CN103684878A

CN103684878A - Operating command parameter control method and device

Info

Publication number: CN103684878A
Application number: CN201310745886.8A
Authority: CN
Inventors: 赵保卫
Original assignee: Datang Mobile Communications Equipment Co Ltd
Current assignee: Datang Mobile Communications Equipment Co Ltd
Priority date: 2013-12-30
Filing date: 2013-12-30
Publication date: 2014-03-26
Anticipated expiration: 2033-12-30
Also published as: CN103684878B

Abstract

The embodiment of the invention discloses an operating command parameter control method and an operating command parameter control device, and relates to the filed of communication, for simplifying complexity in the control of operating command parameters in prior art, and reducing waste of maintenance resources. According to the operating command parameter control method, the operating command parameter control device receives an operating command execution request sent by a user, determines a user type, obtains a user right identification, obtains the operating command parameter which is allowed to operate by the user right identification of the user from an operating command parameter configuration file corresponding to the user type, outputs the obtained operating command parameter to enable the user to control a device through the operating command parameter, and utilizes the obtained operating command parameter to control the operating command parameter of the controlled device; and therefore, problems existing in prior art are solved.

Description

A kind of operational order parametron control method and equipment

Technical field

The present invention relates to the communications field, relate in particular to a kind of operational order parametron control method and equipment.

Background technology

In prior art, for the user role relating at present, as keeper, attendant, domestic consumer, casual user and self-defined user, system is according to user role authority, generated operational order control documents corresponding to user role, this document is extend markup language (Extensible Markup Language, XML) form; For example, for keeper, attendant, domestic consumer and casual user, generate respectively keeper's operational order control documents, attendant's operational order control documents, domestic consumer's operational order control documents and casual user's operational order control documents; For each self-defined user, generate a user-defined user operation order control documents.

When user inputs user name and logins, first operational order parameter management and control devices inquires about user right sign corresponding to this user name, according to the user right inquiring, identify corresponding operational order control documents, then, at the user right inquiring, identify in corresponding operational order control documents, the operational order of inquiring user input, if inquire, to user, present each operational order parameter under this operational order, make user can the described operational order parameter presenting be deleted, be revised or increase; If do not inquire, exit.For example, user logins with the user name of user1, operational order parameter management and control equipment query is domestic consumer to user role authority corresponding to user1, call domestic consumer's operational order control documents, user's input operation order command1, in operational order parameter management and control devices Hui domestic consumer operational order control documents, inquire about and present operational order parameter under this operational order command1, that permission is used by domestic consumer to user, for user1 user, delete, revise or increase.

Visible, along with user's increase, can generate operational order control documents a large amount of, corresponding different user types, when system maintenance, increased the management and control of operational order parameter and the complexity of inquiry, caused the problem of a large amount of wastes of resource.

Summary of the invention

The embodiment of the present invention provides a kind of operational order parametron control method and equipment, in order to reduce the complexity of management and control and query manipulation command parameter in prior art, has reduced the waste of resource.

An operational order parametron control method, comprising:

Receive the operational order execution request that user sends;

Determine described user's user type, and obtain described user's user right sign; Described user type comprises system definition user or self-defined user, and described user right sign comprises user right grade or user right role title;

For the operational order of ask execution, according to described user's user right sign, the user right sign of obtaining described user from the operational order parameter configuration files corresponding with described user type allows the operational order parameter of operation;

The operational order parameter that output gets, so that described user utilizes the operational order parameter getting to carry out management and control operation to the operational order parameter by management and control devices.

Visible, the embodiment of the present invention can have been carried out integration and optimization process to operational order control documents, has improved the accuracy that operational order is carried out, and has saved the resource of system maintenance; Compare with the dispersion checking mode of traditional user right sign, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, if determine user type, be system definition user, according to described user's user right grade, the user right grade of inquiring about described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation; If determine user type, be self-defined user, according to described user's user right role title, the user right role title of inquiring about described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, operational order parameter configuration files corresponding to described system definition user comprises operational order, each operational order is provided with a corresponding first authority sign, in the user right grade that described the first authority sign is system definition user arbitrary one; Described the first authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the first authority identifies, and described user is allowed to the operational order of operational correspondence; Each operational order parameter is provided with a corresponding second authority sign, and described the second authority is designated arbitrary in system definition user's user right grade; Described the second authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the second authority identifies, and described user is allowed to the operational order parameter of operational correspondence.Like this, the embodiment of the present invention can have been carried out integration and optimization process to operational order control documents, has improved the accuracy that operational order is carried out, and has saved the resource of system maintenance.

