Online document management method and device, electronic equipment and storage medium

Abstract

The invention provides an online document management method and device, electronic equipment and a storage medium, and is applied to the technical field of computers. The online document management method comprises the following steps: displaying a first management interface of an online document created by an account organization in a communication application; in response to triggering a first permission setting operation for the online document in a first area in the first management interface, configuring a first target member in document members added into the online document to execute a first sensitive operation on the online document; and displaying the first permission setting result on the first management interface. According to the embodiment of the invention, more detailed document hierarchical authority control can be realized, so that the security and compliance of online documents can be improved.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to an online document management method, apparatus, electronic device, and storage medium. Background Technology

[0002] Online documents are documents that can be created, edited, viewed, and shared within an internet browser. Online documents support collaborative editing by multiple users simultaneously, allowing users in different locations to view and modify document content in real time, greatly improving the efficiency and convenience of team collaboration. With the widespread use of online documents, more and more teams and organizations are using them to achieve multi-user collaborative operations. For example, businesses can use online documents to manage work materials and organize meeting minutes; teachers can use them to write lesson plans, assign homework and notices; and students can use them to submit assignments.

[0003] However, existing online document management solutions still suffer from insufficient security, inconvenience in management, and compliance risks. Summary of the Invention

[0004] This application provides an online document management method, apparatus, electronic device, and storage medium, which can achieve more granular document hierarchical permission control, thereby improving the security and compliance of online documents.

[0005] In a first aspect, embodiments of this application propose an online document management method, comprising:

[0006] Displays the first management interface for online documents created by the account organization in the communication application;

[0007] In response to triggering a first permission setting operation for the online document in the first area of ​​the first management interface, a first target member among the document members added to the online document is configured to perform a first sensitive operation on the online document;

[0008] The first permission setting result is displayed on the first management interface.

[0009] Secondly, embodiments of this application propose an online document management device, comprising:

[0010] The display module is used to display the first management interface of online documents created by the account organization in the communication application;

[0011] The configuration module is configured to respond to a first permission setting operation for the online document triggered in the first area of ​​the first management interface, and configure a first target member among the document members added to the online document to perform a first sensitive operation on the online document;

[0012] The display module is also used to display the first permission setting result on the first management interface.

[0013] Thirdly, embodiments of this application provide an electronic device, including: a processor and a memory, the memory being used to store a computer program, and the processor being used to call and run the computer program stored in the memory to perform the method described in the first aspect.

[0014] Fourthly, embodiments of this application provide a computer-readable storage medium, characterized in that the storage medium includes computer instructions that, when executed by a computer, cause the computer to perform the method as described in the first aspect.

[0015] Fifthly, embodiments of this application provide a computer program product including computer program instructions that cause a computer to perform the method described in the first aspect.

[0016] In a sixth aspect, embodiments of this application provide a computer program that causes a computer to perform the method described in the first aspect.

[0017] The online document management method of this application embodiment, for online documents created by an account organization in a communication application, responds to a first permission setting operation triggered on the online document, configures a first target member among the document members added to the online document to perform a first sensitive operation on the online document, and displays the corresponding first permission setting result. By configuring the first target member among all document members to perform the first sensitive operation on the online document, compared with related solutions that configure all added document members to perform sensitive operations on the online document, this application embodiment can achieve more granular document hierarchical permission control, thereby improving the security and compliance of online documents. Attached Figure Description

[0018] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0019] Figure 1 This is a schematic diagram of an implementation environment involved in an embodiment of this application;

[0020] Figure 2 A flowchart illustrating an online document management method provided in an embodiment of this application;

[0021] Figure 3 A schematic diagram of the interactive flow of an online document management method provided in an embodiment of this application;

[0022] Figures 4A to 4DThis is a schematic diagram of a terminal interface provided in an embodiment of this application;

[0023] Figures 5A to 5B A schematic diagram of a terminal interface provided in another embodiment of this application;

[0024] Figures 6A to 6B A schematic diagram of a terminal interface provided in another embodiment of this application;

[0025] Figure 7 A flowchart illustrating an online document management method provided in another embodiment of this application;

[0026] Figure 8 A schematic diagram of the interaction flow of an online document management method provided in another embodiment of this application;

[0027] Figures 9A to 9D A schematic diagram of a terminal interface provided in another embodiment of this application;

[0028] Figures 10A to 10D A schematic diagram of a terminal interface provided in another embodiment of this application;

[0029] Figure 11 This is a schematic diagram illustrating the process of setting advanced user access permissions according to an embodiment of this application;

[0030] Figure 12 A flowchart illustrating the setting of advanced user access permissions is provided in another embodiment of this application;

[0031] Figure 13 A schematic block diagram of an online document management device provided in an embodiment of this application;

[0032] Figure 14 This is a block diagram of an electronic device involved in an embodiment of this application;

[0033] Figure 15 This is a block diagram of a terminal device involved in an embodiment of this application. Detailed Implementation

[0034] The technical solutions in the embodiments of this application will now be described with reference to the accompanying drawings.

[0035] It should be understood that in the embodiments of this application, "B corresponding to A" means that B is associated with A. In one implementation, B can be determined based on A. However, it should also be understood that determining B based on A does not mean determining B solely based on A; B can also be determined based on A and / or other information.

[0036] In the description of this application, unless otherwise stated, "a plurality of" means two or more.

[0037] Furthermore, to facilitate a clear description of the technical solutions in the embodiments of this application, the terms "first" and "second" are used in the embodiments of this application to distinguish identical or similar items with substantially the same function and effect. Those skilled in the art will understand that the terms "first" and "second" do not limit the quantity or execution order, and the terms "first" and "second" are not necessarily different.

[0038] The implementation environment of the embodiments of this application is described below.

[0039] Figure 1 This is a schematic diagram of an implementation environment provided for an embodiment of this application, such as... Figure 1 As shown, this implementation environment includes: terminal device 102 and server 104. The terminal device 102 and server 104 are connected via wired or wireless means.

[0040] In this embodiment, a communication application client is installed on the terminal device 102, and the server 104 can be understood as the server-side or backend of the communication application. The communication application client can provide online document services. Objects (e.g., users) can interact with the communication application client installed on the terminal device 102, and the server 104 can provide services to the terminal device 102 or the communication application client installed on the terminal device 102.

[0041] For example, the communication application client may include an instant messaging application client or a non-instant messaging client, and this embodiment does not limit it.

[0042] In this embodiment, an object (e.g., a user) can log in to a communication application client on terminal device 102 using an account belonging to an account organization, and access online documents through the communication application client. For example, terminal device 102 can initiate a document permission setting request to the server 104 corresponding to the communication application client to configure the permission settings of the online document, thereby improving the security of the online document and reducing compliance risks. Terminal device 102 can display a management interface for the online document, and in response to a permission setting operation triggered in a specific area of ​​the management interface for the online document, configure a first target member among the document members added to the online document to perform relevant sensitive operations on the online document, and display the permission setting result on the first management interface.

[0043] Optional, such as Figure 1As shown, server 104 can also connect to data storage system 106, such as a database, to provide data storage services for server 104. For example, it can store data related to online documents, including but not limited to online document content data, online document log data, and online document configuration data. The data storage system can be integrated on server 104 or deployed on the cloud or other servers, without limitation.

[0044] In some embodiments, terminal device 102 can refer to a type of device that has rich human-computer interaction methods, internet access capabilities, typically runs various operating systems, and has strong processing capabilities. Terminal device 102 includes, but is not limited to: desktop computers, laptops, smartphones, tablets, IoT devices, and portable wearable devices. IoT devices can be smart speakers, smart TVs, smart air conditioners, smart in-vehicle devices, etc. Portable wearable devices can be smartwatches, smart bracelets, head-mounted devices, etc. Terminal devices are often equipped with a display device, which can also be a monitor, display screen, touchscreen, etc., and the touchscreen can also be a touch screen, touch panel, etc.

[0045] In some embodiments, the server 104 may be one or more servers. When there are multiple servers, at least two servers may be used to provide different services, and / or at least two servers may be used to provide the same service, such as providing the same service in a load-balanced manner. This application embodiment does not limit this. The server may be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. The server may also be a node in a blockchain.

[0046] Terminal device 102 and server 104 can be connected directly or indirectly via wired or wireless communication, and this application does not limit this. This application does not limit the number of servers 104 or terminal devices 102. The solution provided in this application can be implemented independently by terminal device 102, independently by server 104, or jointly by terminal device and server, and this application does not limit this.

[0047] It should be understood that Figure 1 This is merely an illustrative example and does not specifically limit the application scenarios of the embodiments of this application.

[0048] The technical solutions of the embodiments of this application will be described in detail below through some examples. The following embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments.

