CN113254953A - Authority distribution management method, device, online education system and storage medium - Google Patents

Authority distribution management method, device, online education system and storage medium Download PDF

Info

Publication number
CN113254953A
CN113254953A CN202110470822.6A CN202110470822A CN113254953A CN 113254953 A CN113254953 A CN 113254953A CN 202110470822 A CN202110470822 A CN 202110470822A CN 113254953 A CN113254953 A CN 113254953A
Authority
CN
China
Prior art keywords
user
data
virtual
query
mapping
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202110470822.6A
Other languages
Chinese (zh)
Inventor
卢鑫
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Eaglesoul Technology Co Ltd
Original Assignee
Shenzhen Eaglesoul Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Eaglesoul Technology Co Ltd filed Critical Shenzhen Eaglesoul Technology Co Ltd
Priority to CN202110470822.6A priority Critical patent/CN113254953A/en
Publication of CN113254953A publication Critical patent/CN113254953A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/604Tools and structures for managing or administering access control systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/32User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/36User authentication by graphic or iconic representation
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/62Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
    • G06Q50/10Services
    • G06Q50/20Education
    • G06Q50/205Education administration or guidance
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141Access rights, e.g. capability lists, access control lists, access tables, access matrices

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Business, Economics & Management (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Strategic Management (AREA)
  • Tourism & Hospitality (AREA)
  • Educational Administration (AREA)
  • Educational Technology (AREA)
  • Automation & Control Theory (AREA)
  • Databases & Information Systems (AREA)
  • Economics (AREA)
  • Human Resources & Organizations (AREA)
  • Marketing (AREA)
  • Primary Health Care (AREA)
  • General Business, Economics & Management (AREA)
  • Storage Device Security (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

The invention relates to the technical field of online education, and discloses a method and a device for managing authority distribution, an online education system and a storage medium, wherein the method comprises the following steps: generating a first query request for a preset virtual data view according to an initial system login request sent by a user, querying the virtual data view according to the first query request to obtain a first query result, constructing a second query request for each data source according to a mapping relation between a virtual table and a physical layer of the first query result and the first query result, and sending the second query request to each data source to obtain a second query result; acquiring a system role corresponding to the user from the user role table according to the second query result; and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user. By the method, a system administrator can adjust the access authority acquired by the user by adjusting the mapping relation, and the flexibility of authority distribution is improved so as to ensure the safety of the system and the content.