Preferably, in operational order parameter configuration files corresponding to described system definition user, inquire about described operational order of asking execution, if described user's user right grade is not less than the Permission Levels that described the first authority corresponding to operational order of asking to carry out identifies, inquire about the operational order parameter under described operational order of asking execution; If there is operational order parameter to meet first condition, the user right grade that the operational order parameter that meets described first condition is defined as to described user allows the operational order parameter of operation; Described first condition is: described user's user right grade is not less than the Permission Levels that the second authority corresponding to operational order parameter identifies.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, operational order parameter configuration files corresponding to described self-defined user comprises operational order and operational order parameter; Each operational order is provided with the first corresponding authority sign set, described the first authority sign set comprises at least one self-defined user's user right role title, described the first authority identification sets is share in representing that described user is allowed to the operational order of operational correspondence when self-defined user's user right role title is contained in described the first authority sign set; Each operational order parameter is provided with the second corresponding authority sign set, described the second authority sign set comprises at least one self-defined user's user right role title, described the second authority identification sets is share in representing that described user is allowed to the operational order parameter of operational correspondence when self-defined user's user right role title is contained in described the second authority sign set.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, in operational order parameter configuration files corresponding to described self-defined user, inquire about described operational order of asking execution, if described user's user right role title is included in described the first authority corresponding to operational order of carrying out of asking and identifies in set, inquire about the operational order parameter under the described operational order of asking to carry out; If there is operational order parameter to meet second condition, the user right role title that the operational order parameter that meets described second condition is defined as to described user allows the operational order parameter of operation; Described second condition is: described user's user right role title is included in the second authority sign set corresponding to operational order parameter.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, according to the operational order parameter getting, to by management and control devices transmit operation command request, described operational order request be used for asking described by management and control devices to operational order request reply; Receive the described operational order parameter management and control operation response of being returned by management and control devices, and identify the type of described response; If the type of described response is response corresponding to operational order parameter query request, according to described user's user right sign and the operational order parameter configuration files corresponding with described user's user type, in the operational order parameter query results set carrying from the response receiving, the user right sign of selecting described user allows the operational order parameter of operation, and the operational order parameter of selecting is exported.

Visible, the operational order management and control devices in the embodiment of the present invention can be obtained by the operational order parameter information in management and control devices, and makes information more concentrated by the authorization check mechanism of hierarchical classification.

Preferably, if described user's user type is system definition user, in operational order parameter configuration files corresponding to described system definition user, inquire about the second authority sign corresponding to each operational order parameter in described operational order parameter query results set, and the operational order parameter that described user right grade is not less than to the Permission Levels that described the second authority identifies allows as described user's user right grade the operational order parameter operating; If described user's user type is self-defined user, in operational order parameter configuration files corresponding to described self-defined user, inquire about the second authority sign set corresponding to each operational order parameter in described operational order parameter query results set, and described the second authority sign set is comprised to the operational order parameter of described user right role title is as the operational order parameter of described user's user right role title permission operation.Like this, operational order management and control devices in the embodiment of the present invention can be obtained by the operational order parameter information in management and control devices, and make by the authorization check mechanism of hierarchical classification the control effect that information is concentrated more, specific aim is stronger, highlighted hierarchical classification, improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, before receiving the operational order execution request of user's transmission, receive the logging request that described user sends; According to the user profile of carrying in described logging request, obtain corresponding user right sign.Visible, the embodiment of the present invention can be recorded user's user right sign when user logins, and then according to user's authority, allows the operational order parameter of operation to carry out, after authorization check, just presenting to user, thereby avoided user's misoperation to this user.

An operational order parameter management and control devices, comprising:

Receiver module, the operational order execution request sending for receiving the user of described management and control devices;

Acquisition module, for determining described user's user type, and obtains described user's user right sign; Described user type comprises system definition user or self-defined user, and described user right sign comprises user right grade or user right role title;

Enquiry module, for the operational order for ask execution, according to described user's user right sign, the user right sign of obtaining described user from the operational order parameter configuration files corresponding with described user type allows the operational order parameter of operation;

Output module, for exporting the operational order parameter getting.

Preferably, described enquiry module specifically for, if it is system definition user that described acquisition module is determined user type, according to described user's user right grade, the user right grade of inquiring about described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation; If it is self-defined user that described acquisition module is determined user type,, according to described user's user right role title, the user right role title of inquiring about described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, this equipment also comprises: configuration module, for the form of operational order parameter configuration files corresponding to described system definition user is configured; Wherein, operational order parameter configuration files corresponding to described system definition user comprises operational order, and each operational order is arranged with corresponding operational order parameter; Each operational order is provided with a corresponding first authority sign, in the user right grade that described the first authority sign is system definition user arbitrary one; Described the first authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the first authority identifies, and described user is allowed to the operational order of operational correspondence; Each operational order parameter is provided with a corresponding second authority sign, and described the second authority is designated arbitrary in system definition user's user right grade; Described the second authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the second authority identifies, and described user is allowed to the operational order parameter of operational correspondence.Like this, the embodiment of the present invention can have been carried out integration and optimization process to operational order control documents, has improved the accuracy that operational order is carried out, and has saved the resource of system maintenance.

