in this application can effectively achieve refined permission management. Taking annual budget preparation as an example, the annual budget consists of more than 100 tables. If all the report filling for each unit were done by the finance department staff, the workload would be arduous, time-consuming, and labor-intensive. In practice, it is necessary to break down the complex work and distribute it to specific business departments for collaborative completion. The specific configuration steps are as follows: system maintenance personnel add a departmental main dimension to the annual budget task, include the annual budget task in the departmental preparation scope, and after publication, the system automatically generates an organization, department, and user permission collection table. Figure 5A and Figure 5B The client can define more granular permissions based on each unit's management model and work arrangements. The final configuration process will then be based on the permission relationships maintained by the client to achieve refined permission management.

[0067] Therefore, by using a table format, flexible permission allocation is achieved, eliminating the need to assign permissions one by one by user and role as in the past. This reduces the complexity of permission allocation and improves the precision, flexibility, and real-time nature of management. Visualized permission management enables customized operation and maintenance, saving system maintenance costs. It also enhances the flexibility and real-time nature of operations and maintenance. A single table, from top to bottom, is unique to each organization. Leveraging multi-dimensional features, it dynamically displays units, departments, and table formats, eliminating unnecessary complexities and reducing operational complexity. The permission system is redefined from a departmental perspective, enabling collaborative autonomy within each organization's departments (each managing its own departmental distribution, budget responsibilities, and participants), resulting in a diverse range of organizational structures.

[0068] Please refer to Figure 6As shown, this application also provides a multidimensional visual dynamic permission allocation device, which includes: a rule configuration module, a multidimensional table generation module, a permission acquisition module, and a permission execution module; the rule configuration module is used to configure department compilation rules according to the relationship between organizations, departments, and forms and the permission allocation logic; the multidimensional table generation module is used to dynamically display the permission relationship between organizations, departments, forms, and users and generate a dynamic multidimensional table according to the department compilation rules; the permission acquisition module is used to collect permission data including the operation permissions of departments and forms and / or the affiliation relationship between departments and users according to a specified collection table style; the permission execution module is used to dynamically filter the departments, forms, and operation permissions visible to users during the system function execution process according to the dynamic multidimensional table and the permission data.

[0069] In the above embodiments, the device further includes a task management module and a dynamic update module. The task management module is used to bind permission-assigned tasks with business processes, wherein the business processes include at least one of budget preparation, report filling, and approval processes. The dynamic update module is used to synchronize the changes to the system function interface in real time when user permissions or departmental rules change. Specifically, in actual operation, the task management module and the dynamic update module can provide a user management window to enable users to manage and update permissions and business processes in real time. Users can also break it down into more detailed management windows as needed, and this application does not further limit this.

[0070] In another embodiment of this application, the multidimensional table generation module includes a control unit. The control unit is used to dynamically collapse or expand the list of departments and table templates according to organizational hierarchy, distinguish the read / write permission status of table templates using color markings, and / or configure special permission scenarios using integrated permission exception setting controls. Further, the permission execution module includes a query unit, a filtering unit, and a processing unit; the query unit is used to retrieve associated organizations and departments based on user identity; the filtering unit is used to generate an operable range of table templates based on the association rules between departments and table templates; and the processing unit is used to adjust the final permission result in conjunction with permission exception settings. Since the principle by which this device solves the problem is similar to that of the multidimensional visual dynamic permission allocation method, the implementation of this device can refer to the implementation of the multidimensional visual dynamic permission allocation method, and repeated details will not be elaborated further.

[0071] The beneficial technical effects of this application are as follows: Based on a multi-dimensional, visualized, and dynamic permission allocation system, and with the help of flexible and diverse display formats of multi-dimensional tables, in addition to satisfying the basic requirement of flexible and dynamic permission allocation by multiple dimensions such as organization, department, and form, enabling collaborative autonomy and diverse organizational structures within each organization; the overall interface is simple and easy to use, allowing for direct customization of operations and maintenance, reducing system maintenance costs, improving seamless collaboration between departments and employees of the system's users, ensuring real-time information sharing and flow, and improving operational efficiency.

[0072] This application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the above-described method.

[0073] This application also provides a computer-readable storage medium storing a computer program that performs the above-described methods.

[0074] This application also provides a computer program product, including a computer program / instructions that, when executed by a processor, implement the steps of the above-described method.