Description

Authority distribution management method, device, online education system and storage medium
Technical Field
The invention relates to the technical field of online education, in particular to a permission distribution management method, a permission distribution management device, an online education system and a storage medium.
Background
With the development of internet technology, various industries are changed, education industries also increase channels for more learning, knowledge teaching is limited to the propagation of books, various intelligent devices such as computers and mobile phones can be used as propagation tools, the development of an online learning system is more important, the development of the online learning system is essentially a knowledge platform capable of learning through the internet, compared with the traditional online education mode, the online education mode is greatly different, the online education mode breaks through the limitation of time and space, a user can learn at any time, and the online learning system has the functions of examination, data analysis and the like besides the teaching function, and can help the user to learn better and help teachers to manage. When the online education system is applied to different types of users, such as teachers and students, the authority control function needs to be added, so that different users have different control or access authorities to the system.
In the prior art, after different types of users are assigned system permissions, a system administrator cannot flexibly assign and manage the service permissions and the use permissions of the users as required to ensure the safety of the system and the content.
Disclosure of Invention
The invention mainly aims to solve the technical problem that the conventional authority distribution management technology cannot flexibly distribute and manage the service authority and the use authority of a user according to needs.
The invention provides a right distribution management method, which is applied to an online education system and comprises the following steps:
acquiring an initial system login request sent by a user on a user interface in the online education system;
generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through operation of a relational operator;
querying a corresponding virtual table queried from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for encapsulating and abstracting educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining a mapping relationship between the virtual table and the physical layer;
according to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode;
acquiring a system role corresponding to the user from a preset user role table according to the second query result;
and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority.
Optionally, in a first implementation manner of the first aspect of the present invention, before the obtaining of the initial system login request sent by the user through the user interface, the method further includes
Acquiring educational administration data of each data source in a physical layer;
constructing a virtual table corresponding to the educational administration data of each data source according to a preset mapping mode;
generating a data access interface for each data source according to the mapping relation between the educational administration data of each data source and the virtual table;
and carrying out relational operator operation on the virtual table to obtain a virtual data view.
Optionally, in a second implementation manner of the first aspect of the present invention, the mapping manner includes structure mapping, type mapping, and address mapping, and the constructing the virtual table corresponding to the educational administration data of each data source according to the preset mapping manner includes:
according to the structural mapping, the educational administration data of each data source is mapped into a two-dimensional relationship in a unified manner;
according to the type mapping, uniformly mapping the data types of the educational administration data of the data sources into a single character string type;
according to the address mapping, uniformly mapping the geographic address of each data source into a virtual address to form a globally uniform virtual address space and shield the physical distribution of the data sources;
and generating a virtual table corresponding to the educational administration data of the data source according to the two-dimensional relationship, the character string type and the virtual address space.
Optionally, in a third implementation manner of the first aspect of the present invention, the constructing, according to the first query result and the mapping relationship, a second query request for each data source, sending the second query request to each data source through a preset data access interface, and acquiring, according to a preset query manner, a second query result from each data source includes:
acquiring a corresponding two-dimensional relationship, a character string type and a virtual address space according to the virtual table in the first query result;
constructing a second query request for each data source according to the two-dimensional relationship, the character string type, the virtual address space and the mapping relationship corresponding to the virtual table in the first query result;
and sending the second query request to each data source through a preset data access interface, and acquiring a second query result from each data source according to a preset query mode.
Optionally, in a fourth implementation manner of the first aspect of the present invention, before the obtaining the initial system login request sent by the user through the user interface, the method further includes:
acquiring the job information of different users;
carrying out role classification on the job information to obtain a system role corresponding to the job information;
distributing the authority to the system role to obtain the system access authority corresponding to the system role;
and constructing a user role table according to different system roles and corresponding system access permissions.
Optionally, in a fifth implementation manner of the first aspect of the present invention, after the acquiring the system access right of the system role and allocating the system access right to the user, the method further includes:
intercepting a system operation request submitted by the user, and acquiring an operation code corresponding to the system operation request;
matching the operation code with the system access right;
if the matching is successful, performing corresponding system operation according to the operation code;
and if the matching fails, rejecting the system operation request.
Optionally, in a sixth implementation manner of the first aspect of the present invention, before the obtaining the initial system login request sent by the user through the user interface, the method further includes:
acquiring a biological information image input by the user through a biological information acquisition device in a user interface, wherein the biological information image at least comprises one of an iris image, a fingerprint image and a handwriting image;
calculating a feature value of the biological information image;
judging whether the user is a legal user or not according to the characteristic value;
and if the user is a legal user, acquiring user information input by the user on the user interface, and generating the initial system login request according to the user information.
A second aspect of the present invention provides a right assignment management apparatus, including:
the login module is used for acquiring an initial system login request sent by a user on a user interface in the online education system;
the first request generation module is used for generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements provided for a user and is formed by at least one virtual table through operation of a relational operator;
the query module is used for querying a corresponding virtual table from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for packaging and abstracting the educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining the mapping relationship between the virtual table and the physical layer;
the second request generation module is used for constructing second query requests for the data sources according to the first query results and the mapping relation, sending the second query requests to the data sources through a preset data access interface, and acquiring second query results from the data sources according to a preset query mode;
the role obtaining module is used for obtaining a system role corresponding to the user from a preset user role table according to the second query result;
and the authority distribution module is used for acquiring the system access authority corresponding to the system role and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority.
Optionally, in a first implementation manner of the second aspect of the present invention, the authority allocation management apparatus further includes a data mapping module, where the data mapping module includes:
the data acquisition unit is used for acquiring educational administration data of each data source in a physical layer;
the virtual table construction unit is used for constructing a virtual table corresponding to the educational administration data of each data source according to a preset mapping mode;
