WO2023087278A1

WO2023087278A1 - Cloud platform permission setting method and apparatus, terminal device, and storage medium

Info

Publication number: WO2023087278A1
Application number: PCT/CN2021/131905
Authority: WO
Inventors: 邓玉芳; 季统凯; 贺忠堂
Original assignee: 国云科技股份有限公司
Priority date: 2021-11-19
Filing date: 2021-11-19
Publication date: 2023-05-25

Abstract

A cloud platform permission setting method and apparatus, a terminal device, and a storage medium. The method comprises: obtaining module data of function modules on a cloud platform page, and configuring a page function table according to the module data; obtaining interface data of all interfaces on a cloud platform, and configuring a system function interface table according to the interface data; according to function information in the page function table and interface information in the system function interface table, configuring a page function dependency interface table comprising a correspondence between each function and each interface; according to the permission of each role and the page function table, configuring a role function authorization table comprising a function available to each role; and when a first role logs in the cloud platform and invokes a first interface, determining, according to the page function dependency interface table, the role function authorization table, and the system function interface table, whether the first role has permission to invoke the first interface. The method solves the technical problem in the prior art of low permission setting efficiency.

Description

A cloud platform permission setting method, device, terminal equipment and storage medium

technical field

The embodiments of the present application relate to the field of cloud platforms, and in particular, to a cloud platform authority setting method, device, terminal equipment, and storage medium.

Background technique

At present, with the development of science and technology, cloud computing technology is also advancing rapidly, and a large number of mature cloud platforms have emerged on the market. A set of permission control methods will be set up on the current cloud platforms. The functional permissions of most cloud platforms are generally divided according to functional modules, such as cloud server modules, storage modules, network modules, mirroring modules, and monitoring modules. However, each functional module will configure sub-modules and configure the permissions of each functional interface under the sub-modules. A certain function of a functional module will depend on the functions of other functional modules. For example, the function of creating a virtual machine will depend on the image module. Mirror list function, network list of network module, subnet list function and disk list function of disk type module, etc. If the function permissions are simply divided by functional modules, then when the user checks to create a certain function, he also needs to check all the interface function permissions that this function depends on, which will undoubtedly greatly reduce the usability of the platform, and if To make a feature available, it may be necessary to check a module that you don't want a character to see.

To sum up, in the prior art, in the process of setting permissions for the cloud platform, there is a technical problem of low efficiency of permission setting.

Contents of the invention

The embodiment of the present invention provides a cloud platform authority setting method, device, terminal equipment and storage medium, which solves the technical problem of low efficiency of authority setting in the process of setting authority for cloud platform in the prior art.

In the first aspect, the embodiment of the present invention provides a cloud platform permission setting method, comprising the following steps:

Obtain the module data of the functional module on the cloud platform page, configure the page function table according to the module data, and include the function information of each function of each function module in the described page function table;

Obtain the interface data of all interfaces on the cloud platform, configure the system function interface table according to the interface data, and include the interface information of each described interface in the system function interface table;

According to the function information in the page function table and the interface information in the system function interface table, configure the page function-dependent interface table, and the page function-dependent interface table includes each of the functions and each of the Correspondence between the above interfaces;

According to the authority of each role and the page function table, a role function authorization table is configured, and the function that each role can use is included in the role function authorization table;

Determine the first role currently logged into the cloud platform, and when the first role calls the first interface, determine the first role according to the page function dependency interface table, the role function authorization table, and the system function interface table. Whether the role has permission to call the first interface.

Preferably, the specific process of obtaining the functional data of the functional modules on the cloud platform page and configuring the page function table according to the functional data is as follows:

Obtain the function data of the function modules of the cloud platform page and the page layout structure of the cloud platform page, and configure a page function table according to the page layout structure and the function data.

Preferably, the functions include N-level functions, and the i-th level function is a child function of the i-1th level function, and the i-th level function is the parent function of the i+1-th level function, where 2≤i≤N- 1, N is a positive integer;

Correspondingly, the specific process of configuring the page function table according to the page layout structure and the function data is as follows:

N-level functions in each of the function modules are determined according to the page layout structure, and a page function table is configured according to the function data and the N-level functions.

Preferably, the specific process of configuring the page function table according to the function data and the N-level function is as follows:

According to the function data and the first-level function, the function information of the first-level function is configured in the page function table, and the first drop-down list is set in the function information of the first-level function;

Set parameter X, 2≤X≤N-1, initialize X, let X=2;

According to the function data and the X-level function, configure the function information of the X-level function in the X-1 drop-down list in the page function table, and set it in the function information of the X-level function The Xth drop-down list, let X=X+1, re-execute this step until the N-1th drop-down list is obtained;

According to the function data and the Nth level function, the function information of the Nth level function is set in the N-1th drop-down list.

Preferably, according to the function information in the page function table and the interface information in the system function interface table, the specific process of configuring the page function dependent interface table is as follows:

According to all interfaces corresponding to each function in the page function table, determine the corresponding relationship between the functions in the page function table and the interfaces in the system function interface table, according to the function information, the interface Information and the corresponding relationship, the configuration page function depends on the interface table.