[0075] like Figure 7 As shown, the electronic device 600 may also include: a communication module 110, an input unit 120, an audio processor 130, a display 160, and a power supply 170. It is worth noting that the electronic device 600 does not necessarily need to include these components. Figure 7 All components shown; in addition, the electronic device 600 may also include Figure 7 For components not shown, please refer to existing technologies.

[0076] like Figure 7 As shown, the central processing unit 100, sometimes also referred to as a controller or operating control, may include a microprocessor or other processor device and / or logic device. The central processing unit 100 receives inputs and controls the operation of various components of the electronic device 600.

[0077] The memory 140 may be, for example, one or more of a cache, flash memory, hard drive, removable media, volatile memory, non-volatile memory, or other suitable devices. It may store the aforementioned failure-related information, and also store a program for executing that information. The central processing unit 100 may execute the program stored in the memory 140 to perform information storage or processing, etc.

[0078] Input unit 120 provides input to central processing unit 100. Input unit 120 may be, for example, a keypad or touch input device. Power supply 170 provides power to electronic device 600. Display 160 displays images and text. Display may be, for example, an LCD display, but is not limited thereto.

[0079] The memory 140 can be a solid-state memory, such as a read-only memory (ROM), random access memory (RAM), a SIM card, etc. It can also be a memory that retains information even when power is off, can be selectively erased, and contains more data; examples of this type of memory are sometimes referred to as EPROMs. The memory 140 can also be some other type of device. The memory 140 includes a buffer memory 141 (sometimes referred to as a buffer). The memory 140 may include an application / function storage unit 142 for storing application programs and function programs or processes for executing the operation of the electronic device 600 via the central processing unit 100.

[0080] The memory 140 may also include a data storage unit (data 143) for storing data, such as contacts, digital data, pictures, sounds, and / or any other data used by the electronic device. The driver storage unit (driver 144) of the memory 140 may include various drivers for the electronic device's communication functions and / or for performing other functions of the electronic device (such as messaging applications, address book applications, etc.).

[0081] The communication module 110 is a transmitter / receiver 110 that transmits and receives signals via antenna 111. The communication module (transmitter / receiver) 110 is coupled to the central processing unit 100 to provide input signals and receive output signals, which can be the same as in a conventional mobile communication terminal.

[0082] Based on different communication technologies, multiple communication modules 110 can be configured in the same electronic device, such as cellular network modules, Bluetooth modules, and / or wireless LAN modules. The communication module (transmitter / receiver) 110 is also coupled to a speaker 131 and a microphone 132 via an audio processor 130 to provide audio output via the speaker 131 and receive audio input from the microphone 132, thereby enabling typical telecommunications functions. The audio processor 130 may include any suitable buffer, decoder, amplifier, etc. Additionally, the audio processor 130 is coupled to a central processing unit 100, enabling on-device recording via the microphone 132 and on-device playback of stored audio via the speaker 131.

[0083] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0084] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0085] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0086] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0087] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of this application. It should be understood that the above descriptions are merely specific embodiments of this application and are not intended to limit the scope of protection of this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of protection of this application.

Claims

1. A multi-dimensional, visual, dynamic permission allocation method, characterized in that, The method includes: Configure departmental staffing rules based on the relationships and permission allocation logic between organizations, departments, and forms; A dynamic multidimensional table is generated based on the departmental organization rules. The generated dynamic multidimensional table is used to dynamically display the permission relationships between organizations, departments, table templates, and users. Collect permission data according to the specified collection form style, and the permission data includes the operation permissions of the department and the form style and / or the affiliation relationship between the department and the user; Based on the dynamic multidimensional table and the permission data, the system dynamically filters the departments, forms, and operation permissions visible to users during the execution of system functions. The departmental organization rules include one or more combinations of departmental view permission collection mode, table view permission collection mode and hybrid view permission collection mode; The department view permission acquisition mode is used to limit the department's operation permissions on the form; the form view permission acquisition mode is used to limit the department and user scope to which the form belongs; the hybrid view permission acquisition mode is used to dynamically generate permission rules by combining the department view and the form view. Based on the aforementioned departmental organization rules, a dynamic multidimensional table is generated to dynamically display the permission relationships between organizations, departments, forms, and users, and also includes: The dynamic multidimensional table can be used to dynamically adjust the displayed departments and table scope according to the organizational hierarchy, or to configure permission associations by dragging, checking or range input, or to update permission rules in real time and synchronize them to one or more function combinations in the system function modules. Dynamically generate permission filtering chains based on the user's organization and department; The filtering chain includes: determining the scope of visible departments based on the organization associated with the user, filtering operable forms based on the association rules between departments and forms, and / or adjusting the read and write permissions of the final form based on permission exception settings.