the interface generating unit is used for generating a data access interface for each data source according to the mapping relation between the educational administration data of each data source and the virtual table;
and the view generation unit is used for carrying out relational operator operation on the virtual table to obtain a virtual data view.
Optionally, in a second implementation manner of the second aspect of the present invention, the mapping manner includes a structure mapping, a type mapping, and an address mapping, and the virtual table constructing unit is specifically configured to:
according to the structural mapping, the educational administration data of each data source is mapped into a two-dimensional relationship in a unified manner;
according to the type mapping, uniformly mapping the data types of the educational administration data of the data sources into a single character string type;
according to the address mapping, uniformly mapping the geographic address of each data source into a virtual address to form a globally uniform virtual address space and shield the physical distribution of the data sources;
and generating a virtual table corresponding to the educational administration data of the data source according to the two-dimensional relationship, the character string type and the virtual address space.
Optionally, in a third implementation manner of the second aspect of the present invention, the second request generating module is specifically configured to:
acquiring a corresponding two-dimensional relationship, a character string type and a virtual address space according to the virtual table in the first query result;
constructing a second query request for each data source according to the two-dimensional relationship, the character string type, the virtual address space and the mapping relationship corresponding to the virtual table in the first query result;
and sending the second query request to each data source through a preset data access interface, and acquiring a second query result from each data source according to a preset query mode.
Optionally, in a fourth implementation manner of the second aspect of the present invention, the authority allocation management device further includes a role table construction module, where the role table construction module is specifically configured to:
acquiring the job information of different users;
carrying out role classification on the job information to obtain a system role corresponding to the job information;
distributing the authority to the system role to obtain the system access authority corresponding to the system role;
and constructing a user role table according to different system roles and corresponding system access permissions.
Optionally, in a fifth implementation manner of the second aspect of the present invention, the authority allocation management apparatus further includes a system access module, where the system access module is specifically configured to:
intercepting a system operation request submitted by the user, and acquiring an operation code corresponding to the system operation request;
matching the operation code with the system access right;
if the matching is successful, performing corresponding system operation according to the operation code;
and if the matching fails, rejecting the system operation request.
Optionally, in a sixth implementation manner of the second aspect of the present invention, the authority allocation management apparatus further includes an identity verification module, where the identity verification module is specifically configured to:
acquiring a biological information image input by the user through a biological information acquisition device in a user interface, wherein the biological information image at least comprises one of an iris image, a fingerprint image and a handwriting image;
calculating a feature value of the biological information image;
judging whether the user is a legal user or not according to the characteristic value;
and if the user is a legal user, acquiring user information input by the user on the user interface, and generating the initial system login request according to the user information.
A third aspect of the present invention provides an online education system including: the authority distribution management device, the mobile terminal, the biological information acquisition device connected with the mobile terminal and the teaching service subsystem are arranged;
the biological information acquisition device is used for acquiring a biological information image input by a user, the biological information image is used for identity authentication, and when the identity authentication passes, an access signal is sent to the mobile terminal;
the mobile terminal is used for displaying a preset login page on a user interface when receiving an access signal of the biological information acquisition device, generating an initial system login request from user information input by a user on the login interface, and sending the initial system login request to the authority distribution management device;
the authority distribution management device is used for distributing system access authority to the user according to the received initial system login request;
and the teaching service subsystem is used for the user to correspondingly operate the teaching service according to the distributed system access authority.
A fourth aspect of the present invention provides a computer-readable storage medium having stored therein instructions, which, when run on a computer, cause the computer to perform the steps of the rights allocation management method described above.
According to the technical scheme, an initial system login request sent by a user on a user interface in the online education system is acquired; generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through operation of a relational operator; querying a corresponding virtual table queried from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for encapsulating and abstracting educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining a mapping relationship between the virtual table and the physical layer; according to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode; acquiring a system role corresponding to the user from a preset user role table according to the second query result; and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority. By the method, a system administrator can adjust the access authority acquired by the user by adjusting the mapping relation among the virtual data view, the virtual table and the data source of the physical layer, so that the flexibility of authority distribution is improved, and the safety of the system and the content is ensured.
Drawings
FIG. 1 is a diagram of a first embodiment of a rights allocation management method according to an embodiment of the invention;
FIG. 2 is a diagram of a second embodiment of a rights allocation management method according to an embodiment of the invention;
FIG. 3 is a diagram of an embodiment of a right distribution management apparatus according to an embodiment of the present invention;
fig. 4 is a schematic diagram of another embodiment of the right distribution management apparatus in the embodiment of the present invention;
fig. 5 is a schematic diagram of an embodiment of an online education system according to the embodiment of the present invention.
Detailed Description
According to the technical scheme, an initial system login request sent by a user on a user interface in the online education system is acquired; generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through operation of a relational operator; querying a corresponding virtual table queried from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for encapsulating and abstracting educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining a mapping relationship between the virtual table and the physical layer; according to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode; acquiring a system role corresponding to the user from a preset user role table according to the second query result; and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority. By the method, a system administrator can adjust the access authority acquired by the user by adjusting the mapping relation among the virtual data view, the virtual table and the data source of the physical layer, so that the flexibility of authority distribution is improved, and the safety of the system and the content is ensured
The terms "first," "second," "third," "fourth," and the like in the description and in the claims, as well as in the drawings, if any, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It will be appreciated that the data so used may be interchanged under appropriate circumstances such that the embodiments described herein may be practiced otherwise than as specifically illustrated or described herein. Furthermore, the terms "comprises," "comprising," or "having," and any variations thereof, are intended to cover non-exclusive inclusions, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
For convenience of understanding, a detailed flow of an embodiment of the present invention is described below, and referring to fig. 1, a first embodiment of a rights allocation management method in an embodiment of the present invention includes:
101. acquiring an initial system login request sent by a user interface of an online education system;
it is to be understood that the executing entity of the present invention may be a rights assignment management device, and may also be a terminal or a server, which is not limited herein. The embodiment of the present invention is described by taking a server as an execution subject.