Preferably, described enquiry module specifically for, in operational order parameter configuration files corresponding to described system definition user, inquire about described operational order of asking execution, if described user's user right grade is not less than the Permission Levels that described the first authority corresponding to operational order of asking to carry out identifies, inquire about the operational order parameter under described operational order of asking execution; If there is operational order parameter to meet first condition, the user right grade that the operational order parameter that meets described first condition is defined as to described user allows the operational order parameter of operation; Described first condition is: described user's user right grade is not less than the Permission Levels that the second authority corresponding to operational order parameter identifies.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, this equipment also comprises: configuration module, for the form of operational order parameter configuration files corresponding to described self-defined user is configured; Wherein, operational order parameter configuration files corresponding to described self-defined user comprises operational order and operational order parameter; Each operational order is provided with the first corresponding authority sign set, described the first authority sign set comprises at least one self-defined user's user right role title, described the first authority identification sets is share in representing that described user is allowed to the operational order of operational correspondence when self-defined user's user right role title is contained in described the first authority sign set; Each operational order parameter is provided with the second corresponding authority sign set, described the second authority sign set comprises at least one self-defined user's user right role title, described the second authority identification sets is share in representing that described user is allowed to the operational order parameter of operational correspondence when self-defined user's user right role title is contained in described the second authority sign set.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, described enquiry module specifically for, in operational order parameter configuration files corresponding to described self-defined user, inquire about described operational order of asking execution, if described user's user right role title is included in described the first authority corresponding to operational order of carrying out of asking and identifies in set, inquire about the operational order parameter under the described operational order of asking to carry out; If there is operational order parameter to meet second condition, the user right role title that the operational order parameter that meets described second condition is defined as to described user allows the operational order parameter of operation; Described second condition is: described user's user right role title is included in the second authority sign set corresponding to operational order parameter.Like this, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, described enquiry module specifically for, after returning to the operational order parameter getting, according to the operational order parameter getting, determining need to be to the operational order request being sent by management and control devices; Described operational order request be used for asking described by management and control devices to operational order request reply; This equipment also comprises: sending module, for the operational order request to being sent described enquiry module by management and control devices and determining; Described receiver module also for, receive the described operational order parameter management and control operation response of being returned by management and control devices; Described enquiry module also for, identify the type of described response; If the type of described response is response corresponding to operational order parameter query request, according to described user's user right sign and the operational order parameter configuration files corresponding with described user's user type, in the operational order parameter query results set carrying from the response receiving, the user right sign of selecting described user allows the operational order parameter of operation; Described output module also for, the operational order parameter of selecting is exported.

Preferably, described enquiry module specifically for, if described user's user type is system definition user, in operational order parameter configuration files corresponding to described system definition user, inquire about the second authority sign corresponding to each operational order parameter in described operational order parameter query results set, and the operational order parameter that described user right grade is not less than to the Permission Levels that described the second authority identifies allows as described user's user right grade the operational order parameter operating; If described user's user type is self-defined user, in operational order parameter configuration files corresponding to described self-defined user, inquire about the second authority sign set corresponding to each operational order parameter in described operational order parameter query results set, and described the second authority sign set is comprised to the operational order parameter of described user right role title is as the operational order parameter of described user's user right role title permission operation.Like this, operational order management and control devices in the embodiment of the present invention can be obtained by the operational order parameter information in management and control devices, and make by the authorization check mechanism of hierarchical classification the control effect that information is concentrated more, specific aim is stronger, highlighted hierarchical classification, improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Preferably, described receiver module also for, the operational order sending the user who receives described management and control devices receives the logging request that described user sends before carrying out request; Described acquisition module also for, according to the user profile of carrying in described logging request, obtain corresponding user right sign.Visible, the embodiment of the present invention can be recorded user's user right sign when user logins, and then according to user's authority, allows the operational order parameter of operation to carry out, after authorization check, just presenting to user, thereby avoided user's misoperation to this user.

Accompanying drawing explanation

In order to be illustrated more clearly in the technical scheme in the embodiment of the present invention, below the accompanying drawing of required use during embodiment is described is briefly introduced, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skill in the art, do not paying under the prerequisite of creative work, can also obtain according to these accompanying drawings other accompanying drawing.

The schematic flow sheet of a kind of operational order parametron control method that Fig. 1 provides for the embodiment of the present invention;

The schematic flow sheet of the user login operation command parameter management and control devices that Fig. 2 provides for the embodiment of the present invention;

The schematic diagram of the flow process of the operational order parameter management and control apparatus management/control operational order parameter that Fig. 3 provides for the embodiment of the present invention;

The operational order parameter management and control devices that Fig. 4 provides for the embodiment of the present invention is to by the schematic flow sheet of management and control devices transmit operation command request;

The structural representation of a kind of operational order parameter management and control devices that Fig. 5 provides for the embodiment of the present invention.

Embodiment

In order to make the object, technical solutions and advantages of the present invention clearer, below in conjunction with accompanying drawing, the present invention is described in further detail, and obviously, described embodiment is only a part of embodiment of the present invention, rather than whole embodiment.Embodiment based in the present invention, those of ordinary skills, not making all other embodiment that obtain under creative work prerequisite, belong to the scope of protection of the invention.