[0049] Figure 2 This is a schematic flowchart of an online document management method 200 provided in an embodiment of this application. Method 200 can be executed by any electronic device with data processing capabilities; for example, the electronic device can be implemented as... Figure 1 The server 102 or terminal device 101 in the text can also be Figure 1 The system consisting of server 102 and terminal device 101 shown is not limited in this application. In the embodiments of this application, the method 200 is described as being executed by the terminal device.

[0050] like Figure 2 As shown, the online document management method 200 includes steps S210 to S230.

[0051] S210 displays the first management interface for online documents created by the account organization in the communication application.

[0052] Online documents can be documents that support online editing by multiple users, such as Word documents, Excel spreadsheets, and PowerPoint presentations. Editing operations performed by one or more people on an online document can be synchronized in real time to the terminal devices of other members who have joined the online document.

[0053] Communication applications can be applications that use computer technology to achieve data communication over a network, such as instant messaging applications, email applications, online conferencing applications, and various other applications capable of communication. Account organizations can refer to an organization composed of accounts from multiple communication applications, allowing for unified management of various accounts within the application. For example, an account organization can be a corporate organization, meaning accounts belonging to the same corporate organization can belong to the same corporate account organization. Another example is a class organization, where accounts belonging to the same class can belong to the same class account organization. Communication applications support the creation of different account organizations for multiple accounts based on user needs, enabling unified management of these accounts through these organizations. For instance, an online document can be created for each account belonging to a single account organization, allowing accounts within that organization to perform collaborative operations on the document, such as accessing and editing it.

[0054] Optionally, in this embodiment of the application, the terminal device may display the online document being processed on the interface. The online document may be created through an account organization in a communication application.

[0055] As an example, a user (creator) can create an online document using an account belonging to an account organization. The first management interface of the created online document will be triggered on the display interface of the online document, where the permission management of the created online document can be configured.

[0056] As another example, a user (administrator) can select a target online document in at least one online document created by the account organization, and trigger a first associated interface to display the target online document in the display interface of the online document. In the first management interface, the permission management of the target online document can be changed.

[0057] S220, in response to a first permission setting operation for an online document triggered in a first area of ​​the first management interface, configures a first target member among the document members added to the online document to perform a first sensitive operation on the online document.

[0058] Members joining an online document can be either the creator or owner of the document within the communication application (including but not limited to administrators and super administrators) who invites other members from their account organization, or members outside the account organization (including but not limited to accounts in other communication applications or members from collaborating organizations within the account organization within the communication application) who join the online document to perform collaborative operations, such as joint editing and viewing. Alternatively, in other possible implementations, document members can join the online document via a link or QR code. Optionally, it can be configured that document members need to request permission from the administrator before joining the online document via a link or QR code; that is, document members require administrator confirmation before joining the online document.

[0059] In some embodiments, permissions can be further set for each document member who joins the online document. For example, the first document member within the organization may have edit permissions when joining the online document, while the second document member outside the organization may have only view permissions when joining the online document.

[0060] Online documents may contain sensitive content, at least partially belonging to the account organization. In such cases, document members may perform sensitive operations on the online document. Sensitive content refers to document content within an online document that carries sensitive information. Sensitive information can refer to information that has been improperly used or accessed or modified without authorization, thereby hindering the implementation of public interest projects or infringing upon an individual's legally protected right to privacy. Sensitive information can fall into different data categories depending on the user. For example, for organizations, sensitive information may include confidential information such as major corporate decisions, contracts, important meeting minutes, company account passwords, project documents, pricing documents, and sales strategies. Similarly, for individuals within an organization, information involving their internal privacy can also be considered sensitive information. The specific data categories for sensitive content can be flexibly set according to actual requirements.

[0061] Sensitive operations can be interactive actions triggered by users on online documents. Specifically, they can be interactive actions that pose a risk of leakage when interacting with sensitive content in online documents, such as various types of operations like commenting on online documents, copying, exporting, printing, generating copies, saving as templates, etc.

[0062] Specifically, online documents can record various data of an account organization, and member accounts with corresponding permissions can perform various operations on the online document according to their permissions. When an online document contains at least some sensitive content belonging to the account organization, that is, when the document content of the online document carries sensitive information of the account organization, the online document is a sensitive document belonging to the account organization. In this case, more granular document hierarchical permission control can be implemented for all document members of the online document. For example, the first target member among the document members added to the online document can be configured to perform the first sensitive operation on the online document, that is, have the permission to perform the first sensitive operation on the online document.

[0063] Specifically, the first management interface is an interface for managing permissions for online documents. A first area of ​​the first management interface displays a setting area for performing a first sensitive operation on the online document; that is, the setting area for performing a first sensitive operation on the online document is the first area. Optionally, the first management interface may also include setting areas for performing other sensitive operations on the online document; this embodiment does not limit this. In response to triggering a first permission setting operation for the online document in the first area of ​​the first management interface, a first target member among the document members added to the online document is configured to perform the first sensitive operation on the online document, i.e., have the permission to perform the first sensitive operation on the online document. In other words, this embodiment provides more detailed permission hierarchy settings for all document members added to the online document, enabling some document members, i.e., the first target member, to perform the first sensitive operation on the online document.

[0064] Therefore, by configuring the first target member among all document members to perform a first sensitive operation on the online document, this embodiment of the application achieves more granular document hierarchical permission control, which is beneficial to improving the security and compliance of online documents, compared to related solutions that configure all document members added to the online document to perform sensitive operations on the online document, such as the first sensitive operation.

[0065] S230 displays the first permission setting results on the first management interface.

[0066] The first permission setting result can be used to indicate to the first target member in the document that the first sensitive operation can be performed on the online document, thereby prompting the user with the member information that can perform the first sensitive operation on the online document.

[0067] Specifically, the terminal device displays the first permission setting result corresponding to the first permission setting operation on the first management interface, so as to prompt the user that the first target member in the configured document members can successfully perform the first sensitive operation on the online document. Thus, the user can determine which document members can perform the first sensitive operation on the online document based on the first permission setting result.

[0068] In a specific application, such as Figure 3 As shown, a user can log in to the communication application on their terminal device using an account within the application's account organization and create an online document A. The server stores the data of online document A, such as the document's data. Here, the user who creates online document A is the creator of online document A. See also... Figure 3Users can also trigger the first permission setting operation for online document A on their terminal devices. Optionally, the user triggering the first permission setting operation for online document A can be the same user as the user who created online document A, for example, both being the creators of online document A. Optionally, the user triggering the first permission setting operation for online document A can be a different user from the user who created online document A, for example, the user triggering the first permission setting operation for online document A can be an administrator. After a user triggers the first permission setting operation for online document A on their terminal device, the terminal device sends a request message to the server to request permission settings changes for online document A. This first permission setting operation configures the first target member among the document members added to online document A to perform the first sensitive operation on online document A. Subsequently, the server responds to the request message, changes the permission settings for online document A, configuring the first target member among the document members added to online document A to perform the first sensitive operation on online document A. Then, the server returns the permission settings for online document A to the terminal device, and the terminal device displays the first permission setting result for online document A, i.e., it shows that the first target member among the document members added to online document A can perform the first sensitive operation on the online document.

[0069] In some embodiments, the server may also return the permission settings of online document A to all document members who have joined the online document, and the permission changes will be reflected in real time on the terminal device interfaces of all document members. For example, the server returns the permission settings of online document A to the terminal device of the first target member, showing that the terminal device has the permission to perform a first sensitive operation on online document A. Optionally, the terminal device corresponding to the first target member can be... Figure 3 The terminal devices in this application are not limited in this respect. For example, the server returns the permission settings of online document A to the terminal devices of other members in the document group, and the terminal devices of the other members show that their permissions are not allowed to perform the first sensitive operation on online document A.

[0070] Therefore, the online document management method of this application embodiment, for online documents created by account organizations in communication applications, in response to a first permission setting operation triggered on the online document, configures a first target member among the document members added to the online document to perform a first sensitive operation on the online document, and displays the corresponding first permission setting result. By configuring the first target member among all document members to perform the first sensitive operation on the online document, compared with related solutions that configure all added document members to perform sensitive operations on the online document, this application embodiment can achieve more granular document hierarchical permission control, thereby improving the security and compliance of online documents.

[0071] In some embodiments, the first target member includes at least one of an administrator, an editable member of an online document, and a designated document member, and the first sensitive operation includes at least one of posting a comment, copying, printing, exporting, generating a copy, and saving as a template.

[0072] For example, in response to the first area of ​​the first management interface triggering the first permission setting operation for online documents, it can be configured so that only administrators can perform comment operations on online documents, or both administrators and editable members can perform comment operations on online documents. Here, the comment operation refers to the interactive operation of expressing opinions and views on the content of the online document.