Preferably, the specific process of configuring the role function authorization table according to the authority of each role and the page function table is as follows:

According to the authority of each role, determine the functions that each role can use in different areas based on the page function table, and configure role function authorization according to the functions that each role can use in the different areas surface.

Preferably, according to the page function dependent interface table, the role function authorization table and the system function interface table, the specific process of determining whether the first role has permission to call the first interface is as follows:

Acquiring first interface information of the first interface, and judging whether the system function interface table includes the first interface according to the first interface information;

If the first interface is not included, end the process;

If the first interface is included, judge whether the first interface participates in authority detection according to the interface information of the first interface in the system function interface table;

If not participating in the authority detection, the first role has the authority to call the first interface;

If participating in authority detection, determine the first area where the first role is located, and look up the target functions that the first role can use in the role function authorization table according to the first role and the first area;

Find out the target interface corresponding to the target function according to the corresponding relationship in the page function dependent interface table, and judge whether the first interface is included in the target interface;

If yes, the first role has permission to call the first interface; if not, the first role has no permission to call the first interface.

In the second aspect, the embodiment of the present invention provides a cloud platform permission setting device, including a page function table configuration module, a system function interface table configuration module, a page function dependency interface table configuration module, a role function authorization table configuration module, and a permission judgment module ;

The page function table configuration module is used to obtain the module data of the function modules on the cloud platform page, configure the page function table according to the module data, and include the function information of each function of each function module in the page function table ;

The system function interface table configuration module is used to obtain the interface data of all interfaces on the cloud platform, configure the system function interface table according to the interface data, and include the interface information of each of the interfaces in the system function interface table;

The page function dependent interface table configuration module is used to configure the page function dependent interface table according to the function information in the page function table and the interface information in the system function interface table, and the page function dependent interface table includes The corresponding relationship between each of the functions and each of the interfaces;

The role function authorization table configuration module is used to configure a role function authorization table according to the authority of each role and the page function table, and the role function authorization table includes the functions that can be used by each role;

The authority judging module is used to determine the first role currently logged into the cloud platform, and when the first role calls the first interface, according to the page function dependent interface table, the role function authorization table and the system function interface table to determine whether the first role has permission to call the first interface.

In a third aspect, an embodiment of the present invention provides a terminal device, where the terminal device includes a processor and a memory;

the memory is used to store a computer program and transmit the computer program to the processor;

The processor is configured to execute the cloud platform authority setting method as described in the first aspect according to the instructions in the computer program.

In a fourth aspect, an embodiment of the present invention provides a storage medium storing computer-executable instructions, and the computer-executable instructions are used to perform a cloud platform permission setting as described in the first aspect when executed by a computer processor method.

As mentioned above, the embodiment of the present invention provides a cloud platform permission setting method, device, terminal equipment and storage medium, the method includes the following steps: obtain the module data of the functional modules on the cloud platform page, configure the page function table according to the module data, page The function table includes the function information of each function of each function module; obtain the interface data of all interfaces on the cloud platform, configure the system function interface table according to the interface data, and the system function interface table includes the interface information of each interface; According to the function information in the page function table and the interface information in the system function interface table, configure the page function dependent interface table, which includes the correspondence between each function and each interface; according to each role Permission and page function table, configure the role function authorization table, the role function permission table includes the functions that each role can use; determine the first role currently logged into the cloud platform, when the first role calls the first interface, according to The page function relies on the interface table, the role function authorization table and the system function interface table to determine whether the first role has permission to call the first interface.

In the embodiment of the present invention, the page function table including the function information of each function of each function module and the system function interface table including the interface information of each interface are respectively configured, and then according to the corresponding relationship between the function and the interface, the configuration The page function depends on the interface table, and finally configures the role function authorization table including the functions that each role can use. When a certain role logs in to the cloud platform to call a certain interface, the page function depends on the interface table and the role function authorization table. And the system function interface table, you can determine whether the role has permission to call the interface. Therefore, in the process of configuring permissions for each role, it is only necessary to determine the functions that each role can use, without paying too much attention to the dependencies between functions and interfaces, which improves the efficiency of setting permissions and solves the problem of existing technologies. A technical problem with low efficiency in permission setting.

Description of drawings

FIG. 1 is a flow chart of a method for setting permissions on a cloud platform provided by an embodiment of the present invention.

FIG. 2 is a schematic diagram of interface information in a system function interface table provided by an embodiment of the present invention.

FIG. 3 is a schematic diagram of a page function dependency interface table provided by an embodiment of the present invention.

FIG. 4 is a schematic diagram of an interface for assigning permissions to different roles provided by an embodiment of the present invention.

FIG. 5 is a schematic structural diagram of a cloud platform permission setting device provided by an embodiment of the present invention.

FIG. 6 is a schematic structural diagram of a terminal device provided by an embodiment of the present invention.