The technical problem existing in order to solve prior art, the embodiment of the present invention provides a kind of operational order parametron control method and equipment.In the embodiment of the present invention, operational order parameter management and control devices receives the operational order of user's transmission of this management and control devices and carries out request; This operational order parameter management and control devices is determined this user's user type, and obtains this user's user right sign; This operational order parameter management and control devices is for the operational order of ask execution, according to this user's user right sign, the user right sign of inquiring about this user from the operational order parameter configuration files corresponding with this user type allows the operational order parameter of operation; The operational order parameter that this operational order parameter management and control devices output inquires, so that this user by this operational order parameter management and control devices, utilizes the operational order parameter inquiring to carry out management and control operation to the operational order parameter by management and control devices.

The embodiment of the present invention goes for multiple systems framework, the operational order parameter acquiring method that the embodiment of the present invention provides can be applicable to various types of communication nucleus equipment, communication terminal etc., being applicable to has each type operating system specific (special) requirements, embedded system and non-embedded system for control of authority, and the embodiment of the present invention can realize the management and control processing to user right sign and information security.

Fig. 1 shows the schematic flow sheet of a kind of operational order parametron control method that the embodiment of the present invention provides.Method shown in Fig. 1 can be applicable to above-mentioned multiple systems framework and various types of communication equipment and terminal, as shown in Figure 1:

Step 11: operational order parameter management and control devices receives the operational order of user's transmission of this management and control devices and carries out request.

Optionally, the operational order parameter management and control devices in above-mentioned steps 11 receives before operational order that the user of described management and control devices sends carries out request, and described operational order parameter management and control devices receives the logging request that described user sends; Described operational order parameter management and control devices is obtained corresponding user right sign according to the user profile of carrying in described logging request.

Step 12: operational order parameter management and control devices is determined this user's user type, and obtain this user's user right sign; User type comprises system definition user or self-defined user, and user right sign comprises user right grade or user right role title.

Step 13: operational order parameter management and control devices is for the operational order of ask execution, according to this user's user right sign, the user right sign of obtaining this user from the operational order parameter configuration files corresponding with this user type allows the operational order parameter of operation.

Optionally, the sign of the user right according to this user in above-mentioned steps 13, the user right sign of obtaining this user from the operational order parameter configuration files corresponding with this user type allows the operational order parameter of operation, comprise: if determine user type, be system definition user, according to described user's user right grade, the user right grade of inquiring about described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation; If determine user type, be self-defined user, according to described user's user right role title, the user right role title of inquiring about described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation.

Optionally, operational order parameter configuration files corresponding to described system definition user comprises operational order, each operational order is provided with a corresponding first authority sign, in the user right grade that described the first authority sign is system definition user arbitrary one; Described the first authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the first authority identifies, and described user is allowed to the operational order of operational correspondence; Each operational order parameter is provided with a corresponding second authority sign, and described the second authority is designated arbitrary in system definition user's user right grade; Described the second authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the second authority identifies, and described user is allowed to the operational order parameter of operational correspondence.Further, in operational order parameter configuration files corresponding to described system definition user, inquire about described operational order of asking execution, if described user's user right grade is not less than the Permission Levels that described the first authority corresponding to operational order of asking to carry out identifies, inquire about the operational order parameter under described operational order of asking execution; If there is operational order parameter to meet first condition, the user right grade that the operational order parameter that meets described first condition is defined as to described user allows the operational order parameter of operation; Described first condition is: described user's user right grade is not less than the Permission Levels that the second authority corresponding to operational order parameter identifies.

Optionally, operational order parameter configuration files corresponding to described self-defined user comprises operational order and operational order parameter; Each operational order is provided with the first corresponding authority sign set, described the first authority sign set comprises at least one self-defined user's user right role title, described the first authority identification sets is share in representing that described user is allowed to the operational order of operational correspondence when self-defined user's user right role title is contained in described the first authority sign set; Each operational order parameter is provided with the second corresponding authority sign set, described the second authority sign set comprises at least one self-defined user's user right role title, described the second authority identification sets is share in representing that described user is allowed to the operational order parameter of operational correspondence when self-defined user's user right role title is contained in described the second authority sign set.Further, in operational order parameter configuration files corresponding to described self-defined user, inquire about described operational order of asking execution, if described user's user right role title is included in described the first authority corresponding to operational order of carrying out of asking and identifies in set, inquire about the operational order parameter under the described operational order of asking to carry out; If there is operational order parameter to meet second condition, the user right role title that the operational order parameter that meets described second condition is defined as to described user allows the operational order parameter of operation; Described second condition is: described user's user right role title is included in the second authority sign set corresponding to operational order parameter.

Step 14: the operational order parameter that the output of operational order parameter management and control devices gets, so that this user by this operational order parameter management and control devices, utilizes the operational order parameter getting to carry out management and control operation to the operational order parameter by management and control devices.

Optionally, after the operational order parameter that operational order parameter management and control devices output in above-mentioned steps 14 gets, described operational order parameter management and control devices is according to the operational order parameter inquiring, to by management and control devices transmit operation command request, described operational order request be used for asking described by management and control devices to operational order request reply; Described operational order parameter management and control devices receives the described operational order parameter management and control operation response of being returned by management and control devices, and identifies the type of described response; If the type of described response is response corresponding to operational order parameter query request, described operational order parameter management and control devices is according to described user's user right sign and the operational order parameter configuration files corresponding with described user's user type, in the operational order parameter query results set carrying from the response receiving, the user right sign of selecting described user allows the operational order parameter of operation, and the operational order parameter of selecting is exported.

