User permission control method and apparatus, device, and storage medium

Abstract

The present application relates to the technical field of permission control, and discloses a user permission control method and apparatus, a device, and a storage medium. The method comprises: in response to a user switching operation on a mobile terminal device, acquiring a first user identifier of a current user that has been switched to; when the first user identifier matches a preset first user type, on the basis of the first user identifier, acquiring a first access permission table corresponding to the current user, the first access permission table comprising a plurality of first applications; and on the basis of the first access permission table, setting access permissions of the current user for the plurality of first applications. Compared with the existing technology, in the present application, multi-layer verification of the identity of a user is not required, user privacy information does not need to be acquired, and a permission control occasion is moved forward to the moment of user switching, thereby simplifying the control process of controlling permissions for a user to access system applications, and solving the existing technical problem of a complex control process when controlling permissions for a user to access system applications.

Description

A user access control method, apparatus, device, and storage medium Technical Field

[0001] This application relates to the field of access control technology, and in particular to a user access control method, apparatus, device, and storage medium. Background Technology

[0002] Mobile applications are typically divided into system applications and non-system applications. While existing technologies for controlling user access to non-system applications are quite mature, controlling user access to system applications has the following drawbacks: access control is only applied when a user initiates access to a single system application, making the timing inappropriate; access control requires first obtaining the user's identity information, then performing a first-level verification of the request object based on the system application's identifier, followed by a second-level verification of the authorized object based on the system application's permission model. Only after multiple verifications can access to a specific system application be controlled within the specified timeframe, making the access control process complex; furthermore, the obtained user identity information may include not only the user's identification but also some private information, posing a risk of privacy breaches. Therefore, a simplified access control method is urgently needed for mobile users accessing system applications. Summary of the Invention

[0003] This application provides a user access control method, apparatus, device, and storage medium to solve the technical problem of complex control processes in existing methods for controlling user access to system applications.

[0004] According to a first aspect of the embodiments of this application, a user access control method is provided, comprising:

[0005] In response to a user switching operation on a mobile terminal device, obtain the first user identifier of the currently switched user;

[0006] When the first user identifier matches a preset first user type, a first access permission table corresponding to the current user is obtained based on the first user identifier; wherein, the first access permission table includes multiple first applications;

[0007] Based on the first access permission table, set the current user's access permissions to the plurality of first applications.

[0008] This application obtains the first user identifier of the current user in response to a user switching operation on a mobile terminal device, and when the first user identifier matches a first user type, obtains a first access permission table, and then sets the current user's access permissions according to the first access permission table. Compared with the prior art, this application directly obtains the first access permission table to set access permissions, without the need for multi-layer verification of user identity. At the same time, it moves the timing of permission control forward to the time of user switching, simplifying the control process. Moreover, it only needs to obtain the first user identifier and does not need to obtain user privacy information, thus preventing privacy leakage. This simplifies the control process for controlling user access permissions to system applications.

[0009] In some embodiments of this application, it further includes:

[0010] When the first user identifier matches a preset second user type, application information and user information on the mobile terminal device are obtained; wherein, the application information includes the plurality of first applications; and the user information includes the first user identifiers of the plurality of users;

[0011] Based on the application information and the user information, a first access permission set is generated according to a preset user permission configuration; wherein, the first access permission set is composed of multiple first access permission tables corresponding to the multiple users.

[0012] When the first user identifier matches the second user type, this application obtains application information and user information on the mobile terminal device, and generates a first access permission set consisting of multiple first access permission tables based on preset user permission configuration. It can pre-store multiple first access permission tables, thereby facilitating the acquisition of the first access permission table based on the first user identifier and meeting the needs of the current task.

[0013] In some embodiments of this application, obtaining the first access permission table corresponding to the current user based on the first user identifier specifically includes:

[0014] Corresponding to the first user identifier, the first access permission table of the current user is obtained by matching from the first access permission set.

[0015] This application ensures accurate acquisition of the current user's first access permission table by matching the first user identifier with the current user's first access permission table in the first access permission set, thereby facilitating subsequent permission settings based on the first access permission table.