[0073] Specifically, when online documents contain sensitive content, allowing all document members to comment may introduce inaccurate or misleading information, thereby undermining the original intent or accuracy of the online document. Furthermore, allowing all document members to comment indiscriminately could lead to chaotic and disorderly discussions, even sparking unnecessary disputes and increasing the workload of communication and coordination. However, configuring only administrators, or administrators and editors, to comment on online documents allows administrators and editors to provide more accurate comments, thus improving the completeness and accuracy of the document content. On the other hand, configuring administrators or editors to comment on online documents ensures more organized and efficient discussions and collaboration, allowing those with editing privileges or administrators to focus more on updating and modifying the document, thereby improving work efficiency.

[0074] For example, in response to the first permission setting operation triggered in the first area of ​​the first management interface for an online document, it is possible to configure designated members to perform comment operations on the online document. For instance, the designated document members can be document members manually selected by the user within the organization. Specifically, when the online document content contains sensitive information, the first permission setting operation can select specific document members within the organization to perform comment operations on the online document. By configuring designated members to perform comment operations on online documents, it is possible to prevent other document members from introducing inaccurate or misleading information, thereby further improving the integrity and accuracy of the document content and ensuring that discussions and collaborations on online documents are more orderly and efficient.

[0075] Similarly, in response to the first area in the first management interface, a first permission setting operation for the online document can be triggered, configuring at least one of the following document members: administrator, editable member, and specified document member, to perform at least one of the following operations on the online document: copy, print, export, generate a copy, and save as a template.

[0076] Among these, copying refers to the interactive operation of copying the content of an online document to the clipboard for pasting; exporting refers to the interactive operation of exporting the online document to the local terminal device; printing refers to the interactive operation of printing the content of the online document; generating a copy refers to the interactive operation of saving an identical backup file of the online document; and saving as a template refers to the interactive operation of saving the online document in a special format that allows the preset elements of the document's format, layout, style, and content framework to be quickly applied when creating a new document. In addition, the first sensitive operation may also include interactive operations such as modifying, deleting, adding, screenshotting, and screen recording of the online document.

[0077] Therefore, the online document management method of this application embodiment, through more granular document hierarchical permission control, can restrict different document members from performing corresponding sensitive operations on online documents according to needs, thereby helping to reduce the risk of leakage of sensitive content in online documents and improving the security and compliance of online documents.

[0078] In some embodiments, displaying a first management interface for online documents created by an account organization in a communication application includes: displaying the online document in a document display area in response to a trigger operation of an operation account with permission setting permissions for the online document; the operation account being the operation account of the creator of the online document or the operation account of an administrator; displaying an operation menu associated with the online document in response to a menu wake-up trigger operation of the operation account in the online document; and displaying the first management interface for the online document in response to a permission management trigger operation triggered by the operation account in the operation menu.

[0079] In this context, the operation account is the account used by the user to log in to the communication application; it is an account held by the user. In this embodiment, the operation account is the account that has permission settings for online documents, meaning the user can configure or change the permission settings for online documents through the operation account. Online document permissions include determining which document members can perform at least one of the following operations: editable, accessible, browse-only, post comments, copy, export, print, generate a copy, or save as a template. In this embodiment, the operation account may be, for example, the operation account of the online document creator, or the operation account of an administrator or super administrator with management privileges within an account organization. An administrator's operation account can also be called a management account, i.e., an account with online document management privileges. The document display area is the area used to display online documents; the distribution, style, and format of the document display area can be designed according to actual needs.

[0080] Specifically, when a user's account has permission settings for online documents, the user can trigger an access operation for the online document using their account. The terminal device responds to this access operation by displaying the online document in the document display area. The online document is created through an account organization within the communication application. Then, the user can trigger a menu wake-up operation for the online document using their account. The terminal device responds to this menu wake-up operation by displaying the operation menu associated with the online document. Within the operation menu interface, the user can trigger permission management operations using their account. The terminal device responds to this permission management operation by displaying the first management interface for the online document.

[0081] In some specific implementations, such as Figure 4A As shown, the terminal device can display various online documents created by the account organization. For example, the online document list 401 displays the three documents recently viewed by the user's account: Document 1, Document 2, and Document 3. The user can select the online document they want to access from the online document list 401, such as Document 1. Figure 4B As shown, when a user selects to access document 1, the terminal device can display the document content of document 1, such as content 1. Furthermore, the user can trigger interaction by clicking the function button 402 associated with document 1, for example, the user can click function button 402 to trigger an operation on document 1. Figure 4C As shown, after the user clicks function button 402, the terminal device displays an operation menu 403 for document 1. The operation menu 403 displays information about document 1, such as creator information, creation time, and file size. The operation menu 403 may also include various operation options for document 1, such as permission management, adding shortcuts, browsing history, version history, saving as template, exporting, printing, and more. The user can interact with document 1 by triggering interactions with these operation options; for example, the user can click the permission management option. Figure 4D As shown, after the user clicks the permission management option, the terminal device displays the first management interface, specifically an example of a 404 pop-up (first management interface). The distribution, style, and form of the 404 pop-up can be designed according to actual needs.

[0082] In a specific example, see [link to example]. Figure 4DUsers can trigger interaction by clicking the selection button 501 corresponding to "Who can post a comment" in the pop-up 404. For example, clicking button 501 allows users to select the first target members for a sensitive operation related to "Who can post a comment," i.e., which target members can post comments on the associated online document, such as posting dynamic comments. The selection button 501 corresponding to "Who can post a comment" in the pop-up 404 is an example of the aforementioned first area. Figure 5A As shown, after the user clicks the selection button 501, the terminal device displays a selection box 502 for the first target member, which may include options such as all document members, editable members only, and administrators only. The user can interact with the selection box 502 to select which document members can post comments on the associated online document. For example, in... Figure 5A In this context, users can click the "Administrator Only" option, thus allowing only administrators to post comments on the corresponding online documents. For example... Figure 5B As shown, when the user clicks the "Administrator Only" option, the original "All Document Members" option in button 501 is changed to "Administrator Only". The description in the "Who can post comments" column is changed from "All document members can post dynamic comments" to "Administrators only can post dynamic comments", thus successfully configuring the system to allow only administrators to post dynamic comments.

[0083] Understandably, the above configuration, along with the attached diagram, outlines the target members for "who can post comments." A similar approach can be used to configure "who can copy content," for example, allowing "only administrators" to copy content.

[0084] In some embodiments, in response to the failure of the first permission setting operation, a first operation interception message is displayed on the first management interface. The first operation interception message is used to indicate that the execution of the first permission setting operation has been intercepted.

[0085] For example, if the first permission setting operation is for advanced document features and the account organization to which the operating account belongs has not enabled such advanced document features, the first permission setting operation may fail. For instance, if the account organization to which the operating account belongs has not enabled the advanced document features that configure the first target document member to perform the first sensitive operation on the online document, when the user triggers the first permission setting operation, the terminal device responds by sending a configuration change request to the server to request permission settings changes for the online document. This configuration change request may carry information about the operating account and the account organization. The server confirms whether the advanced document features are enabled based on this information. If it is determined that the account organization has not enabled the advanced document features, the permission change setting fails. In this case, the terminal device, responding to the failure of the first permission setting operation, intercepts the first permission setting operation and displays first operation interception information, indicating that the execution of the first permission setting operation has been blocked.

[0086] In a specific example, see Figure 6A When only administrators can post comments, it's considered an advanced document feature. For example, the "Administrator Only" option in the first target member's selectable option box 601 is marked with a "v". If the account organization hasn't enabled this advanced document feature, when the user hovers their mouse over the "Administrator Only" option, a guidance overlay 602 can be displayed on the interface, prompting that after enabling the advanced feature, only document administrators can post comments. Optionally, the advanced document feature can also provide more advanced capabilities such as larger document capacity and PDF format conversion. Optionally, a "Learn More" button can also be displayed in this overlay 602 to guide users to enable the advanced document feature. See also... Figure 6B When a user clicks the "Administrator Only" option in selection box 601, the setting to allow only administrators to post comments will fail because the advanced document features are not enabled. The interface will then display first operation interception information 603, indicating that "Administrator Only" is an advanced document feature, and that posting comments can be enabled only by document administrators. Optionally, this first operation interception information 603 area can also display "Learn More" and "Cancel" buttons. Clicking the "Cancel" button will return the user to... Figure 4D The management interface.

[0087] Optionally, when only administrators can post comments as an advanced document feature, in the above... Figure 4D , Figure 5A , Figure 5B This advanced feature has been enabled in the corresponding embodiment. Figure 6A and Figure 6B In the corresponding embodiment, this advanced feature was not enabled, and user operations were blocked.

[0088] In some embodiments, such as Figure 7 As shown, the online document management method 200 may further include steps S240 to S260.

[0089] S240, the entry point for enabling confidentiality mode is displayed in the second area of ​​the first management interface.

[0090] The first management interface is used to manage permissions for online documents. A second area of ​​this interface displays an entry point for enabling confidentiality mode, which is used to activate confidentiality mode for online documents. Online documents in confidentiality mode have a higher security level and are less prone to leakage compared to those not in confidentiality mode. Optionally, confidentiality mode can also be called security mode or other specific modes; this embodiment does not limit the specific terminology used.