Further, if described user's user type is system definition user, in operational order parameter configuration files corresponding to described system definition user, inquire about the second authority sign corresponding to each operational order parameter in described operational order parameter query results set, and the operational order parameter that described user right grade is not less than to the Permission Levels that described the second authority identifies allows as described user's user right grade the operational order parameter operating; If described user's user type is self-defined user, in operational order parameter configuration files corresponding to described self-defined user, inquire about the second authority sign set corresponding to each operational order parameter in described operational order parameter query results set, and described the second authority sign set is comprised to the operational order parameter of described user right role title is as the operational order parameter of described user's user right role title permission operation.

The embodiment of the present invention can comprise the flow process of user login operation command parameter management and control devices, and the flow process of operational order parameter management and control apparatus management/control operational order parameter.The above two kinds of flow processs that the embodiment of the present invention provided below by Fig. 2～Fig. 4 are elaborated, wherein, Fig. 2 shows the schematic flow sheet of the user login operation command parameter management and control devices that the embodiment of the present invention provides, and Fig. 3 shows the schematic diagram of the flow process of the operational order parameter management and control apparatus management/control operational order parameter that the embodiment of the present invention provides.

As shown in Figure 2, step 21: operational order parameter management and control devices receives the logging request that user sends.

During specific implementation, user can login by the mode of input username information and encrypted message, after user has inputted username information and encrypted message, operational order parameter management and control devices can think that user has sent logging request, at least comprises this user's user profile in this logging request.

Step 22: operational order parameter management and control devices is obtained corresponding user right sign according to the user profile of carrying in this logging request.

During specific implementation, operational order parameter management and control devices is obtained the user profile of carrying in logging request, and according to this user profile, in user right label table, obtain user right sign corresponding to this user, user right in the embodiment of the present invention can comprise keeper, attendant, domestic consumer, casual user and self-defined user etc., user right sign corresponding to above user right can be set to respectively to 1,2,3,4,5, for representing feature and the otherness of the operational order authority of all kinds of different users.It should be noted that, the system definition user in the present invention can comprise keeper, attendant, domestic consumer and casual user, and above four kinds of users' authority is for from high to low; Self-defined user can comprise whole nonsystematic definition users.If operational order parameter management and control devices gets user right sign corresponding to this user in user right label table, can perform step 31, if operational order parameter management and control devices does not get user right sign corresponding to this user in user right label table, finish this flow process.

Visible, login user is divided into system definition user to the embodiment of the present invention and self-defined user manages and controls, thereby reduced the wasting of resources that in prior art, user right is disperseed to verification and cause.

As shown in Figure 3, step 31: operational order parameter management and control devices receives the operational order execution request that user sends.

During specific implementation, the user by above-mentioned login process register command parameter management and control devices is to the request of operational order parameter management and control devices transmit operation command execution, for the operational order that need to carry out to operational order parameter management and control device request.

Step 32～step 33: operational order parameter management and control devices is determined described user's user type, and obtain described user's user right sign; If determine, this user's user type is system definition user, performs step 34, if determine, this user's user type is self-defined user, performs step 35.

During specific implementation, operational order parameter management and control devices is according to user's user profile, this user's user type and user right sign in user right label table, user type can comprise system definition user or self-defined user, if determine, this user's user type is system definition user, perform step 34, if determine, this user's user type is self-defined user, performs step 35.

Step 34: this user's user type is self-defined user if determine, for the operational order carried out of ask, according to described user's user right sign, the user right sign of inquiring about described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation, and described user right is designated user right grade.

During specific implementation, all system definition users in the embodiment of the present invention use same operational order parameter configuration files, operational order parameter configuration files corresponding to system definition user namely, in operational order parameter configuration files corresponding to this system definition user, can comprise operational order, each operational order is provided with a corresponding first authority sign, in the user right grade that described the first authority sign is system definition user arbitrary one; Described the first authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the first authority identifies, and described user is allowed to the operational order of operational correspondence; Each operational order parameter is provided with a corresponding second authority sign, and described the second authority is designated arbitrary in system definition user's user right grade; Described the second authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the second authority identifies, and described user is allowed to the operational order parameter of operational correspondence.Concrete, can be according to the Hierarchy Mode sign operational order of the second user right sign corresponding to first user authority sign corresponding to operational order, operational order, operational order parameter, operational order parameter under operational order and operational order parameter and system definition user's incidence relation.Concrete articulating can be: under operational order, hang first user authority sign corresponding to this operational order, the second user right sign corresponding with this operational order parameter of the operational order parameter under this operational order hangs under first user authority sign jointly.It should be noted that, operational order, first user authority sign, operational order parameter and the second user right sign, three is coordination.In the embodiment of the present invention, the second user right sign corresponding to the first user authority sign that operational order is corresponding and operational order parameter all represents a kind of scope of user right, for example, the first user authority sign that operational order command1 is corresponding is set to 3, can represent that this operational order command1 can allow to be not less than 3 user by user right and carry out, can the person of being managed, attendant or domestic consumer carry out, cannot lower than 3 user, be carried out by user right, cannot be carried out by casual user; Same, the second user right sign corresponding to operational order parameter also represents a kind of scope of user right described above.For above-mentioned flow process, in can in-system define user corresponding operational order parameter configuration files, carry out as given a definition:

Wherein, <cmd order=" set-sys-ver-info " > represents: defined the operational order that a name is called set-sys-ver-info; <popedom>5</pope dom> represents: the first authority corresponding to this operational order is designated 5, can think that operational order set-sys-ver-info can allow to be used greater than or equal to 5 user by user right; <execute parameter=" DiskFrameNo " right=3></executeGreatT.GreaT .GT represents: defined the operational order parameter that a name is called DiskFrameNo, and defined the second authority corresponding to this operational order parameter and be designated 3, simultaneously, this operational order parameter is the operational order parameter under operational order set-sys-ver-info, now can think that operational order parameter DiskFrameNo can allow to be used greater than or equal to 3 user by user right.

Operational order parameter management and control devices is asked the operational order of carrying out for user, according to this user's user right sign, in operational order parameter configuration files corresponding to in-system define user, determine whether this user allows to operate the user right whether user right that above-mentioned the first authority corresponding to operational order of asking to carry out identify is not less than this user, if not, represent that this user is not allowed to use this operational order, finishes this flow process; If, represent that this user allows to operate this operational order, whether the operational order parameter of further inquiring about under this operational order allows to be used by this user (allowing can be comprised by user's use: allow by operations such as user check, deletes, revises, increases newly or searches), and the user right sign that operational order parameter management and control devices is defined as described user by the operational order parameter that meets described first condition allows the operational order parameter operating; Described first condition is: described user's user right sign is not less than the second user right sign that the second authority corresponding to operational order parameter identifies; Then, execution step 36.

Step 35: this user's user type is self-defined user if determine, for the operational order carried out of ask, according to described user's user right sign, the user right sign of inquiring about described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation, and described user right is designated user right role title.

During specific implementation, all self-defined user in the embodiment of the present invention uses same operational order parameter configuration files, operational order parameter configuration files corresponding to self-defined user namely, can comprise operational order and operational order parameter in operational order parameter configuration files corresponding to this self-defined user; Each operational order is provided with the first corresponding authority sign set, described the first authority sign set comprises at least one self-defined user's user right role title, described the first authority identification sets is share in representing that described user is allowed to the operational order of operational correspondence when self-defined user's user right role title is contained in described the first authority sign set; Each operational order parameter is provided with the second corresponding authority sign set, described the second authority sign set comprises at least one self-defined user's user right role title, described the second authority identification sets is share in representing that described user is allowed to the operational order parameter of operational correspondence when self-defined user's user right role title is contained in described the second authority sign set.Concrete, second authority corresponding to operational order parameter, operational order parameter that can identify under set, operational order according to operational order, the first authority corresponding to operational order identifies the Hierarchy Mode sign operational order of set and operational order parameter and system definition user's incidence relation.Concrete articulating can be: operational order and operational order parameter are coordinations, under operational order, hang the first authority sign set corresponding to this operational order, under operational order parameter, hang the second authority sign set corresponding to this operational order parameter, visible, operational order and the set of the first authority sign are set memberships, and operational order parameter and the set of the second authority sign are also set memberships.In the embodiment of the present invention, the second authority sign set corresponding to the first authority sign set that operational order is corresponding and operational order parameter all comprised the whole user who is all allowed to use this operational order or this operational order parameter.For above-mentioned flow process, can in operational order parameter configuration files corresponding to self-defined user, carry out as given a definition:

Wherein, <cmd order=" set-sys-ver-info " > represents: defined the operational order that a name is called set-sys-ver-info; <role1>yf</role1 ><role2>yjLEssT .LTssT.LT/role2> represents: the first authority sign set corresponding to this operational order comprised that user right is designated the user of yf and yj; <referrence parameter=" SensorFrameNo " > represents: defined the operational order parameter that a name is called SensorFrameNo, <role1>rj</role1 ><role2>jjLEssT .LTssT.LT/role2> represents: the second authority sign set corresponding to this operational order parameter comprised that user right is designated the user of rj and jj.

Operational order parameter management and control devices is asked the operational order of carrying out for user, according to this user's user right sign, in operational order parameter configuration files corresponding to self-defined user, whether the user right sign of determining described user is included in during described the first authority sign corresponding to operational order of ask to carry out gather, if described user's user right sign is included in described the first authority corresponding to operational order of carrying out of asking and identifies in set, further whether the operational order parameter under this operational order of inquiry allows to be used by this user and (allows to be used and can comprise by user: allow to be checked by user, delete, revise, the operation such as newly-increased or search), inquire about the operational order parameter under the described operational order of asking to carry out, if there is operational order parameter to meet second condition, the user right sign that the operational order parameter that meets described second condition is defined as to described user allows the operational order parameter of operation, described second condition is: described user's user right sign is included in the second authority sign set corresponding to operational order parameter, then, execution step 36.