[0016] In some embodiments of this application, setting the current user's access permissions to the plurality of first applications according to the first access permission table specifically includes:

[0017] Based on the first access permission table, obtain the first application identifier and permission access type of multiple first applications;

[0018] Based on the first user identifier, the first application identifier of each first application, and the permission access type, set the current user's access permissions to the multiple first applications.

[0019] This application obtains the first application identifier and permission access type of each of the multiple first applications through the first access permission table, and then sets the current user's access permissions to each first application according to the first user identifier, the first application identifier of each first application and the permission access type. It can set permissions according to the current user and for each first application, and the control process is simple, thereby controlling the user's access permissions when accessing system applications more efficiently.

[0020] According to a second aspect of the embodiments of this application, a user permission control device is provided, including a user identifier acquisition module, a first permission acquisition module, and a first permission setting module;

[0021] The user identifier acquisition module is used to obtain the first user identifier of the current user being switched to in response to a user switching operation on a mobile terminal device.

[0022] The first permission acquisition module is used to acquire a first access permission table corresponding to the current user based on the first user identifier when the first user identifier matches a preset first user type; wherein, the first access permission table includes multiple first applications;

[0023] The first permission setting module is used to set the current user's access permissions to the plurality of first applications according to the first access permission table.

[0024] In some embodiments of this application, a first permission generation module is further included; the first permission generation module includes an information acquisition unit and a permission generation unit;

[0025] The information acquisition unit is used to acquire application information and user information on the mobile terminal device when the first user identifier matches a preset second user type; wherein, the application information includes the plurality of first applications; and the user information includes the first user identifiers of the plurality of users;

[0026] The permission generation unit is used to generate a first access permission set based on the application information and the user information and a preset user permission configuration; wherein the first access permission set is composed of multiple first access permission tables corresponding to the multiple users.

[0027] In some embodiments of this application, the first permission acquisition module includes a first permission acquisition unit;

[0028] The first permission acquisition unit is used to obtain the first access permission table of the current user by matching from the first access permission set corresponding to the first user identifier.

[0029] In some embodiments of this application, the first permission setting module includes an application information acquisition unit and a first permission setting unit;

[0030] The application information acquisition unit is used to acquire the first application identifier and permission access type of multiple first applications according to the first access permission table;

[0031] The first permission setting unit is used to set the current user's access permissions to the plurality of first applications based on the first user identifier, the first application identifier of each first application, and the permission access type.

[0032] According to a third aspect of the embodiments of this application, a computer device is provided, comprising: a processor; a memory; and a computer program stored in the memory and configured to be executed by the processor.

[0033] The processor executes the computer program to implement the user access control method described in this application.

[0034] According to a fourth aspect of the embodiments of this application, a computer-readable storage medium is provided, the computer-readable storage medium storing a plurality of instructions adapted for loading by a processor to execute a user access control method described in this application.

[0035] This application obtains the first user identifier of the current user in response to a user switching operation on a mobile terminal device, and when the first user identifier matches a first user type, obtains a first access permission table, and then sets the current user's access permissions according to the first access permission table. Compared with the prior art, this application directly obtains the first access permission table to set access permissions, without the need for multi-layer verification of user identity. At the same time, it moves the timing of permission control forward to the time of user switching, simplifying the control process. Moreover, it only needs to obtain the first user identifier and does not need to obtain user privacy information, thus preventing privacy leakage. This simplifies the control process for controlling user access permissions to system applications. Attached Figure Description

[0036] Figure 1: A flowchart illustrating a user access control method in some embodiments of this application;

[0037] Figure 2: A block diagram of a user access control device in some embodiments of this application. Detailed Implementation

[0038] The embodiments of this application are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below in conjunction with the accompanying drawings are exemplary and are only used to explain some embodiments of this application, and should not be construed as limiting the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments shown in this application without inventive effort are within the protection scope of this application.

[0039] In the description of this application, it should be understood that the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this application, unless otherwise explicitly specified, "a plurality of" or "several" means two or more.