Detailed ways

The following description and the accompanying drawings sufficiently illustrate specific embodiments of the application to enable those skilled in the art to practice them. The examples merely represent possible variations. Individual components and functions are optional unless explicitly required, and the order of operations may vary. Portions and features of some embodiments may be included in or substituted for those of other embodiments. The scope of embodiments of the present application includes the full scope of the claims, and all available equivalents of the claims. Herein, various embodiments may be referred to individually or collectively by the term "invention", which is for convenience only and is not intended to automatically limit the scope of this application if in fact more than one invention is disclosed. A single invention or inventive concept. Herein, relational terms such as first and second etc. are used only to distinguish one entity or operation from another without requiring or implying any actual relationship or relationship between these entities or operations. order. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method or end-equipment comprising a set of elements includes not only those elements but also items not expressly listed other elements. Various embodiments herein are described in a progressive manner, each embodiment focuses on the differences from other embodiments, and the same and similar parts of the various embodiments may be referred to each other. As for the structures, products, etc. disclosed in the embodiments, since they correspond to the parts disclosed in the embodiments, the description is relatively simple, and for relevant parts, please refer to the description of the method part.

Embodiment one

As shown in FIG. 1 , FIG. 1 is a flowchart of a method for setting permissions on a cloud platform provided by an embodiment of the present invention. The cloud platform permission setting method provided by the embodiment of the present invention can be executed by a cloud platform permission setting device, which can be implemented by software and/or hardware, and the cloud platform permission setting device can be two or more It is composed of physical entities, and can also be composed of a physical entity. For example, the permission setting device of the cloud platform can be a computer, a host computer, a tablet and other devices. The method includes the following steps:

Step 101. Obtain the module data of the function modules on the cloud platform page, configure the page function table according to the module data, and the page function table includes function information of each function of each function module.

In this embodiment, it is first necessary to obtain the module data of each functional module on the cloud platform page. The specific content of the module data can be set according to actual needs. In this embodiment, the specific content of the module data is not limited. For example, In one embodiment, the module data includes data such as the function name of each function of the function module and the function Chinese description of each function. After obtaining the module data of each function module, the function information of each function of each function module can be configured in the page function table. Exemplarily, in one embodiment, the function information includes fields such as function ID, function name, function Chinese description, whether it is disabled, whether it is a menu item, whether it is a public function or not. Among them, the function ID indicates the ID of the function in the page function table, the function name indicates the name of the function, such as creating a cloud server, etc., the Chinese description of the function indicates the Chinese description information of the function, whether it is disabled indicates whether the function is disabled, and whether the menu item indicates the function Whether the menu bar on the cloud platform page is displayed and whether it is a public function indicates whether the function is authorized by default.

On the basis of the above-mentioned embodiments, the specific process of obtaining the functional data of the functional modules on the cloud platform page and configuring the page function table according to the functional data is as follows:

The function data of the function modules of the cloud platform page and the page layout structure of the cloud platform page are obtained, and the page function table is configured according to the page layout structure and the function data.

In one embodiment, when acquiring the functional data of the functional modules, the page layout structure of the cloud platform page needs to be acquired at the same time. The page layout structure includes the actual display level of each function of each functional module on the page, according to each The actual display level of the function can determine the upper and lower relationship of each function, and then, the page function table can be configured according to the upper and lower relationship of each function and the function data of each functional module. Exemplarily, in one embodiment, if the actual display level of a certain function in a function module is the topmost, when configuring the function information of the function in the page function table, the function information can be set to Is the menu item field set to Yes.

On the basis of the above embodiments, the functions include N-level functions, and the i-th level function is a sub-function of the i-1th level function, and the i-th level function is the parent function of the i+1-th level function, where 2≤i ≤N-1, N is a positive integer.

It should be further explained that, in this embodiment, the functions in each functional module include a parent function and a sub-function corresponding to the parent function, and the parent function is a superordinate concept of the sub-function. Exemplarily, in one embodiment, the resource management function of the resource management module includes cloud server management functions, and the cloud service management functions include functions such as cloud server list management, cloud server details viewing, creating cloud servers, and restarting cloud servers. In the cloud server management module, the resource management function is a level 1 function, the cloud server management function is a level 2 function, and the functions such as cloud server list management, cloud server details viewing, creating a cloud server, and restarting a cloud server are level 3 functions.

Correspondingly, the specific process of configuring the page function table according to the page layout structure and function data is as follows:

Determine the N-level functions in each function module according to the page layout structure, and configure the page function table according to the function data and the N-level functions.

In this embodiment, the function information further includes a parent function ID field, where the parent function ID is the function ID of the parent function corresponding to the sub-function. After obtaining the page layout structure, the actual display level of each function in the function module can be determined, and the first-level function, second-level function...N-level function in each function module can be determined according to the actual display level. When configuring the page function table, the page function table can be configured according to the function data and N-level functions. In one embodiment, when configuring the function information in the page function table, except for the first-level function, the function ID of the parent function corresponding to each sub-function is set in the parent function ID field of other level functions, for example, the first The parent function ID field of the level 2 function is set to correspond to the function ID of the level 1 function, and the whether menu item is set to No. It can be understood that the parent function ID field is not set in the function information of the first-level function.