[0091] S250, in response to the triggering of a second permission setting operation for the online document at the confidentiality mode entry point, configure the online document to enable confidentiality mode.

[0092] Specifically, for online documents that may contain sensitive content belonging at least partially to an account organization, to prevent leaks of this type of online document, a second permission setting operation can be triggered at the corresponding confidentiality mode activation entry point to configure the online document to enter confidentiality mode. Specifically, the terminal can display the confidentiality mode activation entry point in the second area of ​​the first management interface, allowing the user to trigger an operation at this entry point. In response to the user's trigger operation, the terminal device enables the online document's confidentiality mode, thus configuring the online document to be in confidentiality mode. Here, the area displaying the confidentiality mode activation entry point is the second area.

[0093] The specific configuration of the confidentiality mode can be set according to actual needs. For example, the confidentiality mode includes at least one of the following:

[0094] Only members of the account's organization can join the online document;

[0095] Adding documents to the online documentation requires administrator approval.

[0096] Add watermarks to online documents;

[0097] Only administrators can copy online documents;

[0098] Displays the security icon for the online document.

[0099] It should be understood that the above configurations can be combined in any way to obtain the configuration corresponding to the confidentiality mode.

[0100] The online document can be joined by members of the account organization only. This means that accounts within the account organization that created the online document can join as document members, while members outside the account organization (such as accounts from other organizations outside the enterprise) or accounts from other communication applications cannot join. Joining an online document requires administrator approval. This means that joining an online document through any method requires requesting permission from the administrator, and only after administrator approval can the document be joined. Only administrators can copy the online document content. This includes allowing administrators to perform interactive operations such as copying, printing, exporting, creating copies, and saving as templates; document members cannot copy the online document content. Operations performed by administrators, such as approval, commenting, and copying content, must be performed using the administrator's account. A watermark is added to the online document by default in confidential mode. Watermarks can be either visible or hidden, without limitation. A security icon is displayed for online documents in confidential mode, visually indicating the document's security status. Therefore, configuring a confidentiality mode can give online documents the necessary security features, such as allowing only accounts within the same account organization to join, approval processes, document watermarks, and allowing only administrators to copy content, thus giving online documents a higher security standard.

[0101] S260 displays the second permission setting results on the first management interface.

[0102] The second permission setting result can be used to indicate that the online document is in confidential mode, thereby prompting the user about the security level of the online document.

[0103] Specifically, the terminal device displays the result of the second permission setting operation on the first management interface to indicate that the configuration of the online document in confidential mode was successful, so that the user can determine that the online document is in confidential mode based on the result of the second permission setting.

[0104] In a specific application, such as Figure 8 As shown, a user can trigger a second permission setting operation on online document A on a terminal device to configure online document A to enable confidentiality mode. In response to the user's triggering of the second permission setting operation on the terminal device, the terminal device sends a request message to the server to request that confidentiality mode be enabled for online document A. Subsequently, the server responds to this request message and configures online document A in confidentiality mode. Then, the server returns the permission settings for online document A to the terminal device, and the terminal device displays the result of the second permission setting for online document A, indicating that confidentiality mode for online document A is enabled.

[0105] Therefore, the online document management method of this application embodiment displays a confidentiality mode activation entry in the second area of ​​the first management interface. In response to triggering a second permission setting operation for the online document through the confidentiality mode activation entry, it configures the online document to enable confidentiality mode and displays the corresponding second permission setting result. By configuring online document A to enable confidentiality mode, it is possible to support rapid permission changes, thereby enabling more flexible, convenient, and detailed management of online document permissions, which helps improve the security and compliance of online documents.

[0106] In some specific examples, such as Figure 9A As shown, users can trigger interaction through the confidentiality mode activation entry 901 in pop-up window 405 (another example of the first management interface). For example, users can click on activation entry 401 to trigger the online document to enter confidentiality mode. The confidentiality mode activation entry 901 is an example of the second area mentioned above. Optionally, as... Figure 9B As shown, after a user clicks the entry point 901, the terminal device can display a pop-up window 902 confirming the activation of document confidentiality mode. This pop-up window displays a message prompting the user to confirm the activation of document confidentiality mode. For example, pop-up window 902 may display the message "After activation, members outside the account organization cannot join the document; members within the account organization must be approved by the document administrator before joining; document members cannot copy or export document content," as well as an "Activate" button and a "Cancel" button. If the user interacts with the "Activate" button, such as clicking the "Activate" button, the online document will activate confidentiality mode. If the user interacts with the "Cancel" button, such as clicking the "Cancel" button, the online document will not activate confidentiality mode. Figure 9C As shown, after the user clicks the enable button, the corresponding entry 901 for enabling confidentiality mode will light up, indicating that the online document has enabled confidentiality mode.

[0107] In some embodiments, in response to the failure of the second permission setting operation, a second operation interception message is displayed on the first management interface. The second operation interception message is used to indicate that the execution of the second permission setting operation has been intercepted.

[0108] For example, if the second permission setting operation is for advanced document features and the organization to which the operating account belongs has not enabled such advanced document features, the second permission setting operation may fail. For instance, if the organization to which the operating account belongs has not enabled the advanced document features for configuring confidential mode, when the user triggers the second permission operation, the terminal device responds by sending a configuration change request to the server to request configuring online documents to confidential mode. The server confirms whether the advanced document features are enabled based on the relevant information of the operating account and the organization. If it is determined that the organization has not enabled the advanced document features, the permission change setting fails. In this case, the terminal device, responding to the failure of the second permission setting operation, intercepts the second permission setting operation and displays the second operation interception information, indicating that the execution of the second permission setting operation has been blocked.

[0109] In a specific example, see Figure 9D When the confidentiality mode is set to advanced document features, if the account organization has not enabled this advanced document feature, when the user clicks the confidentiality mode activation entry 901, or when the user hovers the mouse over the confidentiality mode activation entry 901, a guidance pop-up 904 will be displayed on the interface, indicating that after the confidentiality mode is set to advanced document features, members outside the account organization cannot add documents, members within the account organization need the document administrator's approval to add documents, and document members cannot copy or export document content. Optionally, enabling the advanced document feature also provides access to larger document capacity, PDF format conversion, and other advanced capabilities. Optionally, a "Learn More" button can also be displayed in the pop-up 904 to guide users to enable the advanced document feature.

[0110] Optionally, when the confidentiality mode is set to document advanced features, Figure 9A , Figure 9B and Figure 9C This advanced feature has been enabled in the corresponding implementation. Figure 9D The corresponding implementation in the Chinese version does not enable this advanced feature and intercepts user operations.

[0111] In some embodiments, the terminal device can also configure the permissions of document members of sub-documents of an online document to be associated with the permissions of document members of the online document.

[0112] In this context, sub-documents of online documents can refer to smaller, more specific, and more manageable parts or chapters within a larger document structure. These can be independent chapters, paragraphs or sets of paragraphs, tables, images or sets of images within a document, or separate files associated with the document through links, tags, or target structures, greatly facilitating the creation, management, and use of documents.

[0113] Specifically, configuring the permissions of document members in sub-documents of an online document to be associated with the permissions of the document members in the online document can be done by configuring the permissions of the document members in the sub-documents to be the same as the permissions of the document members in the online document. If the document members of online document A are the same as the document members of its sub-documents, then each document member of online document A has the same permissions for online document A as the corresponding document member of its sub-documents has the same permissions for the sub-documents. For example, if document member 1 of online document A has the permission to post comments on online document A, then document member 1 also has the permission to post comments on the sub-documents of online document A; similarly, if document member 2 of online document B has only view permissions for online document B, then document member 2 also has only view permissions for the sub-documents of online document B.

[0114] In some embodiments, the terminal device can also configure the permissions of document members in the restored version of the online document to be associated with the permissions of document members in the online document.

[0115] The option to restore the document version history allows you to obtain a restored version of the online document. When you accidentally edit important content or need to view a historical version, you can use this feature to restore the online document, helping you recover accidentally modified content or view the document's historical changes.

[0116] Specifically, configuring the permissions of document members in the restored version of an online document, along with the permission management of the document members in the online document, can be done by configuring the permissions of the document members in the restored version to be the same as the permissions of the document members in the online document. For example, if the document members of restored version A0 of online document A are the same as the document members of online document A, then each document member of online document A has the same permissions as each document member of restored version A0 has the same permissions for restored version A0. For example, if document member 1 of online document A has the permission to post comments on online document A, then document member 1 also has the permission to post comments on restored version A0 of online document A; similarly, if document member 2 of online document B has only the permission to view online document B, then document member 2 also has only the permission to view restored version B0 of online document B.

[0117] In some embodiments, the online document management method 200 may also display a first configuration interface for the online document in response to a trigger operation in a third area of ​​the first management interface, and configure a protection scope for the online document in response to a first input operation in the first configuration interface, the protection scope being the scope that restricts document members from performing a second sensitive operation.