[0040] The existing technology for controlling the access permissions of ordinary users to system applications has the following drawbacks: (1) Access permissions can only be controlled when a user initiates access to a single system application; (2) Access control requires multi-level verification based on the user's identity information; (3) The obtained user identity information may include not only the user's identification identifier but also some of the user's private information. These drawbacks result in inappropriate timing, complex processes, and privacy leaks in the existing technology for controlling the access permissions of ordinary users to system applications. Therefore, mobile users urgently need a simplified access control method when accessing system applications.

[0041] Based on the above technical background, please refer to Figure 1. This application provides a user access control method, including steps S101 to S103, the specific steps of which are as follows:

[0042] Step S101: In response to a user switching operation on the mobile terminal device, obtain the first user identifier of the currently switched user.

[0043] In some embodiments of this application, the first user identifier is preferably a user ID, and preferably a unique identifier obtained by encrypting and obfuscating the user ID and / or specific information of the user.

[0044] Step S102: When the first user identifier matches a preset first user type, obtain the first access permission table corresponding to the current user based on the first user identifier; wherein, the first access permission table includes multiple first applications.

[0045] In some embodiments of this application, it further includes:

[0046] When the first user identifier matches a preset second user type, application information and user information on the mobile terminal device are obtained; wherein, the application information includes the plurality of first applications; and the user information includes the first user identifiers of the plurality of users;

[0047] Based on the application information and the user information, a first access permission set is generated according to a preset user permission configuration; wherein, the first access permission set is composed of multiple first access permission tables corresponding to the multiple users.

[0048] In some optional embodiments of this application, the second user type is a user with full system access rights, and correspondingly, the first user type is a user with preset partial system access rights.

[0049] In some optional embodiments of this application, generating a first access permission set based on the application information and the user information and a preset user permission configuration specifically includes:

[0050] Multiple blank access permission tables are generated corresponding to the first user identifiers of the multiple users;

[0051] Select each blank access permission table in turn as the current access permission table, and fill the current access permission table according to the first permission setting method until all blank access permission tables have been selected and filled.

[0052] The first permission setting method is as follows:

[0053] Based on the preset user permission configuration, configure the permission access type for each first application in the application information to generate multiple application access permission groups; and populate the multiple application access permission groups into the current access permission table.

[0054] In some optional embodiments of this application, the preferred storage format for the first access permission set includes, but is not limited to, json, txt, toml, yaml and xml formats.

[0055] When the first user identifier matches the second user type, this application obtains application information and user information on the mobile terminal device, and generates a first access permission set consisting of multiple first access permission tables based on preset user permission configuration. It can pre-store multiple first access permission tables, thereby facilitating the acquisition of the first access permission table based on the first user identifier and meeting the needs of the current task.

[0056] In some embodiments of this application, obtaining the first access permission table corresponding to the current user based on the first user identifier specifically includes:

[0057] Corresponding to the first user identifier, the first access permission table of the current user is obtained by matching from the first access permission set.

[0058] This application ensures accurate acquisition of the current user's first access permission table by matching the first user identifier with the current user's first access permission table in the first access permission set, thereby facilitating subsequent permission settings based on the first access permission table.

[0059] Step S103: Set the current user's access permissions to the plurality of first applications according to the first access permission table.

[0060] In some embodiments of this application, setting the current user's access permissions to the plurality of first applications according to the first access permission table specifically includes:

[0061] Based on the first access permission table, obtain the first application identifier and permission access type of multiple first applications;

[0062] Based on the first user identifier, the first application identifier of each first application, and the permission access type, set the current user's access permissions to the multiple first applications.

[0063] In some optional embodiments of this application, the first application identifier of the first application is preferably the application package name.

[0064] In some optional embodiments of this application, the permission access type of the first application is preferably a Boolean value.

[0065] For example, if the permission access type of a first application is "false" and the first application is identified as "package:com.android.camera", it means that in the current user's access permission control, the current user's access permission to the identifier named "com.android.camera" needs to be disabled.