Step 36: the operational order parameter that the output of operational order parameter management and control devices gets.

During specific implementation, operational order parameter management and control devices is presented to user by the operational order parameter getting, so that described user by described operational order parameter management and control devices, utilizes the operational order parameter getting to carry out management and control operation (this management and control operation can comprise inquiry, deletion, increases and revise) to the operational order parameter by management and control devices.

Further, the embodiment of the present invention can also comprise a kind of operational order parameter management and control devices and network element or by the mutual process of management and control devices.Fig. 4 shows a kind of operational order parameter management and control devices that the embodiment of the present invention provides to by the schematic flow sheet of management and control devices transmit operation command request, as shown in Figure 4:

Step 41: operational order parameter management and control devices receives the operational order request that user sends.

Step 42: operational order parameter management and control devices is according to the operational order parameter that gets, to by management and control devices transmit operation command request.

Step 43～step 44: operational order parameter management and control devices receives the operational order parameter management and control operation response of being returned by management and control devices, and the type of identification response, if the type of response is response corresponding to inquiry request, perform step 45, otherwise, execution step 49.

Step 45～step 46: if the type of response is response corresponding to inquiry request, operational order parameter management and control devices is obtained this user's user right sign, and definite user's user type, if this user's user type is system definition user, perform step 47, if this user's user type is self-defined user, perform step 48.

Step 47: if this user's user type is system definition user, in the operational order parameter query results set carrying from the response receiving, the operational order parameter of selecting and export this user's user right sign permission operation (or allowing to check), described user right is designated user right grade.

During specific implementation, if this user's user type is system definition user, in operational order parameter configuration files corresponding to in-system define user, inquire about the second authority sign corresponding to each operational order parameter in this operational order parameter query results set, and the operational order parameter that user right sign is not less than to the second user right sign that the second authority identifies allows as described user's user right sign the operational order parameter operating; Further, the operational order parameter inquiring is presented to user.

Step 48: if this user's user type is self-defined user, in the operational order parameter query results set carrying from the response receiving, the operational order parameter of selecting and export this user's user right sign permission operation (or allowing to check), described user right is designated user right role title.

During specific implementation, if described user's user type is self-defined user, in operational order parameter configuration files corresponding to described self-defined user, the second authority sign corresponding to each operational order parameter of inquiring about in described operational order parameter query results set gathered, and described the second authority sign set is comprised to the operational order parameter of described user right sign is as the operational order parameter of described user's user right sign permission operation; Further, the operational order parameter inquiring is presented to user.

Step 49: if the type of described response is response corresponding to response corresponding to removal request or modification request or response corresponding to increase request, operational order parameter management and control devices operates successfully or operation failure according to this response prompting user.

Visible, compared with prior art, operational order control documents has been carried out to integration and optimization process, improved the accuracy that operational order is carried out, saved the resource of system maintenance; Compare with the dispersion checking mode of traditional user right sign, the embodiment of the present invention makes the control effect that authorization check information is concentrated more, specific aim is stronger, highlighted hierarchical classification, has improved the efficiency that verification is controlled; Reduced the risk that low rights user's misoperation brings simultaneously.

Technical conceive based on identical, the embodiment of the present invention also provides a kind of operational order parameter management and control devices that can be applicable to above-mentioned flow process.

Fig. 5 shows a kind of operational order parameter management and control devices that the embodiment of the present invention provides, as shown in Figure 5:

An operational order parameter management and control devices, comprises

Receiver module 51, the operational order execution request sending for receiving the user of described management and control devices;

Acquisition module 52, for determining described user's user type, and obtains described user's user right sign; Described user type comprises system definition user and/or self-defined user, and described system definition user's user right is designated user right grade, and described self-defined user's user right is designated user right role title;

Enquiry module 53, for the operational order for ask execution, according to described user's user right sign, the user right sign of obtaining described user from the operational order parameter configuration files corresponding with described user type allows the operational order parameter of operation;

Output module 54, for exporting the operational order parameter getting.

Preferably, described enquiry module 53 specifically for, if it is system definition user that described acquisition module 52 is determined user type, according to described user's user right grade, the user right grade of inquiring about described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation; If it is self-defined user that described acquisition module 52 is determined user type,, according to described user's user right role title, the user right role title of inquiring about described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation.

Preferably, this equipment also comprises, configuration module, for being configured the form of operational order parameter configuration files corresponding to described system definition user; Wherein, operational order parameter configuration files corresponding to described system definition user comprises operational order, and each operational order is arranged with corresponding operational order parameter; Each operational order is provided with a corresponding first authority sign, in the user right grade that described the first authority sign is system definition user arbitrary one; Described the first authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the first authority identifies, and described user is allowed to the operational order of operational correspondence; Each operational order parameter is provided with a corresponding second authority sign, and described the second authority is designated system definition user's authority sign, and described the second authority is designated arbitrary in system definition user's user right grade; Described the second authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the second authority identifies, and described user is allowed to the operational order parameter of operational correspondence.