On the basis of the foregoing embodiments, the specific process of configuring the page function table according to function data and N-level functions is as follows:

According to the function data and the first-level function, the function information of the first-level function is configured in the page function table, and the first drop-down list is set in the function information of the first-level function.

First, according to the function data and the first-level function, first configure the function information of the first-level function in the page function table, that is, set the function ID, function parent ID, function name, function Chinese description, whether to disable, Whether it is a menu item, whether it is a public function, etc., and set the first drop-down list in the function information of each first-level function.

Set parameter X, 2≤X≤N-1, initialize X, let X=2.

According to the function data and the X-level function, configure the function information of the X-level function in the X-1 drop-down list in the page function table, set the X-th drop-down list in the function information of the X-level function, and make X= X+1, repeat this step until the N-1th drop-down list is obtained.

After that, according to the functional data and the second-level function, the function information of the second-level function can be set in the first drop-down list, and the second drop-down list can be set under the function information of the second-level function, and then, according to the function data and Level 3 function, set the function information of the level 3 function in the 2nd drop-down list..., repeat this step until the N-1th drop-down list is set.

According to the function data and the Nth level function, in the N-1th drop-down list, set the function information of the Nth level function.

After that, in the N-1 drop-down list, according to the function data and the N-level function, the function information of the N-level function can be set. So far, the configuration of the page function table is completed.

Exemplarily, in this embodiment, the functional modules on the cloud platform page include a resource management module, obtain the module data of the resource management module and the page layout structure of the cloud platform page, according to the page layout structure, the resource management module The resource management function is located at the top of the display layer, and the cloud server management function, storage management function, and network management function are located at the next display layer of the resource management function, such as cloud server list management, cloud server details view, cloud server creation, cloud server restart, etc. Functions are located at the next display level of cloud server management functions. It can be determined that the resource management function is the first-level function, the cloud server management function, storage management function, and network management function are the second-level functions, and the cloud server list management, cloud server details view, cloud server creation, cloud server restart and other functions It is a level 3 function.

After determining the functions at all levels in each function module, first configure the function information of the resource management function in the page function table according to the module data and resource management function, set the function ID in the function information to 01, and set the function parent ID to to None and if the menu item is set to Yes etc. Afterwards, set the first drop-down list in the function information of the resource management function, and set the function information of the cloud server management function, the storage management function and the network management function in the first drop-down list, wherein, the function of the cloud server management function needs to be The function ID in the information is set to 02, the function parent ID is set to 01 and whether the menu item is set to No, etc., the function ID in the function information of the storage management function is set to 03, the function parent ID is set to 01 and whether the menu item is set to No etc., set the function ID in the function information of the network management function to 04, the function parent ID to 01, and whether the menu item is set to No, etc.; after that, set the second drop-down list in the function information of the cloud server management function, in In the second drop-down list, set the function information of cloud server list management, cloud server details view, create cloud server, restart cloud server and other functions, among which, cloud server list management, cloud server details view, create cloud server, restart cloud server and other functions In the function information, the function ID is set to 02, and whether the menu items are all set to No, the configuration of the page function table can be completed.

Step 102: Obtain interface data of all interfaces on the cloud platform, configure a system function interface table according to the interface data, and the system function interface table includes interface information of each interface.

After configuring the page function table, you need to further configure the system function interface table. The specific process is: obtain the interface data of all interfaces on the cloud platform, and configure the system function interface table according to the interface data. The system function interface table includes each Interface information of an interface. Exemplarily, in one embodiment, the cloud platform includes a cloud server management interface, and the cloud server management interface includes multiple sub-interfaces, such as the cloud server list management interface, the cloud server details view interface, the creation cloud server interface, and the restart cloud server interface. Server interface, close cloud server interface, delete cloud server interface, mount CD interface, unmount CD interface, etc. Obtain the interface data of each interface, and then configure the system function interface table according to the interface data. In one embodiment, the interface information in the system function interface table includes fields such as interface ID, parent interface ID, request path, function Chinese description, whether it is a public interface, whether it is a leaf item, and whether it participates in permission detection. As shown in Figure 2, Figure 2 is the interface information for creating a virtual machine interface. In Figure 2, the function interface id: id, the function interface parent ID: parent_id, the request path: path, the function Chinese description: description, public interface: commo_func, Whether leaf item: leaf port, whether to participate in permission detection: uncheck. Among them, commo_func is 0, which means it is not a public interface, and uncheck is 0, which means it does not participate in permission detection.

Step 103 : Configure a page function dependent interface table according to the function information in the page function table and the interface information in the system function interface table. The page function dependent interface table includes the correspondence between each function and each interface.

After configuring the page function table and system function interface table, you can configure the page function dependent interface table according to the function information in the page function table and the interface information in the system function interface table, and set each The corresponding relationship between a function and each interface, so that the interface corresponding to the function can be queried in the page function dependent interface table according to the function.

On the basis of the above embodiments, according to the function information in the page function table and the interface information in the system function interface table, the specific process of configuring the page function dependent interface table is as follows:

According to all the interfaces corresponding to each function in the page function table, determine the corresponding relationship between the functions in the page function table and the interfaces in the system function interface table, and configure the page function dependent interface according to the function information, interface information and corresponding relationship surface.