[0066] In some optional embodiments of this application, the step of setting the current user's access permissions to the plurality of first applications based on the first user identifier, the first application identifier of each first application, and the access permission type specifically includes:

[0067] Each of the first applications is selected as the current application in turn, and the current user's access permissions to the current application are set according to the first permission control method until all of the multiple first applications have been set.

[0068] The first access control method is as follows:

[0069] Based on the first application identifier and permission access type of the current application, the underlying application control interface of the mobile terminal device is invoked to set the current user's access permissions to the current application.

[0070] This application obtains the first application identifier and permission access type of each of the multiple first applications through the first access permission table, and then sets the current user's access permissions to each first application according to the first user identifier, the first application identifier of each first application and the permission access type. It can set permissions according to the current user and for each first application, and the control process is simple, thereby controlling the user's access permissions when accessing system applications more efficiently.

[0071] This application obtains the first user identifier of the current user in response to a user switching operation on a mobile terminal device, and when the first user identifier matches a first user type, obtains a first access permission table, and then sets the current user's access permissions according to the first access permission table. Compared with the prior art, this application directly obtains the first access permission table to set access permissions, without the need for multi-layer verification of user identity. At the same time, it moves the timing of permission control forward to the time of user switching, simplifying the control process. Moreover, it only needs to obtain the first user identifier and does not need to obtain user privacy information, thus preventing privacy leakage. This simplifies the control process for controlling user access permissions to system applications.

[0072] Corresponding to the aforementioned method, please refer to Figure 2. This application embodiment also provides a user permission control device, including a user identifier acquisition module 210, a first permission acquisition module 220, and a first permission setting module 230.

[0073] The user identifier acquisition module 210 is used to acquire the first user identifier of the current user being switched to in response to a user switching operation on a mobile terminal device.

[0074] The first permission acquisition module 220 is used to acquire a first access permission table corresponding to the current user based on the first user identifier when the first user identifier matches a preset first user type; wherein, the first access permission table includes multiple first applications;

[0075] The first permission setting module 230 is used to set the current user's access permissions to the plurality of first applications according to the first access permission table.

[0076] In some embodiments of this application, a first permission generation module 240 is also included; the first permission generation module 240 includes an information acquisition unit 241 and a permission generation unit 242;

[0077] The information acquisition unit 241 is used to acquire application information and user information on the mobile terminal device when the first user identifier matches a preset second user type; wherein, the application information includes the plurality of first applications; and the user information includes the first user identifiers of the plurality of users;

[0078] The permission generation unit 242 is used to generate a first access permission set based on the application information and the user information and a preset user permission configuration; wherein the first access permission set is composed of multiple first access permission tables corresponding to the multiple users.

[0079] In some embodiments of this application, the first permission acquisition module 220 includes a first permission acquisition unit 221;

[0080] The first permission acquisition unit 221 is used to obtain the first access permission table of the current user by matching from the first access permission set corresponding to the first user identifier.

[0081] In some embodiments of this application, the first permission setting module 230 includes an application information acquisition unit 231 and a first permission setting unit 232;

[0082] The application information acquisition unit 231 is used to acquire the first application identifier and permission access type of multiple first applications according to the first access permission table;

[0083] The first permission setting unit 232 is used to set the current user's access permissions to the plurality of first applications based on the first user identifier, the first application identifier of each first application, and the permission access type.

[0084] This application obtains the first user identifier of the current user in response to a user switching operation on a mobile terminal device, and when the first user identifier matches a first user type, obtains a first access permission table, and then sets the current user's access permissions according to the first access permission table. Compared with the prior art, this application directly obtains the first access permission table to set access permissions, without the need for multi-layer verification of user identity. At the same time, it moves the timing of permission control forward to the time of user switching, simplifying the control process. Moreover, it only needs to obtain the first user identifier and does not need to obtain user privacy information, thus preventing privacy leakage. This simplifies the control process for controlling user access permissions to system applications.

[0085] Adaptively, embodiments of this application also provide a computer device and a computer-readable storage medium.