[0118] Specifically, when an online document contains sensitive content belonging at least partially to an account organization, a specified range of the online document (e.g., a specific cell, row, or column) rather than the entire range can contain at least part of the sensitive content belonging to the account organization. When a specific range of an online document contains at least some sensitive content, the user can designate that specific range as a protection range, restricting document members from performing secondary sensitive operations within that protection range. These operations include, for example, commenting on the online document, copying, exporting, printing, generating copies, saving as templates, and other similar actions. Specifically, the user can trigger an operation in the third area of ​​the first management interface on the terminal device. In response to this trigger operation, the terminal device displays the first configuration interface for the online document. The user then inputs information on this first configuration interface, configuring a protection range for the online document. This specifically configures a portion of the online document (e.g., a specific cell, row, or column) as a protection range, restricting document members from performing sensitive operations within that range.

[0119] For example, the specified scope can be a portion of an online document, such as a portion of a chapter, a portion of a paragraph, a portion of a cell, a portion of an image, a portion of a row or column, etc. This application embodiment does not limit this.

[0120] Therefore, this application embodiment reduces the risk of sensitive content leakage when interacting with sensitive content by restricting document members to perform sensitive operations within a specified scope of the online document. Furthermore, by restricting sensitive operations to document members within a specified scope, rather than restricting all document members to perform sensitive operations across the entire online document, more granular hierarchical permission control can be achieved, resulting in more effective, convenient, and flexible document permission management, thereby improving document security and compliance.

[0121] In some specific examples, such as Figure 10A As shown, users can trigger interaction in pop-up window 406 (another example of the first management interface) by setting a protection scope 1001 that restricts members from editing or viewing a specified range. For example, a user can click on "Set Protection Scope 1001" to trigger the setting of the protection scope. Here, "Set Protection Scope 1001" is an example of the third area of ​​the first management interface. In response to the user's triggering operation at "Set Protection Scope 1001", the following can be displayed: Figure 10B The pop-up window 407 showing the settings protection scope for the online document is an example of the first configuration interface of the online document. Figure 10BAs shown, the pop-up window 407 for setting the protection scope includes a selection area 1002. Users can trigger interaction within this selection area; for example, clicking the selection area 1002 allows them to select or enter the protection scope for the online document. For instance, after clicking the selection area 1002, the user can manually enter the scope of the document to be protected. Responding to the protected document scope entered by the user in the selection area 1002, the protection scope is configured in the online document, thereby restricting document members from performing sensitive operations within that protection scope.

[0122] Optionally, in this embodiment, in response to the permission setting operation for online documents on the first configuration interface, it can also be configured that other members can only browse the protected scope, or that other members cannot view the protected scope. Here, other members can be members other than the creator or document administrator, without limitation.

[0123] As a concrete example, see [link to previous article]. Figure 10B In the protection scope setting pop-up window 407, you can also configure other members to browse only in response to a user's trigger action, allowing other members to perform browsing-only interactive operations on the online document. Alternatively, in other examples, you can configure other members to not view in response to a user's trigger action, disallowing other members from performing viewing interactive operations on the online document; other members do not have viewing permissions for the online document.

[0124] Optionally, in this embodiment of the application, after setting the protection scope, permissions can also be set individually for designated members. For example, in Figure 10B In the protection scope setting pop-up window 407, permissions can also be set individually for specified members in response to user triggering operations. For example, some users or user groups can be selected to allow them to perform sensitive operations on the protection scope of online documents, such as commenting on online documents, copying, exporting, printing, generating copies, saving as templates, and other types of operations. This application embodiment does not limit this.

[0125] Correspondingly, when a document member accesses an online document, the backend system can query the permission configuration information in the database to perform permission verification based on the document member's relevant information and the scope of the requested document. If the document member does not have the corresponding permissions, the current access will be denied.

[0126] In some embodiments, the online document management method 200 may further display a second configuration interface for the online document in response to a trigger operation in the fourth area of ​​the first management interface; and configure task triggering conditions for the online document in response to a second input operation in the second configuration interface; the task triggering conditions include triggering a reminder message when specified content changes.

[0127] Specifically, for specific content in online documents, such as sensitive content, when the content is modified by document members, a notification needs to be sent to the administrator or creator's account to achieve real-time management of the online document. At this time, the user can trigger an operation in the fourth area of ​​the first management interface on the terminal device. In response to the user's trigger operation in the fourth area of ​​the first management interface, the terminal device displays the second configuration interface for the online document. The user can input information on this second configuration interface, specifically the changed content that needs to trigger the notification, thereby configuring the task triggering conditions for the online document. This allows a notification message to be triggered when the specified content changes, such as sending a notification message to the administrator or creator's account, or sending a notification message to a specific user or user group.

[0128] For example, the changed content can be a specified range of an online document, such as a specified cell, row or column, or the content contained in the online document itself. This application embodiment does not limit this.

[0129] Therefore, this application embodiment, by configuring a notification message to be triggered when specific content in an online document changes, helps to reduce the risk of leakage of specific content and enables real-time management of online documents. This allows for more effective, convenient, and flexible document permission management, thereby improving document security and compliance.

[0130] Optionally, in this embodiment, in response to the setting operation on the second configuration interface, it is also possible to configure sending reminder messages to specified members, such as the operation account corresponding to the administrator or creator, or to send reminder messages to specified users or user groups. This embodiment does not limit this.

[0131] In some specific examples, such as Figure 10C As shown, users can specify content to trigger an alert in pop-up window 407 (another example of the first management interface). For example, users can click on the specified content 1003 area to trigger the setting of the specified content. Here, the specified content 1003 setting for triggering an alert is an example of the fourth area of ​​the first management interface. In response to the user's trigger operation in setting specified content 1003, the following can be displayed: Figure 10D The online document settings pop-up 409 is shown. Pop-up 409 is an example of the second configuration interface of the online document. Figure 10DAs shown, the pop-up window 409 for setting specified content includes a specified content area 1004. Users can trigger interaction in the specified content area 1004, such as by entering specific content "XXX". In response to the user entering specified content in the specified content area 1004, it is possible to configure trigger reminder conditions for the online document, thereby triggering a reminder message when "XXX" in the online document changes.

[0132] Correspondingly, when a member edits an online document, the backend system can detect content changes in real time and match them with the configured alert trigger conditions. If the alert trigger conditions are matched, an alert message will be sent.

[0133] In some embodiments, the online document management method 200 may also display an online document management interface. When configuring a global permission configuration that allows a second target member to perform a first sensitive operation on an online document, the online document management interface displays conflicting online documents that conflict with the global permission configuration, and in response to the triggering operation of the conflict handling entry of the conflicting online document, the access permissions of the conflicting online document are changed.

[0134] The online document management interface is used to manage various online documents. Specifically, it allows management of storage paths, access permissions, document names, etc., for each online document. Global permission configuration applies to all online documents created through an account organization. For example, in this embodiment, each online document created through an account organization is configured so that a second target member can perform a first sensitive operation on the online document. This conflicts with the global permission configuration, meaning the online document supports first sensitive operations performed by other document members besides the second target member, which conflicts with the configuration that only supports first sensitive operations performed by the second target member. As a specific example, the global permission configuration might allow administrators to post comments on each online document, while the first online document is configured so that both administrators and first document members can post comments on it; therefore, the first online document is a conflicting online document. The conflict resolution entry point is the interactive entry point for resolving conflicts in conflicting online documents. Users can trigger interactive operations through the conflict resolution entry point to change the permissions of the conflicting online document, thereby resolving the conflict with the global permission configuration and ensuring that the conflicting online document supports the global permission configuration.

[0135] Specifically, the terminal device displays an online document management interface, which is an area for associating various online documents. Each online document can be displayed within this interface. When global permissions are configured to allow a second target member to perform first-sensitive operations on online documents created by an account organization—for example, when an administrator can configure a second target member to perform first-sensitive operations on online documents created by that account organization—then the online documents created by that account organization correspondingly support the second target member performing first-sensitive operations. The terminal device can display conflicting online documents in the online document management interface. These conflicting online documents have permissions that conflict with the global permission configuration, meaning they do not satisfy the requirement for the second target member to perform first-sensitive operations. This allows users to modify the configuration of each online document. For example, a user can trigger an operation by clicking the conflict resolution entry point on a conflicting online document. In response to this trigger, the terminal device modifies the configuration of each online document, thereby achieving fine-grained management of each online document and ensuring that the permission configuration of each online document satisfies the global permission configuration.

[0136] Therefore, by supporting permission change processing for conflicting online documents, the embodiments of this application resolve the conflict between conflicting online documents and global permission configurations, thereby improving the fine-grained handling of each online document, the flexibility in determining the permission configuration of each online document, and enhancing the data security of online documents.