In this embodiment, when a user initially uses an online education system, the authority of the user in the online education system needs to be allocated, account information used when the user logs in the online education system is associated with the allocated authority, and in a subsequent login process, operation is directly performed according to the authority associated with the account information without allocating the authority again.
In this embodiment, the initial system login request includes account information of the user, including a user name and an account password, and finally, after acquiring information of corresponding job title, post, job title, and the like in the online education system according to the account information, an authority is allocated to the user.
102. Generating a first query request for a preset virtual data view according to an initial system login request, wherein the virtual data view is a two-dimensional relation which provides a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through the operation of a relational operator;
103. inquiring a corresponding virtual table from a virtual data view according to the first inquiry request to obtain a first inquiry result, wherein the virtual table is used for packaging and abstracting educational administration data of each data source in a physical layer, uniformly expressing the data sources into a two-dimensional relation, and obtaining a mapping relation between the virtual table and the physical layer;
before a user logs in an online education system, the system abstracts and encapsulates bottom data, namely educational administration data in a data source, and divides a data model into three layers from low to high according to different data abstraction levels: the Physical Layer (Physical Layer), the Virtual surface Layer (Virtual Table Layer), the Virtual data View Layer (Virtual View Layer) and the two-Layer mapping relationship comprise: the method comprises the steps of mapping a physical layer to a virtual surface layer and mapping the virtual surface layer to a virtual data view layer, wherein the physical layer is composed of various distributed and heterogeneous data sources, each data source is provided with a data structure and an access interface which are proprietary to the data source, the data sources are mainly educational administration data related to an online education system, the educational administration data of the virtual surface layer physical layer are packaged and abstracted, and the data sources of the physical layer are uniformly expressed into a simple two-dimensional relation, namely a virtual table, through a virtualization mechanism. The virtual tables and the physical tables are in one-to-one correspondence, and mapping information is stored in the metadata manager. The virtual table consists of two parts: table names and field lists. The fields in the virtual table have only one data type, which is String type (String). When interacting with the data source of the physical layer, the data type of the data source is converted into the real data type of the data source. Each virtual table and its fields have a virtual address. All virtual addresses constitute a global address space. The virtual surface layer solves the problems of heterogeneity and distributivity of the bottom layer data source. The virtual data view layer is directly oriented to the user, and the virtual data view provides data specifications or service modes meeting application requirements for the user. Like the virtual table, the virtual data view is also a two-dimensional relationship, consisting of a table name and a field list. The virtual data view is formed by one or more virtual tables through operation of relational operators, and the relational operators comprise selection, projection, connection, addition, aggregation and the like. Thus, the relationship of the virtual data view to the virtual table is 1: n, one virtual data view corresponds to one or more virtual tables.
In this embodiment, after the system identifies that the user interface sends an initial system login request, a query request is generated, a preset virtual data view is queried, and a corresponding virtual table is obtained according to a mapping relationship between the virtual data view and the virtual table.
In this embodiment, the system abstracts and encapsulates the educational administration data, and maps the educational administration data into a corresponding virtual table, so that the mapping capacity from the physical table of the physical layer to the virtual table of the virtual surface layer mainly includes three aspects: the method comprises the steps of structure mapping, type mapping and address mapping, wherein the data structures of physical data sources are various and comprise structuralization, semi-structuralization and unstructured, and the structure mapping is responsible for uniformly mapping the heterogeneous data structures into a standard two-dimensional relationship, namely a virtual table; the data types of the physical data source also have diversity, including integer type, character string type, Boolean type, date type, etc., and the specific definitions of the data types are different in each database, and the type mapping is responsible for uniformly mapping the various data types into a single character string type; and (3) address mapping: the physical data sources are distributed on a plurality of servers to form a plurality of address spaces, and the address mapping is responsible for uniformly mapping the physical addresses of the physical data sources into virtual addresses to form a global uniform address space and shield the physical distribution of the data sources.
104. According to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode;
in this embodiment, according to the virtual table in the first query result, according to the mapping of the virtual table and the physical table, including structure mapping, type mapping and address mapping, the corresponding two-dimensional relationship, character string type and virtual address space are obtained, and according to the obtained two-dimensional relationship, character string type and virtual address space, the query is performed on the corresponding data sources through the preset data access interfaces, so as to obtain the corresponding educational administration data.
105. Acquiring a system role corresponding to the user from a preset user role table according to a second query result;
in this embodiment, the educational administration data in the second query result may be real-world identification data including the post, title, and position of the user, and the system may perform role classification or classification on different post data in advance, for example, in reality, different educational administration levels have different permissions on the system, and for a common director teacher, a executive, a senior, a teacher and a manager, in a real educational administration relationship, the higher the post level is, the higher the corresponding administrative access permission on the online education system is, or for different director teachers and different lessons in the online education system, the physical teacher has an administrative permission on a physical lesson, but access to english lessons or other operations will be intercepted.
In the embodiment, the job information of different users is acquired; carrying out role classification on the job information to obtain a system role corresponding to the job information; distributing the authority to the system role to obtain the system access authority corresponding to the system role; and constructing a user role table according to different system roles and corresponding system access permissions, and directly inquiring the user role table constructed in advance after acquiring the job information corresponding to the user from the data source, so that the permissions can be distributed to the user.
106. And acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority.
In this embodiment, after the system permission is assigned to the user, the system intercepts a system operation request submitted by the user, and obtains an operation code corresponding to the system operation request; matching the operation code with the system access right; if the matching is successful, performing corresponding system operation according to the operation code; and if the matching fails, rejecting the system operation request.
In the embodiment, an initial system login request sent by a user on a user interface in the online education system is acquired; generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through operation of a relational operator; querying a corresponding virtual table queried from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for encapsulating and abstracting educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining a mapping relationship between the virtual table and the physical layer; according to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode; acquiring a system role corresponding to the user from a preset user role table according to the second query result; and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority. By the method, a system administrator can adjust the access authority acquired by the user by adjusting the mapping relation among the virtual data view, the virtual table and the data source of the physical layer, so that the flexibility of authority distribution is improved, and the safety of the system and the content is ensured.