2. The multi-dimensional, visual, dynamic permission allocation method according to claim 1, characterized in that, The operation permissions include allowing higher-level units to view data from lower-level units, allowing designated department leaders to view data from all departments under their organization, and / or allowing cross-organizational departments to view data from lower-level units within a specified scope.

3. The multi-dimensional, visual, dynamic permission allocation method according to claim 1, characterized in that, The operation permissions include importing the permission relationships of organizations, departments and users in batches through a multidimensional table; and generating permission rules based on a preset template and associating them with business processes.

4. The multi-dimensional, visual, dynamic permission allocation method according to claim 1, characterized in that, The dynamic display of permission relationships between organizations, departments, forms, and users based on the departmental organization rules also includes: dynamically grouping the multidimensional table according to organizational level, department type, and form classification; and quickly locating target permission configuration items through keyword retrieval.

5. A multi-dimensional, visual, dynamic permission allocation device, characterized in that, The device includes: a rule configuration module, a multidimensional table generation module, a permission acquisition module, and a permission execution module; The rule configuration module is used to configure department compilation rules based on the relationships and permission allocation logic between organizations, departments, and forms. The multidimensional table generation module is used to generate dynamic multidimensional tables according to the departmental organization rules. The generated dynamic multidimensional tables are used to dynamically display the permission associations between organizations, departments, table templates, and users. The permission collection module is used to collect permission data according to a specified collection table style. The permission data includes the operation permissions of departments and table styles and / or the affiliation relationship between departments and users. The permission execution module is used to dynamically filter the departments, forms and operation permissions visible to users during the system function execution process based on the dynamic multidimensional table and the permission data. The departmental organization rules include one or more combinations of departmental view permission collection mode, table view permission collection mode and hybrid view permission collection mode; The department view permission acquisition mode is used to limit the department's operation permissions on the form; the form view permission acquisition mode is used to limit the department and user scope to which the form belongs; the hybrid view permission acquisition mode is used to dynamically generate permission rules by combining the department view and the form view. Based on the aforementioned departmental organization rules, a dynamic multidimensional table is generated to dynamically display the permission relationships between organizations, departments, forms, and users, and also includes: The dynamic multidimensional table can be used to dynamically adjust the displayed departments and table scope according to the organizational hierarchy, or to configure permission associations by dragging, checking or range input, or to update permission rules in real time and synchronize them to one or more function combinations in the system function modules. Dynamically generate permission filtering chains based on the user's organization and department; The filtering chain includes: determining the scope of visible departments based on the organization associated with the user, filtering operable forms based on the association rules between departments and forms, and / or adjusting the read and write permissions of the final form based on permission exception settings.

6. The multi-dimensional visual dynamic permission allocation device according to claim 5, characterized in that, The multidimensional table generation module includes a control unit, which is used to dynamically fold or expand the list of departments and table samples according to the organizational hierarchy, distinguish the read and write permission status of the table samples by color marking, and / or configure special permission scenarios using the integrated permission exception setting control.

7. The multi-dimensional visual dynamic permission allocation device according to claim 6, characterized in that, The permission execution module includes a query unit, a filtering unit, and a processing unit; The query unit is used to retrieve associated organizations and departments based on the user's identity; The filtering unit is used to generate a range of operable forms based on the association rules between departments and forms. The processing unit is used to adjust the final permission result in conjunction with permission exception settings.

8. The multi-dimensional visual dynamic permission allocation device according to claim 5, characterized in that, The device also includes a task management module and a dynamic update module; The task management module is used to bind the permission-assigned tasks to business processes, and the business processes include at least one of budget preparation, report filling, and approval processes. The dynamic update module is used to synchronize changes to the system function interface in real time when user permissions or departmental rules change.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the method of any one of claims 1 to 4.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method of any one of claims 1 to 4.

11. A computer program product, comprising a computer program / instructions, characterized in that, When the computer program / instructions are executed by the processor, they implement the steps of the method described in any one of claims 1 to 4.

Images