Client-Side Access Right Control for Web Applications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for controlling user access rights in web application systems are either complex, require significant server processing, or expose security risks by allowing users to see and interact with unauthorized links, leading to potential system vulnerabilities.
Innovation Solution
A method where a client acquires login information from a user, sends it to a server to query the corresponding access rights, and then controls access based on the received information, reducing server processing and enhancing security by hiding unauthorized links or disabling them.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all right elements are displayed and all processing is completed on the server, then users can know their rights after operation, but this exposes security risks and increases server processing pressure
Solution Approach 1:
The patent applies preliminary action by determining and displaying only the right elements that the user is entitled to before the user performs any operation. The server determines the user's rights based on login information and pre-loads only the authorized right elements into the client, so that users can immediately see and interact with their authorized options without needing to attempt operations first.
Solution Approach 2:
The patent extracts the right element determination logic from the server and implements it in the client. The server only sends the list of authorized right elements to the client, and the client itself handles the display and interaction logic for these elements. This extraction reduces server processing pressure and improves security by not exposing unauthorized elements.
2Reliability
If active web technology with implanted code is used to control right element display, then unauthorized elements are not displayed, but implementation becomes complex and requires large amounts of code
Solution Approach 1:
The patent applies self-service by enabling the client to autonomously determine and display right elements based on the authorized list received from the server. The client independently handles the logic of which elements to display and how to interact with them, without requiring complex server-side code implantation or active web technology. This simplifies implementation while maintaining secure access control.
3Ease of operation
If server performs all right determination processing, then centralized control is achieved, but server processing pressure increases significantly
Solution Approach 1:
The patent applies segmentation by dividing the right determination process into two parts: the server segment that determines and sends the authorized right element list, and the client segment that displays and handles interactions with these elements. This segmentation reduces server processing pressure while maintaining centralized control over what rights are granted, as the server still controls the authoritative list of authorized elements.
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
The present invention relates to the field of mobile communications technologies, and in particular, to a right control method, a client, and a server, so as to resolve a technical problem in the prior art that there is no method that can better control a right of a user. In embodiments of the present invention, the server can send right information corresponding to a login account to the client, so that the client controls access right of the login account, which does not cause too much burden on the server; a manner is more direct in which the client controls the access right of the login account, thereby reducing control time and generating higher control efficiency.