Referring to fig. 2, a second embodiment of the rights allocation management method according to the embodiment of the present invention specifically includes the following steps:
201. acquiring a biological information image input by the user through a biological information acquisition device in a user interface;
202. calculating a feature value of the biological information image;
in this embodiment, the method for managing authority assignment by a user is mainly applied in the field of online education, and in practical application, the method can be applied to various aspects of the online education system regarding system authority, for example, the online education system can be regarded as an internal system and an external system, if the online education is the internal system, the authority assignment management can be a hierarchical classification of authority for different jobs, posts or titles inside instructor, such as a general manager teacher, a executive officer, a senior officer and a chief officer, after the user performs identity identification on the biological information collection device, the user acquires data of the job, post or title corresponding to the user by querying a virtual data view, and performs authority assignment according to the acquired data of job, post or title according to pre-divided authority, if the online education system is an external system, the authority assignment management can be based on different purchased member levels in the online education system, and distributing the authority of the user, for example, the online education system pushes a vip membership system, members with different levels have different operation authorities, after the user identifies on the biological information acquisition device, the user inquires the virtual data view to obtain the vip level corresponding to the user, and distributes the authority according to the obtained vip level of the user and the pre-divided authority.
In practical application, the biological information collected by the biological information collection device may at least include one of an iris, a fingerprint and a handwriting, in this embodiment, the collected biological information is taken as the handwriting as an example, the biological information image collected by the biological information collection device is a handwriting image described by a user, the user collects the user handwriting through the biological information collection device, the user handwriting image is formed, sawteeth of the user handwriting are removed and the user handwriting image is converted into a 01 matrix, then the 01 matrix is converted into a 480 x 640 two-dimensional matrix, the edge is set to be 0, a minimum matrix is obtained, and finally, a characteristic value of the minimum matrix is extracted, namely, a characteristic value of the handwriting.
203. Judging whether the user is a legal user or not according to the characteristic value;
by acquiring the characteristic values of different legal users pre-stored in the system and comparing the characteristic values of the legal users with the characteristic values of the current user, if the error is smaller than or equal to a preset numerical value, the user is a legal user, and if the error is larger than the preset numerical value, the user is an illegal user.
204. If the user is a legal user, acquiring user information input by the user on a user interface, and generating an initial system login request according to the user information;
205. generating a first query request for a preset virtual data view according to an initial system login request, wherein the virtual data view is a two-dimensional relation which provides a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through the operation of a relational operator;
206. inquiring a corresponding virtual table from a virtual data view according to the first inquiry request to obtain a first inquiry result, wherein the virtual table is used for packaging and abstracting educational administration data of each data source in a physical layer, uniformly expressing the data sources into a two-dimensional relation, and obtaining a mapping relation between the virtual table and the physical layer;
207. according to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode;
208. acquiring a system role corresponding to the user from a preset user role table according to a second query result;
209. and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority.
On the basis of the previous embodiment, the embodiment adds a process of performing identity verification on a user through a biological information acquisition device, and calculates a characteristic value of a biological information image by acquiring the biological information image input by the user through the biological information acquisition device in a user interface; judging whether the user is a legal user or not according to the characteristic value; and if the user is a legal user, acquiring user information input by the user on the user interface, and generating the initial system login request according to the user information. And the filtering of illegal users is realized by carrying out identity authentication on the users.
The right distribution management method in the embodiment of the present invention is described above, and a right distribution management apparatus in the embodiment of the present invention is described below with reference to fig. 3, where an embodiment of a right distribution management apparatus in the embodiment of the present invention includes:
a login module 301, configured to obtain an initial system login request sent by a user on a user interface in the online education system;
a first request generation module 302, configured to generate a first query request for a preset virtual data view according to the initial system login request, where the virtual data view is a two-dimensional relationship providing a data paradigm meeting an operation requirement for a user and is computed by at least one virtual table through a relational operator;
the query module 303 is configured to query, according to the first query request, a virtual table corresponding to the virtual data view query to obtain a first query result, where the virtual table is used to encapsulate and abstract the educational administration data of each data source in a physical layer, uniformly represent the data sources in a two-dimensional relationship, and obtain a mapping relationship between the virtual table and the physical layer;
a second request generation module 304, configured to construct a second query request for each data source according to the first query result and the mapping relationship, send the second query request to each data source through a preset data access interface, and obtain a second query result from each data source according to a preset query manner;
the role obtaining module 305 is configured to obtain a system role corresponding to the user from a preset user role table according to the second query result;
and the authority distribution module 306 is used for acquiring the system access authority corresponding to the system role and distributing the system access authority to the user so that the user can perform system operation according to the system access authority.
In an embodiment of the present invention, the right distribution management apparatus runs the right distribution management method, and the right distribution management method includes: acquiring an initial system login request sent by a user on a user interface in the online education system; generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through operation of a relational operator; querying a corresponding virtual table queried from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for encapsulating and abstracting educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining a mapping relationship between the virtual table and the physical layer; according to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode; acquiring a system role corresponding to the user from a preset user role table according to the second query result; and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority. By the method, a system administrator can adjust the access authority acquired by the user by adjusting the mapping relation among the virtual data view, the virtual table and the data source of the physical layer, so that the flexibility of authority distribution is improved, and the safety of the system and the content is ensured.
Referring to fig. 4, a second embodiment of the right distribution management apparatus according to the embodiment of the present invention includes:
a login module 301, configured to obtain an initial system login request sent by a user on a user interface in the online education system;
a first request generation module 302, configured to generate a first query request for a preset virtual data view according to the initial system login request, where the virtual data view is a two-dimensional relationship providing a data paradigm meeting an operation requirement for a user and is computed by at least one virtual table through a relational operator;
the query module 303 is configured to query, according to the first query request, a virtual table corresponding to the virtual data view query to obtain a first query result, where the virtual table is used to encapsulate and abstract the educational administration data of each data source in a physical layer, uniformly represent the data sources in a two-dimensional relationship, and obtain a mapping relationship between the virtual table and the physical layer;