First, obtain each function in the page function table, determine the interface corresponding to each function, and then determine the corresponding relationship between the function in the page function table and the interface in the system function interface table, and obtain the corresponding The function information of the function and the interface information of the interface are bound and associated in the page function dependent interface table, so as to complete the configuration of the page function dependent interface table. Exemplarily, in one embodiment, the page function dependency table includes association information, and the association information includes fields such as auto-increment ID, function ID, and interface ID, and an association is created according to the correspondence between each function and interface Information, set the auto-increment ID of the associated information, and obtain the function ID of the function and the interface ID of the interface corresponding to the function, respectively write the function ID and interface ID into the function ID and interface ID of the associated information, and complete Binding of functions and interfaces.

In one embodiment, the function ID of creating a virtual machine function is 01020101, and the interface corresponding to creating a virtual machine function is creating a virtual machine interface. List interface, disk type list interface, private network list interface, external network list interface, private network subnet list interface, external network subnet list interface, security group list interface, mirror list interface, image list interface, etc. Then create the virtual machine function and the associated information of the corresponding interface in the page function dependent interface table as shown in Figure 3. In Figure 3, function_id is the function ID, api_id is the interface ID, and the major field is 1, which represents the function related to the creation of the virtual machine Correspondingly create a virtual machine interface, the ID of the created virtual machine interface is 010101, and the major field of other corresponding sub-interfaces is 0.

Step 104 , according to the authority of each role and the page function table, configure a role function authorization table, and the role function authorization table includes the functions that each role can use.

After that, you need to further set the permissions of each role. Specifically, according to the permissions of each role, select the functions that the role can use on the page function table, and record the functions that each role can use in the role function permission In the table, complete the configuration of the role function permission table.

On the basis of the above embodiments, according to the authority of each role and the page function table, the specific process of configuring the role function authorization table is as follows:

According to the authority of each role, determine the functions that each role can use in different areas based on the page function table, and configure the role function authorization table according to the functions that each role can use in different areas.

In one embodiment, according to the authority of each role and the functions in the page function table, the functions that each role can use in different areas are determined, and then, according to the function configuration that each role can use in different areas Role function authorization table. Exemplarily, in one embodiment, the fields of the role function authorization table include role ID, area ID and function ID. In the configuration interface, firstly, according to the function ID and parent The function ID generates a function list, and the drop-down list of each parent function in the function list includes corresponding sub-functions. For example, as shown in Figure 4, the current role is determined to be an administrator, and the area that needs to be assigned permissions is regionA, the subsystem is the cloud host service, select the function according to the actual needs in the function list, such as the check box in front of each function in Figure 4, if the check box is checked, it means that the authority is granted to the administrator, and click OK after the setting is completed , so as to assign corresponding functions to the current role in the corresponding area. After that, the role function authorization table can be generated according to the permissions of different roles in different areas. Different roles in the role function authorization table are configured with different role IDs. The area ID is used to record the area where the role is located, and the function ID is used to record the role. For functions that can be used under different area IDs, it can be understood that the function ID of the same function in the role function authorization table is consistent with the function ID in the page function table.

Step 105. Determine the first role currently logged into the cloud platform. When the first role calls the first interface, determine whether the first role has permission to call the first interface according to the page function dependency interface table, role function authorization table, and system function interface table. interface.

In this embodiment, when a role logs into the cloud platform, determine the first role currently logged into the cloud platform, and when the first role needs to call the first interface to realize a certain function, then according to the first role, the first The role function authorization table corresponding to a role queries the target functions that the first role can use, and judges whether the target functions include the first function. If yes, the first role has the authority to use the first function; In the dependent interface table, query the target interface corresponding to the target function according to the target function, and determine whether the target interface contains the first interface according to the system function interface table. If so, the first role has the authority to call the first interface, otherwise, then The first role does not have permission to call the first interface.

On the basis of the above embodiments, according to the page function dependent interface table, role function authorization table and system function interface table, the specific process of determining whether the first role has the right to call the first interface is as follows:

Obtaining first interface information of the first interface, and judging whether the system function interface table includes the first interface according to the first interface information;

If the first interface is not included, end the process;

If it does not participate in the authority detection, the first role has the authority to call the first interface;

Find out the target interface corresponding to the target function according to the corresponding relationship in the page function dependent interface table, and judge whether the target interface includes the first interface;

If yes, the first role has the right to call the first interface; if not, the first role has no right to call the first interface.

In this embodiment, when the first role invokes the first interface on the cloud platform, the first interface information of the first interface is first obtained on the cloud platform, and then the system function interface table is searched according to the first interface information , judging whether the first interface is included in the system function interface table, if the first interface is not included, it means that the first interface does not exist in the cloud platform, and the process ends. If the first interface is included, further judge whether the first interface needs to participate in the authority detection according to the interface information of the first interface in the system function interface table. If it does not participate in the authority detection, the first role has the authority to call the first interface. Permission detection determines the first area where the first role is located. According to the first role and the first area, look up the target functions that the first role can use in the role function authorization table; according to the corresponding relationship in the page function dependency interface table, look up Output the target interface corresponding to the target function, and judge whether the target interface includes the first interface; if yes, the first role has the right to call the first interface; if not, the first role does not have the right to call the first interface.