[0137] In some embodiments, the online document management method 200 may also obtain a permission request message from a communication application, which is used by a first account to request operation permissions for the online document from an operation account; in response to the triggering operation of the permission request message, an approval button is displayed; in response to the triggering operation of the approval button, a permission approval message is sent, which is used to indicate that the first account's operation permissions for the online document have been approved.

[0138] Specifically, a permission request interface can be provided in the document management system. Users can request permissions from the administrator through this interface. After a user submits a permission request, a permission request message is sent to the administrator's operating account via the API of the communication application. This permission request message is used by the first account to request operation permissions for online documents from the operating account. This permission request message can be an instant messaging message. Then, the permission request message can be pushed to the corresponding operating account of the administrator using the instant messaging push interface. The backend uses the message push interface of the communication application to push the permission request message to the administrator. The administrator receives the permission request message in the instant messaging of the communication application and can trigger an action on the message, such as clicking the message to display an approval button. The administrator can trigger an action on the approval button, such as clicking it. In response to the triggering action on the approval button, the system calls the corresponding interface to approve the permission and sends the permission approval message to the first account through the API interface of the communication application. Therefore, this embodiment of the application can combine document permission control capabilities with the instant messaging capabilities of the communication application, thereby improving the efficiency of document permission control.

[0139] In some embodiments, the online document management method 200 may also respond to a first permission setting operation for an online document triggered in a first area of ​​a first management interface by sending a first permission request message to a server, the first permission request message including information of the operation account; and obtain a response from the server for the first permission request message, the response being sent after the operation account has passed permission authentication and the operation account's identity ticket has been verified via API.

[0140] Specifically, when a first-permission setting operation is triggered in the first area of ​​the first management interface, the front-end will send a first-permission request message to the server. The server responds to this message by authenticating the operating account and, after successful authentication, verifies the account's identity via API before sending a response. Based on this response message, the terminal device configures the target member among the document members added to the online document to perform the first sensitive operation on the online document. For details on the server's operation process, please refer to the following text. Figure 11 and Figure 12 Related descriptions.

[0141] This application also provides an application scenario where the above-described online document management method is applied. Specifically, the online document management method is applied in this scenario as follows:

[0142] Traditional online documents edited by multiple people within an account organization lack proper management. Configuring all members of the online document to perform sensitive operations, such as posting comments, copying, printing, exporting, creating copies, and saving as templates, can lead to the leakage of sensitive content or compromise the integrity and accuracy of the document. For example, in corporate account organizations, sensitive internal information may be leaked or its integrity and accuracy compromised, threatening corporate data security and impacting normal operations. The company may also be unable to comply with relevant laws and policies, facing potential legal risks. Furthermore, allowing all members to perform sensitive operations on the online document is overly simplistic and inflexible, hindering rapid response to organizational changes and lacking granular control over document permissions.

[0143] Based on this, the online document management method provided in this application, by configuring a first target member among the document members added to the online document to perform a first-level permission operation on the online document, can achieve more granular document hierarchical permission control and custom permission settings, which is beneficial for preventing data leakage and providing a higher security standard. In addition, the online document management method in this application supports one-click triggering of the online document's confidentiality mode, supports allowing only members within the account organization to add online documents (requiring administrator approval for joining), and configurations such as adding watermarks to online documents, allowing only administrators to copy online documents, and displaying a security icon for online documents. This supports rapid permission changes, enabling enterprises to manage and control document data more effectively, flexibly, and conveniently. This is a significant advancement for enterprises requiring strict data control.

[0144] In some embodiments, the online document management method provided in this application supports a basic version and a professional version, which can be changed through feature upgrades, such as paid upgrades. For the basic version, users can access the permission configuration page, but cannot make any configurations. For example, in... Figure 6A and Figure 6B In communication applications, the online document permission management interface can prompt users to enable advanced document features, allowing comments to be posted only by document administrators. These settings interact with the backend permission verification service via front-end controls to update permission status in real time. For example, in... Figure 9DIn the communication application's online document permission management interface, a prompt can be displayed indicating that after enabling advanced document features, a confidentiality mode can be activated. When enabled, members outside the account's organization cannot join the document, members within the account's organization must obtain document administrator approval before joining, and document administrators cannot copy or export document content. When a user clicks "Learn More," a feature upgrade entry is displayed. Clicking this entry grants the user an advanced account, allowing access to advanced features such as setting only document administrators to post comments, or enabling the confidentiality mode. Once confidentiality mode is enabled, the front-end interface sends information to the back-end server, which updates the document status and applies all permission changes under confidentiality mode. Optionally, this embodiment also allows users to manually set permissions for each document member. These settings are stored in a database, and the system checks these permissions each time a document is accessed to determine the user's appropriate actions. Optionally, advanced document features may also include enterprise-wide document management, unlimited document capacity, support for an enterprise recycle bin, support for document watermarking, support for default document permission settings, default display of enterprise watermarks, and batch operation alerts, among other security features. This embodiment does not limit these features.

[0145] Therefore, this application embodiment, through detailed permission settings and confidentiality modes, enables account organizations to better control document access, protect sensitive information from unauthorized access, and improve data security. Simultaneously, administrators can quickly adjust document permissions to respond to organizational changes and improve management efficiency. Furthermore, organizations can flexibly set document permissions according to internal management needs, achieving more granular access control. In addition, this application embodiment helps organizations comply with industry standards and regulatory requirements, especially when handling important documents, reducing compliance risks. In summary, this application embodiment helps organizations manage document data more conveniently, effectively, and flexibly when using communication applications, improving work efficiency and data security while meeting compliance requirements.

[0146] Figure 11 This is a schematic diagram illustrating a user access to advanced permission settings, provided as an embodiment of this application. Advanced permission settings can be a paid module, allowing administrators to configure advanced permissions through an interface. The advanced permission functionality connects to the backend permission management system via a secure Application Programming Interface (API), ensuring that only paid users can access these advanced features. Figure 11 As shown, the process of a user accessing advanced permission settings includes the following steps 1101 to 1107.

[0147] 1101, User accesses advanced permission settings, requesting the user's identity ticket from the front-end interface.

[0148] Specifically, when a user accesses advanced permission settings, in response to the user's access operation, the backend server requests the user's identity ticket from the frontend interface. This identity ticket is the user's authentication ticket, such as a CST ticket, which can be used in scenarios such as user login and API calls to ensure the legitimacy of the request.

[0149] 1102, The front-end interface provides identity tickets.

[0150] Specifically, the front-end interface provides identity tickets to the back-end server.

[0151] 1103, Invoke authentication service.

[0152] Specifically, the backend server verifies the user's identity through the authentication service of the communication application, ensuring that only users with valid identity credentials can continue with subsequent operations.

[0153] 1104. After successful ticket verification, check the user's vid and cortiid to confirm the user's identity.

[0154] Specifically, the backend server will use VID and CorpID to identify individual users and their respective organizations. CorpID is a unique identifier for a user's organization (such as a business) within the communication application, used to identify the organization's unique account holder. VID is a unique identifier for a member within the organization, used to identify a member's account within their organization. A user's VID and CorpID will be used to determine whether the user has administrative privileges and whether they belong to a paid organization's account.

[0155] 1105, After verifying the user's identity, check the company's payment status.

[0156] Specifically, after a user is authenticated, the backend server will further check the user's permissions and the payment status of their organization to ensure that only authorized members (such as administrators or creators) can change the document's advanced permission settings.

[0157] 1106, After confirming the payment status, request permission settings.

[0158] Specifically, to protect the API from unauthorized access, an identity ticket-based security mechanism will be implemented. In other words, the API will verify the identity ticket for each permission setting request to ensure that only authenticated users can invoke the API.

[0159] 1107. After the permissions are successfully set, a message indicating successful setting will be displayed.

[0160] Therefore, this application embodiment requests an identity ticket from the front-end interface and calls the identity verification service to verify the user's identity based on the identity ticket. After successful identity ticket verification, the user's vid and corvid are detected to confirm the user's identity. Then, the enterprise's payment status is checked, and after confirming that the enterprise is paying, permission settings are requested, thereby ensuring that authorized users and paying users can access advanced permission settings.

[0161] Figure 12 This is a schematic diagram illustrating another process for setting advanced user access permissions, provided in an embodiment of this application. Figure 11 Similar to [previous system], advanced permission settings are also a paid module, allowing administrators to configure advanced permissions through the interface. The advanced permission features will also connect to the backend permission management system via a secure API, ensuring that only paid users can access these advanced functions. Figure 12 As shown, the process of a user accessing advanced permission settings includes the following steps 1201 to 1212.

[0162] Error 1201: The user attempted to access advanced permission settings. Specifically, the user can attempt to access advanced permission settings through the front-end interface.

[0163] 1202, Authentication. Specifically, in response to a user's access request, the backend server performs authentication.

[0164] 1203, Read identity ticket from cache.

[0165] For example, identity tickets can be read from cookies. A user's identity ticket is their authentication ticket, such as a CST ticket, which can be used in scenarios such as user login and API calls to ensure the legitimacy of requests.