a second request generation module 304, configured to construct a second query request for each data source according to the first query result and the mapping relationship, send the second query request to each data source through a preset data access interface, and obtain a second query result from each data source according to a preset query manner;
the role obtaining module 305 is configured to obtain a system role corresponding to the user from a preset user role table according to the second query result;
and the authority distribution module 306 is used for acquiring the system access authority corresponding to the system role and distributing the system access authority to the user so that the user can perform system operation according to the system access authority.
Wherein, the authority distribution management device further comprises a data mapping module 307, and the data mapping module 307 comprises:
the data acquisition unit 3071 is configured to acquire educational administration data of each data source in the physical layer;
the virtual table construction unit 3072 is configured to construct a virtual table corresponding to the educational administration data of each data source according to a preset mapping manner;
the interface generating unit 3073 is configured to generate a data access interface for each data source according to a mapping relationship between the educational administration data of each data source and the virtual table;
the view generating unit 3074 is configured to perform relational operator operation on the virtual table to obtain a virtual data view.
Optionally, the mapping manner includes structure mapping, type mapping, and address mapping, and the virtual table constructing unit 3072 is specifically configured to:
according to the structural mapping, the educational administration data of each data source is mapped into a two-dimensional relationship in a unified manner;
according to the type mapping, uniformly mapping the data types of the educational administration data of the data sources into a single character string type;
according to the address mapping, uniformly mapping the geographic address of each data source into a virtual address to form a globally uniform virtual address space and shield the physical distribution of the data sources;
and generating a virtual table corresponding to the educational administration data of the data source according to the two-dimensional relationship, the character string type and the virtual address space.
Optionally, the second request generating module 304 is specifically configured to:
acquiring a corresponding two-dimensional relationship, a character string type and a virtual address space according to the virtual table in the first query result;
constructing a second query request for each data source according to the two-dimensional relationship, the character string type, the virtual address space and the mapping relationship corresponding to the virtual table in the first query result;
and sending the second query request to each data source through a preset data access interface, and acquiring a second query result from each data source according to a preset query mode.
The authority distribution management apparatus further includes a role table construction module 308, where the role table construction module 308 is specifically configured to:
acquiring the job information of different users;
carrying out role classification on the job information to obtain a system role corresponding to the job information;
distributing the authority to the system role to obtain the system access authority corresponding to the system role;
and constructing a user role table according to different system roles and corresponding system access permissions.
The right distribution management apparatus further includes a system access module 309, where the system access module 309 is specifically configured to:
intercepting a system operation request submitted by the user, and acquiring an operation code corresponding to the system operation request;
matching the operation code with the system access right;
if the matching is successful, performing corresponding system operation according to the operation code;
and if the matching fails, rejecting the system operation request.
The right distribution management apparatus further includes an identity verification module 310, where the identity verification module 310 is specifically configured to:
acquiring a biological information image input by the user through a biological information acquisition device in a user interface, wherein the biological information image at least comprises one of an iris image, a fingerprint image and a handwriting image;
calculating a feature value of the biological information image;
judging whether the user is a legal user or not according to the characteristic value;
and if the user is a legal user, acquiring user information input by the user on the user interface, and generating the initial system login request according to the user information.
Based on the previous embodiment, the specific functions of each module and the unit composition of part of the modules are described in detail in this embodiment, and by using the apparatus, a system administrator can adjust the access rights acquired by the user by adjusting the mapping relationship among the virtual data view, the virtual table, and the data source of the physical layer, thereby improving the flexibility of rights allocation to ensure the security of the system and the content.
Fig. 3 and 4 above describe the central right distribution management apparatus in the embodiment of the present invention in detail from the perspective of the modular functional entity, and the online education system in the embodiment of the present invention is described in detail from the perspective of the hardware processing.
The online education system includes: the system comprises a permission distribution management device 501, a mobile terminal 502, a biological information acquisition device 503 and a teaching service subsystem 504, wherein the biological information acquisition device 503 is connected with the mobile terminal;
the biometric information acquisition device 503 is configured to acquire a handwriting pattern drawn by a user, where the handwriting pattern is used for authentication, and when the authentication passes, sends an access signal to the mobile terminal 502;
the mobile terminal 502 is configured to display a preset login page on a user interface when receiving an access signal of the biological information acquisition device 503, generate an initial system login request from user information input by a user on the login interface, and send the initial system login request to the authority allocation management device 501;
the authority distribution management device 501 is configured to distribute a system access authority to the user according to the received initial system login request;
the teaching service subsystem 504 is used for the user to perform corresponding operations on the teaching service according to the distributed system access authority.
In this embodiment, a user uses an online education system to perform online education service, performs corresponding system operation according to the authority allocated by the system, before using the online education service of the online education system, needs to perform identity verification, the user performs handwriting description on an external biological information acquisition device 503 to generate a handwriting pattern, the system calculates feature values of the handwriting image through a preset image processing technology, compares the feature values of the handwriting of all the users stored in the system, compares the two feature values, determines whether the user identity is legal, if the user identity is legal, an access signal can be sent to the mobile terminal 502, when receiving the access signal of the biological information acquisition device 503, the mobile terminal 502 displays a preset login page on a user interface, and the user inputs user information through the login page, or acquiring the user information of the current user according to the association relationship between the preset handwriting characteristic value and the user information of the user, generating an initial system login request according to the user information of the current user, and sending the initial system login request to the authority distribution management device 501, wherein the authority distribution management device 501 queries a preset virtual data view according to the received initial system login request, acquires educational administration data from a data source, distributes system access authority to the user according to the educational administration data, and after distributing the system access authority to the user, the user can perform corresponding operation on the educational service through the educational service subsystem 504 according to the distributed system access authority.
The present invention also provides a computer-readable storage medium, which may be a non-volatile computer-readable storage medium, and which may also be a volatile computer-readable storage medium, having stored therein instructions, which, when run on a computer, cause the computer to perform the steps of the rights allocation management method.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses, and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a read-only memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present invention, and not for limiting the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (10)