In one embodiment, the interface information in the system function interface table includes fields such as interface ID, parent interface ID, request path, function Chinese description, whether it is a public interface, whether it is a leaf item, and whether it participates in permission detection. When the first role calls the first interface, first obtain the first interface information of the first interface in the cloud platform, search the system function interface table according to the first interface information, and judge whether the system function interface table includes the first interface . Exemplarily, in one embodiment, the first interface information includes the first interface ID of the first interface, and according to the first interface ID, it is searched in the system function interface table whether an interface with the same interface ID is included, so as to determine the system function interface Whether the first interface is included in the table. If the first interface is not included in the system function interface table, an exception window containing "this function is not supported" pops up; if the first interface is included in the system function interface table, then further according to the interface information in the system function interface table , to determine whether the first interface needs to participate in the detection. In this embodiment, whether the first interface participates in the authority detection field can be determined according to whether the first interface participates in the authority detection field in the interface information of the first interface. If the participation authority detection field is No, the first role has The authority calls the first interface. If the whether to participate in the authority detection field is Yes, then further determine the first role ID of the first role and the first area ID of the cloud platform where the first role is located. After that, according to the first role ID and the first Area ID, look up the first function ID corresponding to the first role ID in the first area ID in the role function authorization table, and then, according to the first function ID, in the page function dependent interface table, the correspondence between each function and interface relationship, find out the target interface ID corresponding to the first function ID, determine whether the target interface ID includes the first interface ID, if yes, the first role has the right to call the first interface, if not, the first role does not The authority calls the first interface.

As mentioned above, the present invention provides a cloud platform permission setting method, by respectively configuring the page function table including the function information of each function of each function module and configuring the system function interface table including the interface information of each interface, Afterwards, according to the corresponding relationship between functions and interfaces, configure the page function dependent interface table, and finally configure the role function authorization table including the functions that can be used by each role. When a role logs in to the cloud platform to call a certain interface, according to Page functions rely on the interface table, role function authorization table, and system function interface table to determine whether the role has permission to call the interface. Therefore, in the process of configuring permissions for each role, it is only necessary to determine the functions that each role can use, without paying too much attention to the dependencies between functions and interfaces, which improves the efficiency of setting permissions and solves the problem of existing technologies. A technical problem with inefficient permissions settings.

Embodiment two

As shown in Figure 5, this embodiment provides a cloud platform permission setting device, including a page function table configuration module 201, a system function interface table configuration module 202, a page function dependent interface table configuration module 203, and a role function authorization table configuration module 204 and authority judging module 205;

The page function table configuration module 201 is used to obtain the module data of the function modules on the cloud platform page, configure the page function table according to the module data, and the page function table includes the function information of each function of each function module;

The system function interface table configuration module 202 is used to obtain the interface data of all interfaces on the cloud platform, configure the system function interface table according to the interface data, and include the interface information of each interface in the system function interface table;

The page function dependent interface table configuration module 203 is used to configure the page function dependent interface table according to the function information in the page function table and the interface information in the system function interface table. The page function dependent interface table includes each function and each interface Correspondence between;

The role function authorization table configuration module 204 is used to configure the role function authorization table according to the authority of each role and the page function table, and the role function authorization table includes the functions that each role can use;

The authority judging module 205 is used to determine the first role currently logged into the cloud platform. When the first role calls the first interface, it determines whether the first role has authority according to the page function dependency interface table, role function authorization table and system function interface table. Call the first interface.

On the basis of the foregoing embodiments, the page function table configuration module 201 is used to obtain the function data of the function modules on the cloud platform page, and according to the function data configuration page function table is specifically:

It is used to obtain the function data of the function modules of the cloud platform page and the page layout structure of the cloud platform page, and configure the page function table according to the page layout structure and the function data.

On the basis of the above embodiments, the functions include N-level functions, and the i-th level function is a sub-function of the i-1th level function, and the i-th level function is the parent function of the i+1-th level function, where 2≤i ≤N-1, N is a positive integer;

Correspondingly, the page function table configuration module 201 is used to configure the page function table according to the page layout structure and function data, specifically:

It is used to determine the N-level functions in each function module according to the page layout structure, and configure the page function table according to the function data and the N-level functions.

On the basis of the foregoing embodiments, the page function table configuration module 201 is configured to configure the page function table according to function data and N-level functions, specifically:

It is used to configure the function information of the first-level function in the page function table according to the function data and the first-level function, and set the first drop-down list in the function information of the first-level function; set the parameter X, 2≤X≤N -1, initialize X, let X=2; according to the function data and the X-level function, in the X-1 drop-down list in the page function table, configure the function information of the X-level function, the function of the X-level function Set the Xth drop-down list in the information, let X=X+1, re-execute this step until the N-1th drop-down list is obtained; according to the function data and the N-level function, set the N-1th drop-down list Feature information for N-level features.