[0166] 1204, Communication application calls authentication service.

[0167] Specifically, the user's identity is verified by calling the authentication service of the communication application, ensuring that only users with valid identity credentials can continue with subsequent operations. If authentication fails, step 1212 is executed, denying the user access to advanced permission settings.

[0168] 1205. After successful ticket verification, obtain the user and enterprise identifiers.

[0169] For example, a user's vid and corpid can be obtained. Specifically, corpid is a unique identifier for the user within the communication application's organization (such as a company), used to identify the organization's unique account entity, while vid is a unique identifier for a member within the organization, used to identify the member's account within their organization. A user's vid and corpid will be used to determine whether the user has administrative privileges and whether they belong to a paid organization's account.

[0170] 1206, check the user's vid and cortiid to identify the individual user and the organization to which they belong.

[0171] 1207. Perform permission verification. Specifically, this involves verifying user permissions, such as whether they are an administrator or the creator. If the user lacks permissions, proceed to step 1212 to deny the user access to advanced permission settings.

[0172] 1208, Check payment status.

[0173] Specifically, after verifying the user's identity, check the enterprise's payment status. If the enterprise has not paid, proceed to step 1212, denying the user access to advanced permission settings.

[0174] 1209. API security verification is performed when the enterprise has paid for it. Specifically, API security verification is to protect APIs from unauthorized access.

[0175] 1210, Verify identity ticket.

[0176] Specifically, the API will verify the identity ticket for each permission setting request to ensure that only authenticated users can call the API. If the ticket is valid, step 1211 is executed, allowing the API call. If the ticket is invalid, step 1212 is executed, denying the user access to advanced permission settings.

[0177] Therefore, in this embodiment of the application, when a user attempts to access advanced permission settings, an identity ticket is obtained to authenticate the user. After successful identity ticket verification, the user's vid and corvid are detected to confirm the user's identity. Then, the enterprise's payment status is checked, and API security verification is performed after confirming that the enterprise is paying. This ensures that authorized users and paying users can access advanced permission settings.

[0178] The specific embodiments of this application have been described in detail above with reference to the accompanying drawings. However, this application is not limited to the specific details of the above embodiments. Within the scope of the technical concept of this application, various simple modifications can be made to the technical solutions of this application, and these simple modifications all fall within the protection scope of this application. For example, the various specific technical features described in the above embodiments can be combined in any suitable manner without contradiction. To avoid unnecessary repetition, this application will not describe the various possible combinations separately. Furthermore, various different embodiments of this application can also be arbitrarily combined, as long as they do not violate the spirit of this application, they should also be considered as the content disclosed in this application.

[0179] It should also be understood that, in the various method embodiments of this application, the sequence numbers of the above processes do not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. It should be understood that these sequence numbers can be interchanged where appropriate so that the embodiments of this application described can be implemented in a sequence other than those illustrated or described.

[0180] It should be understood that the embodiments of this application are not limited to the forms of the above formulas. For example, they can also be various variations of the formulas. The embodiments of this application do not limit this.

[0181] The method embodiments of this application have been described in detail above. The following will be combined with… Figures 13 to 15 The following describes in detail the device embodiments of this application.

[0182] Figure 13 This is a schematic block diagram of an online document management device 10 provided in one embodiment of this application. Figure 13 As shown, the device 10 may include a display module 11 and a configuration module 12.

[0183] Display module 11 is used to display the first management interface of online documents created by the account organization in the communication application;

[0184] Configuration module 12 is configured to, in response to triggering a first permission setting operation for the online document in the first area of ​​the first management interface, configure a first target member among the document members added to the online document to perform a first sensitive operation on the online document;

[0185] The display module 11 is also used to display the first permission setting result on the first management interface.

[0186] In some embodiments, the first target member includes at least one of the administrator, the editable member of the online document, and the designated document member.

[0187] In some embodiments, the first sensitive operation includes at least one of posting a comment, copying, printing, exporting, generating a copy, and saving as a template.

[0188] In some embodiments, the display module 11 is further configured to display a confidentiality mode activation entry in the second area of ​​the first management interface;

[0189] Configuration module 12 is also configured to enable confidentiality mode for the online document in response to triggering a second permission setting operation for the online document at the confidentiality mode enable entry.

[0190] The display module 11 is also used to display the second permission setting result on the first management interface.

[0191] In some embodiments, the confidentiality mode includes at least one of the following:

[0192] Only members of the account organization can join the online document;

[0193] Adding the aforementioned online document requires administrator approval;

[0194] Add a watermark to the online document;

[0195] Only administrators can copy the online document;

[0196] Display the security icon corresponding to the online document.

[0197] In some embodiments, the display module 11 is further configured to display the first configuration interface of the online document in response to a trigger operation in the third area of ​​the first management interface;

[0198] Configuration module 12 is also configured to, in response to a first input operation on the first configuration interface, configure a protection scope for the online document, wherein the protection scope is the scope within which document members perform a second sensitive operation.

[0199] In some embodiments, the display module 11 is further configured to display a second configuration interface of the online document in response to a trigger operation in the fourth area of ​​the first management interface;

[0200] Configuration module 12 is also configured to configure task triggering conditions for the online document in response to a second input operation on the second configuration interface; the task triggering conditions include triggering a reminder message when specified content changes.

[0201] In some embodiments, the configuration module 12 is also used for at least one of the following:

[0202] Configure the permissions of document members of sub-documents of the online document to be associated with the permissions of document members of the online document;

[0203] Configure the permissions of document members in the restored version of the online document to be associated with the permissions of document members in the online document.

[0204] In some embodiments, the display module 12 displays a first management interface for online documents created by an account organization in a communication application, including:

[0205] In response to an operation account with permission settings triggering an action on an online document, the online document is displayed in the document display area; the operation account is the operation account of the creator of the online document or the operation account of the administrator;

[0206] In response to the operation account triggering the menu wake-up operation in the online document, the operation menu associated with the online document is displayed;

[0207] In response to the permission management trigger operation initiated by the operation account in the operation menu, the first management interface of the online document is displayed.

[0208] In some embodiments, the display module 11 is further configured to display an online document management interface; and when configuring a global permission configuration that allows a second target member to perform the first sensitive operation on the online document, to display conflicting online documents that conflict with the global permission configuration on the online document management interface;

[0209] The configuration module 12 is also used to change the access permissions of the conflict online document in response to a trigger operation on the conflict handling entry of the conflict online document.

[0210] In some embodiments, the system further includes an acquisition module for acquiring a permission request message from the communication application, wherein the permission request message is used by the first account to request operation permissions for the online document from the operation account.

[0211] The display module is also used to display an approval button in response to a triggering operation of the permission request message;

[0212] The sending module is used to send a permission approval message in response to the triggering operation of the approval button. The permission approval message is used to indicate that the first account's operation permission for the online document has been approved.

[0213] In some embodiments, the sending module is configured to send a first permission request message to the server in response to triggering a first permission setting operation for the online document in a first area of ​​the first management interface, the first permission request message including information of the operation account;

[0214] The acquisition module is also used to acquire a response from the server to the first permission request message, the response being sent after the operation account has passed permission authentication and the operation account's identity ticket has been verified via API.

[0215] In some embodiments, the display module 11 is further configured to: in response to the failure of the first permission setting operation, display first operation interception information on the first management interface, wherein the first operation interception information is used to indicate that the execution of the first permission setting operation has been intercepted.

[0216] It should be understood that the device embodiments and method embodiments can correspond to each other, and similar descriptions can be referred to the method embodiments. To avoid repetition, further details will not be provided here. Specifically, Figure 13 The apparatus 10 shown can execute the above-described method embodiments, and the foregoing and other operations and / or functions of each module in apparatus 10 are respectively for implementing the corresponding processes in the above-described method 200. For the sake of brevity, further details are omitted here.

[0217] The apparatus of this application embodiment has been described above from the perspective of functional modules in conjunction with the accompanying drawings. It should be understood that this functional module can be implemented in hardware, in software instructions, or in a combination of hardware and software modules. Specifically, the steps of the method embodiments in this application can be completed by integrated logic circuits in the processor's hardware and / or by software instructions. The steps of the method disclosed in this application embodiment can be directly embodied as being executed by the hardware processor, or executed by a combination of hardware and software modules in the processor. Optionally, the software module can be located in a mature storage medium in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, etc. This storage medium is located in memory, and the processor reads information from the memory and, in conjunction with its hardware, completes the steps in the above method embodiments.

[0218] Figure 14 This is a block diagram of an electronic device 30 according to an embodiment of this application. The device is used to perform the methods described in the above embodiments, and for details, please refer to the description in the above method embodiments.

[0219] like Figure 14 As shown, the electronic device 30 may include:

[0220] The system includes a memory 31 and a processor 32. The memory 31 stores computer programs and transfers the program code to the processor 32. In other words, the processor 32 can retrieve and run the computer programs from the memory 31 to implement the methods described in the embodiments of this application.