1. A right distribution management method is applied to an online education system and is characterized by comprising the following steps:
acquiring an initial system login request sent by a user on a user interface in the online education system;
generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements for a user and is formed by at least one virtual table through operation of a relational operator;
querying a corresponding virtual table from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for encapsulating and abstracting the educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining a mapping relationship between the virtual table and the physical layer;
according to the first query result and the mapping relation, a second query request for each data source is constructed, the second query request is sent to each data source through a preset data access interface, and a second query result is obtained from each data source according to a preset query mode;
acquiring a system role corresponding to the user from a preset user role table according to the second query result;
and acquiring system access authority corresponding to the system role, and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority.
2. The rights allocation management method according to claim 1, further comprising, before the obtaining of the initial system login request issued by the user through the user interface:
acquiring educational administration data of each data source in a physical layer;
constructing a virtual table corresponding to the educational administration data of each data source according to a preset mapping mode;
generating a data access interface for each data source according to the mapping relation between the educational administration data of each data source and the virtual table;
and carrying out relational operator operation on the virtual table to obtain a virtual data view.
3. The authority distribution management method according to claim 2, wherein the mapping manner includes a structure mapping, a type mapping and an address mapping, and the constructing a virtual table corresponding to the educational administration data of each data source according to a preset mapping manner includes:
according to the structural mapping, the educational administration data of each data source is mapped into a two-dimensional relationship in a unified manner;
according to the type mapping, uniformly mapping the data types of the educational administration data of the data sources into a single character string type;
according to the address mapping, uniformly mapping the geographic address of each data source into a virtual address to form a globally uniform virtual address space and shield the physical distribution of the data sources;
and generating a virtual table corresponding to the educational administration data of the data source according to the two-dimensional relationship, the character string type and the virtual address space.
4. The right distribution management method according to claim 2, wherein the constructing a second query request for each data source according to the first query result and the mapping relationship, sending the second query request to each data source through a preset data access interface, and acquiring a second query result from each data source according to a preset query manner includes:
acquiring a corresponding two-dimensional relationship, a character string type and a virtual address space according to the virtual table in the first query result;
constructing a second query request for each data source according to the two-dimensional relationship, the character string type, the virtual address space and the mapping relationship corresponding to the virtual table in the first query result;
and sending the second query request to each data source through a preset data access interface, and acquiring a second query result from each data source according to a preset query mode.
5. The rights allocation management method according to claim 1, further comprising, before the obtaining of the initial system login request issued by the user through the user interface:
acquiring the job information of different users;
carrying out role classification on the job information to obtain a system role corresponding to the job information;
distributing the authority to the system role to obtain the system access authority corresponding to the system role;
and constructing a user role table according to different system roles and corresponding system access permissions.
6. The rights allocation management method according to claim 5, further comprising, after the obtaining the system access rights of the system role and allocating the system access rights to the user:
intercepting a system operation request submitted by the user, and acquiring an operation code corresponding to the system operation request;
matching the operation code with the system access right;
if the matching is successful, performing corresponding system operation according to the operation code;
and if the matching fails, rejecting the system operation request.
7. The rights allocation management method according to any one of claims 1-6, further comprising, before the obtaining of the initial system login request issued by the user through the user interface:
acquiring a biological information image input by the user through a biological information acquisition device in a user interface, wherein the biological information image at least comprises one of an iris image, a fingerprint image and a handwriting image;
calculating a feature value of the biological information image;
judging whether the user is a legal user or not according to the characteristic value;
and if the user is a legal user, acquiring user information input by the user on the user interface, and generating the initial system login request according to the user information.
8. A right assignment management apparatus, characterized by comprising:
the login module is used for acquiring an initial system login request sent by a user on a user interface in the online education system;
the first request generation module is used for generating a first query request for a preset virtual data view according to the initial system login request, wherein the virtual data view is a two-dimensional relation of a data paradigm meeting operation requirements provided for a user and is formed by at least one virtual table through operation of a relational operator;
the query module is used for querying a corresponding virtual table from the virtual data view according to the first query request to obtain a first query result, wherein the virtual table is used for packaging and abstracting the educational administration data of each data source in a physical layer, uniformly representing the data sources into a two-dimensional relationship, and obtaining the mapping relationship between the virtual table and the physical layer;
the second request generation module is used for constructing second query requests for the data sources according to the first query results and the mapping relation, sending the second query requests to the data sources through a preset data access interface, and acquiring second query results from the data sources according to a preset query mode;
the role obtaining module is used for obtaining a system role corresponding to the user from a preset user role table according to the second query result;
and the authority distribution module is used for acquiring the system access authority corresponding to the system role and distributing the system access authority to the user so that the user can carry out system operation according to the system access authority.
9. An online education system, characterized in that the online education system includes: the rights allocation management apparatus of claim 8, a mobile terminal, a biological information collection apparatus connected to the mobile terminal, and a teaching service subsystem;
the biological information acquisition device is used for acquiring a biological information image input by a user, the biological information image is used for identity authentication, and when the identity authentication passes, an access signal is sent to the mobile terminal;
the mobile terminal is used for displaying a preset login page on a user interface when receiving an access signal of the biological information acquisition device, generating an initial system login request from user information input by a user on the login interface, and sending the initial system login request to the authority distribution management device;
the authority distribution management device is used for distributing system access authority to the user according to the received initial system login request;
and the teaching service subsystem is used for the user to correspondingly operate the teaching service according to the distributed system access authority.
10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the rights allocation management method according to any one of claims 1-7.
CN202110470822.6A 2021-04-28 2021-04-28 Authority distribution management method, device, online education system and storage medium Pending CN113254953A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110470822.6A CN113254953A (en) 2021-04-28 2021-04-28 Authority distribution management method, device, online education system and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110470822.6A CN113254953A (en) 2021-04-28 2021-04-28 Authority distribution management method, device, online education system and storage medium