On the basis of the foregoing embodiments, the page function dependent interface table configuration module 203 is configured to configure the page function dependent interface table according to the function information in the page function table and the interface information in the system function interface table as follows:

It is used to determine the corresponding relationship between the functions in the page function table and the interfaces in the system function interface table according to all the interfaces corresponding to each function in the page function table, and configure the page functions according to the function information, interface information and corresponding relationship Dependent interface table.

On the basis of the above-mentioned embodiments, the role function authorization table configuration module 204 is used to configure the role function authorization table according to the authority of each role and the page function table, specifically:

It is used to determine the functions that each role can use in different areas based on the page function table based on the permissions of each role, and configure the role function authorization table according to the functions that each role can use in different areas.

On the basis of the above embodiments, the authority judging module 205 is used to determine whether the first role has the authority to call the first interface according to the page function dependent interface table, role function authorization table and system function interface table, specifically:

It is used to obtain the first interface information of the first interface, and judge whether the first interface is included in the system function interface table according to the first interface information; if the first interface is not included, the process ends; if the first interface is included, according to the system The interface information of the first interface in the function interface table determines whether the first interface participates in the authority detection; if it does not participate in the authority detection, the first role has the authority to call the first interface; if it participates in the authority detection, determine the first area where the first role is located , according to the first role and the first area, look up the target function that the first role can use in the role function authorization table; according to the corresponding relationship in the page function dependent interface table, find out the target interface corresponding to the target function, and judge the target Whether the interface includes the first interface; if yes, the first role has the right to call the first interface; if not, the first role does not have the right to call the first interface.

Embodiment Three

This embodiment also provides a terminal device, as shown in FIG. 6 , a terminal device 30, the terminal device includes a processor 300 and a memory 301;

The memory 301 is used to store a computer program 302, and transmit the computer program 302 to the processor;

The processor 300 is configured to execute the steps in the above embodiment of a cloud platform authority setting method according to the instructions in the computer program 302 .

Exemplarily, the computer program 302 may be divided into one or more modules/units, and the one or more modules/units are stored in the memory 301 and executed by the processor 300 to complete this application. The one or more modules/units may be a series of computer program instruction segments capable of accomplishing specific functions, and the instruction segments are used to describe the execution process of the computer program 302 in the terminal device 30 .

The terminal device 30 may be a computing device such as a desktop computer, a notebook, a palmtop computer, or a cloud server. The terminal device 30 may include, but not limited to, a processor 300 and a memory 301 . Those skilled in the art can understand that FIG. 6 is only an example of the terminal device 30, and does not constitute a limitation on the terminal device 30. It may include more or less components than those shown in the figure, or combine certain components, or different components. For example, the terminal device 30 may also include an input and output device, a network access device, a bus, and the like.

The so-called processor 300 may be a central processing unit (Central Processing Unit, CPU), and may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC), Off-the-shelf programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

The storage 301 may be an internal storage unit of the terminal device 30 , for example, a hard disk or a memory of the terminal device 30 . The memory 301 can also be an external storage terminal device of the terminal device 30, such as a plug-in hard disk equipped on the terminal device 30, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD ) card, flash memory card (Flash Card), etc. Further, the memory 301 may also include both an internal storage unit of the terminal device 30 and an external storage device. The memory 301 is used to store the computer program and other programs and data required by the terminal device 30 . The memory 301 can also be used to temporarily store data that has been output or will be output.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disc and other media that can store computer programs. .

Embodiment four

The embodiment of the present invention also provides a storage medium containing computer-executable instructions, the computer-executable instructions are used to execute a cloud platform authority setting method when executed by a computer processor, and the method includes the following steps:

Obtain the module data of the functional modules on the cloud platform page, configure the page function table according to the module data, and include the function information of each function of each function module in the page function table;

Obtain the interface data of all interfaces on the cloud platform, configure the system function interface table according to the interface data, and the system function interface table includes the interface information of each interface;

According to the function information in the page function table and the interface information in the system function interface table, configure the page function dependent interface table, and the page function dependent interface table includes the corresponding relationship between each function and each interface;

According to the permissions of each role and the page function table, configure the role function authorization table, which includes the functions that each role can use;

Note that the above are only preferred embodiments and technical principles used in the embodiments of the present invention. Those skilled in the art will understand that the embodiments of the present invention are not limited to the specific embodiments described here, and those skilled in the art can make various obvious changes, readjustments and substitutions without departing from the protection scope of the embodiments of the present invention . Therefore, although the embodiments of the present invention have been described in detail through the above embodiments, the embodiments of the present invention are not limited to the above embodiments, and may include more other equivalents without departing from the concept of the embodiments of the present invention. embodiment, and the scope of the embodiments of the present invention is determined by the scope of the appended claims.