[0221] For example, the processor 32 can be used to execute the above-described method embodiments according to instructions in the computer program.

[0222] In some embodiments of this application, the processor 32 may include, but is not limited to:

[0223] General-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.

[0224] In some embodiments of this application, the memory 31 includes, but is not limited to:

[0225] Volatile memory and / or non-volatile memory. Non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory can be random access memory (RAM), which is used as an external cache. By way of example, but not limitation, many forms of RAM are available, such as Static RAM (SRAM), Dynamic RAM (DRAM), Synchronous DRAM (SDRAM), Double Data Rate SDRAM (DDR SDRAM), Enhanced Synchronous DRAM (ESDRAM), Synchronous Link DRAM (SLDRAM), and Direct Rambus RAM (DR RAM).

[0226] In some embodiments of this application, the computer program may be divided into one or more modules, which are stored in the memory 31 and executed by the processor 32 to perform the method provided in this application. The one or more modules may be a series of computer program instruction segments capable of performing a specific function, which describe the execution process of the computer program in the electronic device.

[0227] like Figure 14 As shown, the electronic device 30 may further include:

[0228] Transceiver 33, which can be connected to processor 32 or memory 31.

[0229] The processor 32 can control the transceiver 33 to communicate with other devices; specifically, it can send information or data to other devices or receive information or data sent by other devices. The transceiver 33 may include a transmitter and a receiver. The transceiver 33 may further include antennas, and the number of antennas may be one or more.

[0230] It should be understood that the various components in the electronic device are connected through a bus system, which includes a data bus, a power bus, a control bus, and a status signal bus.

[0231] Taking electronic devices as terminals as an example, Figure 15 A schematic diagram of the hardware structure of a terminal to implement an embodiment of this application.

[0232] The terminal 40 includes, but is not limited to, at least some of the following components: radio frequency unit 41, network module 42, audio output unit 43, input unit 44, sensor 45, display unit 46, user input unit 47, interface unit 48, memory 49, and processor 40.

[0233] Those skilled in the art will understand that the terminal 40 may also include a power supply (such as a battery) for supplying power to various components. The power supply may be logically connected to the processor 40 through a power management system, thereby enabling functions such as managing charging, discharging, and power consumption through the power management system. Figure 15 The terminal structure shown does not constitute a limitation on the terminal. The terminal may include more or fewer components than shown, or combine certain components, or have different component arrangements, which will not be elaborated here.

[0234] It should be understood that, in this embodiment, the input unit 44 may include a graphics processing unit (GPU) 441 and a microphone 442. The GPU 441 processes image data of still images or videos obtained by an image acquisition device (such as a camera) in video acquisition mode or image acquisition mode. The display unit 46 may include a display panel 461, which may be configured in the form of a liquid crystal display, an organic light-emitting diode, or the like. The user input unit 47 includes a touch panel 471 and at least one of other input devices 472. The touch panel 471 is also called a touch screen. The touch panel 471 may include a touch detection device and a touch controller. Other input devices 472 may include, but are not limited to, physical keyboards, function keys (such as volume control buttons, power buttons, etc.), trackballs, mice, and joysticks, which will not be described in detail here.

[0235] In this embodiment, the radio frequency unit 41 receives or transmits data. Typically, the radio frequency unit 41 includes, but is not limited to, an antenna, an amplifier, a transceiver, a coupler, a low-noise amplifier, a duplexer, etc.

[0236] The memory 49 can be used to store software programs or instructions, as well as various data. The memory 49 may primarily include a first storage area for storing programs or instructions and a second storage area for storing data. The first storage area may store the operating system, applications or instructions required for at least one function (such as sound playback, image playback, etc.). Furthermore, the memory 49 may include volatile memory or non-volatile memory. The memory 49 in the embodiments of this application includes, but is not limited to, these and any other suitable types of memory.

[0237] Processor 410 may include one or more processing units; optionally, processor 410 integrates an application processor and a modem processor, wherein the application processor mainly handles operations involving the operating system, user interface, and applications, and the modem processor mainly handles wireless communication signals, such as a baseband processor. It is understood that the aforementioned modem processor may also not be integrated into processor 410.

[0238] This application also provides a computer storage medium storing a computer program thereon, which, when executed by a computer, enables the computer to perform the methods of the above-described method embodiments. Alternatively, embodiments of this application also provide a computer program product containing instructions that, when executed by a computer, cause the computer to perform the methods of the above-described method embodiments.

[0239] When implemented using software, it can be implemented entirely or partially as a computer program product. This computer program product includes one or more computer instructions. When these computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., digital video disc (DVD)), or a semiconductor medium (e.g., solid-state disk (SSD)).

[0240] It is understood that in the specific implementation of this application, when the above embodiments of this application are applied to specific products or technologies and involve user information and other related data, user permission or consent is required, and the collection, use and processing of related data must comply with relevant laws, regulations and standards.

[0241] Those skilled in the art will recognize that the modules and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0242] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple modules or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or modules may be electrical, mechanical, or other forms.

[0243] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical modules; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. For example, the functional modules in the various embodiments of this application may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module.

[0244] The above are merely specific embodiments of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. An online document management method characterized by, The application comprises: displaying a first management interface of an online document created by an account organization in a communication application; in response to a first area in the first management interface triggering a first permission setting operation for the online document, configuring a first target member of document members joining the online document to perform a first sensitive operation on the online document; displaying a first permission setting result in the first management interface.

2. The method of claim 1, wherein, The first target member comprises at least one of an administrator, an editable member of the online document and a designated document member; and the first sensitive operation comprises at least one of publishing a comment, copying, printing, exporting, generating a copy and saving as a template.

3. The method according to claim 1 or 2, characterized in that, The application further comprises: displaying a privacy mode opening portal in a second area in the first management interface; in response to the privacy mode opening portal triggering a second permission setting operation for the online document, configuring the online document to open a privacy mode; displaying a second permission setting result in the first management interface.

4. The method of claim 3, wherein, The privacy mode comprises at least one of: only members within the account organization can join the online document; joining the online document requires administrator approval; adding a watermark to the online document; only administrators can copy the online document; displaying a security icon corresponding to the online document.

5. The method according to claim 1 or 2, characterized in that, The application further comprises: in response to a triggering operation in a third area in the first management interface, displaying a first configuration interface of the online document; in response to a first input operation in the first configuration interface, configuring a protection range for the online document, the protection range being a range for limiting document members to perform a second sensitive operation.

6. The method of claim 1 or 2, wherein, The application further comprises: in response to a triggering operation in a fourth area in the first management interface, displaying a second configuration interface of the online document; in response to a second input operation in the second configuration interface, configuring a task triggering condition for the online document; the task triggering condition comprises triggering a reminder message when a specified content is changed.

7. The method according to claim 1 or 2, characterized in that, The application further comprises at least one of: configuring the permissions of document members of a sub-document of the online document to be associated with the permissions of document members of the online document; configuring the permissions of document members of a restored version of the online document to be associated with the permissions of document members of the online document.

8. The method of claim 1 or 2, wherein, The application further comprises: displaying an online document management interface; when a global permission configuration is configured for a second target member to perform the first sensitive operation on the online document, displaying a conflict online document with a conflict with the global permission configuration in the online document management interface; in response to a triggering operation on a conflict handling portal of the conflict online document, changing the access permission of the conflict online document.

9. The method of claim 1 or 2, wherein, The application further comprises: obtaining a permission application message from the communication application, the permission application message being used by a first account to apply for an operation permission for the online document to an operating account; in response to a triggering operation on the permission application message, displaying an approval button; in response to a triggering operation on the approval button, sending a permission approval message, the permission approval message being used to indicate that the operation permission of the first account for the online document is approved.

10. The method of claim 1 or 2, wherein, The application further comprises: In response to triggering a first permission setting operation for the online document in a first region in the first management interface, a first permission request message is sent to a server, the first permission request message including information of an operation account; A response to the first permission request message is obtained from the server, the response being sent after permission authentication of the operation account passes and identity ticket verification of the operation account passes through an API.

11. An online document management apparatus characterized by comprising: Comprising: A display module configured to display a first management interface of an online document created by an account organization in a communication application; A configuration module configured to, in response to triggering a first permission setting operation for the online document in a first region in the first management interface, configure a first target member of document members joining the online document to be able to perform a first sensitive operation on the online document. The display module is further configured to display a first permission setting result in the first management interface.

12. An electronic device, comprising: A processor and a memory, the memory storing instructions, the processor executing the instructions to cause the processor to perform the method of any one of claims 1-10.

13. A computer storage medium, characterized in that A computer program for storing, the computer program comprising instructions for performing the method of any one of claims 1-10.

14. A computer program product, characterised in that, Computer program code that, when run by an electronic device, causes the electronic device to perform the method of any one of claims 1-10.

Images