Publications (1)

Publication Number Publication Date
CN113254953A true CN113254953A (en) 2021-08-13

Family

ID=77222494

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110470822.6A Pending CN113254953A (en) 2021-04-28 2021-04-28 Authority distribution management method, device, online education system and storage medium

Country Status (1)

Country Link
CN (1) CN113254953A (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020055921A1 (en) * 2000-11-06 2002-05-09 Mitsuhiko Yoshimura Multi-database system
US20110099608A1 (en) * 2009-10-22 2011-04-28 Sap Ag System and Method of Controlling Access to Information in a Virtual Computing Environment
CN103617175A (en) * 2013-11-04 2014-03-05 广东电子工业研究院有限公司 Method for virtualization of large-scale distributed heterogeneous data
CN104462559A (en) * 2014-12-25 2015-03-25 广东电子工业研究院有限公司 Mainstream relation type database table mode objectification and virtualization mechanism
CN108108456A (en) * 2017-12-28 2018-06-01 重庆邮电大学 A kind of information resources distributed enquiring method based on metadata

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020055921A1 (en) * 2000-11-06 2002-05-09 Mitsuhiko Yoshimura Multi-database system
US20110099608A1 (en) * 2009-10-22 2011-04-28 Sap Ag System and Method of Controlling Access to Information in a Virtual Computing Environment
CN103617175A (en) * 2013-11-04 2014-03-05 广东电子工业研究院有限公司 Method for virtualization of large-scale distributed heterogeneous data
CN104462559A (en) * 2014-12-25 2015-03-25 广东电子工业研究院有限公司 Mainstream relation type database table mode objectification and virtualization mechanism
WO2016101301A1 (en) * 2014-12-25 2016-06-30 广东电子工业研究院有限公司 Objectification and virtualization mechanism for mode of relational database table
CN108108456A (en) * 2017-12-28 2018-06-01 重庆邮电大学 A kind of information resources distributed enquiring method based on metadata

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
JINQUN WU: ""Heterogeneous Data Integration Model Based on Virtual View"", 《THE 7TH INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE & EDUCATION (ICCSE 2012)》 *
张永祥: ""基于XML模式的异构数据集成中间件研究"", 《中国优秀硕士学位论文全文数据库 信息科技辑》 *
瑜佳: ""基于XML的远程教育异构数据库的技术研究"", 《中国优秀硕士学位论文全文数据库 信息科技辑》 *
黄景文等: "一个基于视图的数据访问模型", 《微机发展》 *

Similar Documents

Publication Publication Date Title
CN108280365B (en) Data access authority management method, device, terminal device and storage medium
CN102844756B (en) Computer relational database method and system with access control based roles
US6678682B1 (en) Method, system, and software for enterprise access management control
EP2565802A1 (en) Data masking setup
CN113612740B (en) Authority management method and device, computer readable medium and electronic equipment
CN1667542A (en) System and method for identity switching on a computer system
WO2007068546A1 (en) Access control for elements in a database object
US11755768B2 (en) Methods, apparatuses, and systems for data rights tracking
CN112699089A (en) Data sharing system, data sharing method and device
CN110298189A (en) Data base authority management method and equipment
CN114647825A (en) Access right control method, device, electronic equipment and computer storage medium
CN113761514A (en) Cloud desktop multi-factor security authentication method and system
CN113190348B (en) Cross-platform virtual resource allocation method, device, equipment and storage medium
CN113254953A (en) Authority distribution management method, device, online education system and storage medium
CN113742369B (en) Data authority management method, system and storage medium
US20070226339A1 (en) Multi-user system with dynamic data source selection
CN115330509A (en) Credit investigation service classification method and system based on credit investigation service transaction platform integration
CN112000727B (en) Desensitization display method for dynamically configured service data
CN114528593A (en) Data authority control method, device, equipment and storage medium
CN113641360A (en) Method, device and equipment for configuring system front end and storage medium
CN113276133A (en) Data processing method, device, equipment and storage medium
Jin On the Development of College Student Information Management System
CN113742749B (en) Platform user authority management method, device, equipment and storage medium
CN113836555A (en) Multi-role application function authority setting method, terminal and storage medium
CN108121908B (en) User authority control method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20210813

RJ01 Rejection of invention patent application after publication