[0086] The computer device includes: a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor;

[0087] The processor executes the computer program to implement the user access control method described in this application.

[0088] The computer-readable storage medium stores multiple instructions adapted for loading by a processor to execute a user access control method as described in this application.

[0089] The above description represents some embodiments of this application, providing a further detailed explanation of the purpose, technical solution, and beneficial effects of this application. It should be understood that the above-described embodiments of this application should not be construed as limiting this application. In particular, any changes, modifications, equivalent substitutions, and variations made by those skilled in the art within the spirit and principles of this application should be included within the scope of protection of this application.

Claims

1. A user authority control method characterized by comprising: The method comprises: in response to a user switching operation on a mobile terminal device, obtaining a first user identifier of a current user switched to; when the first user identifier matches a preset first user type, obtaining a first access permission table corresponding to the current user according to the first user identifier; wherein the first access permission table comprises a plurality of first applications; setting access permissions of the current user to the plurality of first applications according to the first access permission table.

2. The user authority control method according to claim 1, wherein The method further comprises: when the first user identifier matches a preset second user type, obtaining application information and user information on the mobile terminal device; wherein the application information comprises the plurality of first applications; and the user information comprises first user identifiers of a plurality of users; generating a first access permission set based on a preset user permission configuration according to the application information and the user information; wherein the first access permission set is composed of a plurality of first access permission tables corresponding to the plurality of users.

3. The user authority control method according to claim 2, wherein The method of obtaining the first access permission table corresponding to the current user according to the first user identifier specifically comprises: from the first access permission set, matching the first access permission table of the current user corresponding to the first user identifier.

4. The user authority control method of claim 1, wherein The method of setting the access permissions of the current user to the plurality of first applications according to the first access permission table specifically comprises: obtaining first application identifiers and permission access types of the plurality of first applications according to the first access permission table; setting the access permissions of the current user to the plurality of first applications according to the first user identifier, the first application identifier and the permission access type of each of the first applications.

5. An apparatus for controlling user authority, characterized by comprising: The method comprises a user identifier obtaining module, a first permission obtaining module and a first permission setting module; the user identifier obtaining module is configured to obtain a first user identifier of a current user switched to in response to a user switching operation on a mobile terminal device; the first permission obtaining module is configured to obtain a first access permission table corresponding to the current user according to the first user identifier when the first user identifier matches a preset first user type; wherein the first access permission table comprises a plurality of first applications; the first permission setting module is configured to set access permissions of the current user to the plurality of first applications according to the first access permission table.

6. The user authority control device according to claim 5, wherein The method further comprises a first permission generation module; the first permission generation module comprises an information obtaining unit and a permission generation unit; the information obtaining unit is configured to obtain application information and user information on the mobile terminal device when the first user identifier matches a preset second user type; wherein the application information comprises the plurality of first applications; and the user information comprises first user identifiers of a plurality of users; the permission generation unit is configured to generate a first access permission set based on a preset user permission configuration according to the application information and the user information; wherein the first access permission set is composed of a plurality of first access permission tables corresponding to the plurality of users.

7. The user authority control device according to claim 6, wherein the first permission obtaining module comprises a first permission obtaining unit; The first permission obtaining unit is configured to match a first access permission table of a current user from the first access permission set according to the first user identifier.

8. The user authority control device according to claim 5, wherein The first permission setting module comprises an application information obtaining unit and a first permission setting unit. The application information obtaining unit is configured to obtain first application identifiers and permission access types of a plurality of first applications according to the first access permission table. The first permission setting unit is configured to set access permissions of the current user to the plurality of first applications according to the first user identifier, the first application identifier and the permission access type of each first application.

9. A computer device, comprising: Comprise: A processor; A memory; A computer program stored in the memory and configured to be executed by the processor; When the processor executes the computer program, the computer program implements the user permission control method of any one of claims 1 to 4.

10. A computer-readable storage medium, characterized in that, The computer readable storage medium stores a plurality of instructions, which are suitable for being loaded by the processor to execute the user permission control method of any one of claims 1 to 4.

Images