Claims

A cloud platform authority setting method, is characterized in that, comprises the following steps:

Obtain the module data of the functional module on the cloud platform page, configure the page function table according to the module data, and include the function information of each function of each function module in the described page function table;

Obtain the interface data of all interfaces on the cloud platform, configure the system function interface table according to the interface data, and include the interface information of each described interface in the system function interface table;

According to the function information in the page function table and the interface information in the system function interface table, configure the page function-dependent interface table, and the page function-dependent interface table includes each of the functions and each of the Correspondence between the above interfaces;

According to the authority of each role and the page function table, a role function authorization table is configured, and the function that each role can use is included in the role function authorization table;

Determine the first role currently logged into the cloud platform, and when the first role calls the first interface, determine the first role according to the page function dependency interface table, the role function authorization table, and the system function interface table. Whether the role has permission to call the first interface.
A kind of cloud platform authority setting method according to claim 1, it is characterized in that, described acquisition the function data of function module on the cloud platform page, according to the concrete process of described function data configuration page function table is:

Obtain the function data of the function modules of the cloud platform page and the page layout structure of the cloud platform page, and configure a page function table according to the page layout structure and the function data.
A kind of cloud platform authority setting method according to claim 2, it is characterized in that, described function comprises N level function, and i-th level function is the sub-function of i-1 level function, and i-th level function is the sub-function of the i-th level function The parent function of the i+1 level function, where 2≤i≤N-1, N is a positive integer;

Correspondingly, the specific process of configuring the page function table according to the page layout structure and the function data is as follows:

N-level functions in each of the function modules are determined according to the page layout structure, and a page function table is configured according to the function data and the N-level functions.
A kind of cloud platform authority setting method according to claim 3, it is characterized in that, the specific process of described according to described function data and described N level function configuration page function table is:

According to the function data and the first-level function, the function information of the first-level function is configured in the page function table, and the first drop-down list is set in the function information of the first-level function;

Set parameter X, 2≤X≤N-1, initialize X, let X=2;

According to the function data and the X-level function, configure the function information of the X-level function in the X-1 drop-down list in the page function table, and set it in the function information of the X-level function The Xth drop-down list, let X=X+1, re-execute this step until the N-1th drop-down list is obtained;

According to the function data and the Nth level function, the function information of the Nth level function is set in the N-1th drop-down list.
A kind of cloud platform permission setting method according to claim 1, it is characterized in that, according to the function information in the described page function table and the interface information in the described system function interface table, configuration page function depends on the interface table The specific process is:

According to all interfaces corresponding to each function in the page function table, determine the corresponding relationship between the functions in the page function table and the interfaces in the system function interface table, according to the function information, the interface Information and the corresponding relationship, the configuration page function depends on the interface table.
A kind of cloud platform authority setting method according to claim 1, it is characterized in that, described according to the authority of each role and described page function table, the specific process of configuring role function authorization table is:

According to the authority of each role, determine the functions that each role can use in different areas based on the page function table, and configure role function authorization according to the functions that each role can use in the different areas surface.
The method for setting permissions on a cloud platform according to claim 6, wherein the first role is determined according to the page function dependency interface table, the role function authorization table, and the system function interface table The specific process of whether there is permission to call the first interface is:

Acquiring first interface information of the first interface, and judging whether the system function interface table includes the first interface according to the first interface information;

If the first interface is not included, end the process;

If the first interface is included, judge whether the first interface participates in authority detection according to the interface information of the first interface in the system function interface table;

If not participating in the authority detection, the first role has the authority to call the first interface;

If participating in authority detection, determine the first area where the first role is located, and look up the target functions that the first role can use in the role function authorization table according to the first role and the first area;

Find out the target interface corresponding to the target function according to the corresponding relationship in the page function dependent interface table, and judge whether the first interface is included in the target interface;

If yes, the first role has permission to call the first interface; if not, the first role has no permission to call the first interface.
A cloud platform permission setting device, characterized in that it includes a page function table configuration module, a system function interface table configuration module, a page function dependent interface table configuration module, a role function authorization table configuration module and a permission judgment module;

The page function table configuration module is used to obtain the module data of the function modules on the cloud platform page, configure the page function table according to the module data, and include the function information of each function of each function module in the page function table ;

The system function interface table configuration module is used to obtain the interface data of all interfaces on the cloud platform, configure the system function interface table according to the interface data, and include the interface information of each of the interfaces in the system function interface table;

The page function dependent interface table configuration module is used to configure the page function dependent interface table according to the function information in the page function table and the interface information in the system function interface table, and the page function dependent interface table includes The corresponding relationship between each of the functions and each of the interfaces;

The role function authorization table configuration module is used to configure a role function authorization table according to the authority of each role and the page function table, and the role function authorization table includes the functions that can be used by each role;

The authority judging module is used to determine the first role currently logged into the cloud platform, and when the first role calls the first interface, according to the page function dependent interface table, the role function authorization table and the system function interface table to determine whether the first role has permission to call the first interface.
A terminal device, characterized in that the terminal device includes a processor and a memory;

the memory is used to store a computer program and transmit the computer program to the processor;

The processor is configured to execute a cloud platform permission setting method according to any one of claims 1-7 according to instructions in the computer program.
A storage medium for storing computer-executable instructions, characterized in that the computer-executable instructions are used to perform a cloud platform permission setting according to any one of claims 1-7 when executed by a computer processor method.