Preferably, described enquiry module 53 specifically for, in operational order parameter configuration files corresponding to described system definition user, inquire about described operational order of asking execution, if described user's user right grade is not less than the Permission Levels that described the first authority corresponding to operational order of asking to carry out identifies, inquire about the operational order parameter under described operational order of asking execution; If there is operational order parameter to meet first condition, the user right grade that the operational order parameter that meets described first condition is defined as to described user allows the operational order parameter of operation; Described first condition is: described user's user right grade is not less than the Permission Levels that the second authority corresponding to operational order parameter identifies.

Preferably, this equipment also comprises: configuration module, for the form of operational order parameter configuration files corresponding to described self-defined user is configured; Wherein, operational order parameter configuration files corresponding to described self-defined user comprises operational order and operational order parameter; Each operational order is provided with the first corresponding authority sign set, described the first authority sign set comprises at least one self-defined user's user right role title, described the first authority identification sets is share in representing that described user is allowed to the operational order of operational correspondence when self-defined user's user right role title is contained in described the first authority sign set; Each operational order parameter is provided with the second corresponding authority sign set, described the second authority sign set comprises at least one self-defined user's user right role title, described the second authority identification sets is share in representing that described user is allowed to the operational order parameter of operational correspondence when self-defined user's user right role title is contained in described the second authority sign set.

Preferably, described enquiry module 53 specifically for, in operational order parameter configuration files corresponding to described self-defined user, inquire about described operational order of asking execution, if described user's user right role title is included in described the first authority corresponding to operational order of carrying out of asking and identifies in set, inquire about the operational order parameter under the described operational order of asking to carry out; If there is operational order parameter to meet second condition, the user right role title that the operational order parameter that meets described second condition is defined as to described user allows the operational order parameter of operation; Described second condition is: described user's user right role title is included in the second authority sign set corresponding to operational order parameter.

Preferably, described enquiry module 53 specifically for, after returning to the operational order parameter getting, according to the operational order parameter getting, determining need to be to the operational order request being sent by management and control devices; Described operational order request be used for asking described by management and control devices to operational order request reply; This equipment also comprises: sending module, for the operational order request to being sent described enquiry module 53 by management and control devices and determining; Described receiver module 51 also for, receive the described operational order parameter management and control operation response of being returned by management and control devices; Described enquiry module 53 also for, identify the type of described response; If the type of described response is response corresponding to operational order parameter query request, according to described user's user right sign and the operational order parameter configuration files corresponding with described user's user type, in the operational order parameter query results set carrying from the response receiving, the user right sign of selecting described user allows the operational order parameter of operation; Described output module 54 also for, the operational order parameter of selecting is exported.

Preferably, described enquiry module 53 specifically for, if described user's user type is system definition user, in operational order parameter configuration files corresponding to described system definition user, inquire about the second authority sign corresponding to each operational order parameter in described operational order parameter query results set, and the operational order parameter that described user right grade is not less than to the Permission Levels that described the second authority identifies allows as described user's user right grade the operational order parameter operating; If described user's user type is self-defined user, in operational order parameter configuration files corresponding to described self-defined user, inquire about the second authority sign set corresponding to each operational order parameter in described operational order parameter query results set, and described the second authority sign set is comprised to the operational order parameter of described user right role title is as the operational order parameter of described user's user right role title permission operation.

Preferably, described receiver module 51 also for, receiving before operational order that described user sends carries out request, receive the logging request that described user sends; Described acquisition module 52 also for, according to the user profile of carrying in described logging request, obtain corresponding user right sign.

The present invention is with reference to describing according to flow chart and/or the block diagram of the method for the embodiment of the present invention, equipment (system) and computer program.Should understand can be in computer program instructions realization flow figure and/or block diagram each flow process and/or the flow process in square frame and flow chart and/or block diagram and/or the combination of square frame.The processor of these computer program instructions to all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing device can be provided, make the function of appointment in a flow process in can realization flow figure of instruction that the processor by this computer or other programmable data processing device carries out or a plurality of flow process and/or square frame of block diagram or a plurality of square frame.

These computer program instructions also can be stored in energy vectoring computer or the computer-readable memory of other programmable data processing device with ad hoc fashion work, the instruction that makes to be stored in this computer-readable memory produces the manufacture that comprises command device, and this command device is realized the function of appointment in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame.

These computer program instructions also can be loaded in computer or other programmable data processing device, make to carry out sequence of operations step to produce computer implemented processing on computer or other programmable devices, thereby the instruction of carrying out is provided for realizing the step of the function of appointment in flow process of flow chart or a square frame of a plurality of flow process and/or block diagram or a plurality of square frame on computer or other programmable devices.

Although described the preferred embodiments of the present invention, once those skilled in the art obtain the basic creative concept of cicada, can make other change and modification to these embodiment.So claims are intended to all changes and the modification that are interpreted as comprising preferred embodiment and fall into the scope of the invention.

Obviously, those skilled in the art can carry out various changes and modification and not depart from the spirit and scope of the present invention the present invention.Like this, if within of the present invention these are revised and modification belongs to the scope of the claims in the present invention and equivalent technologies thereof, the present invention is also intended to comprise these changes and modification interior.

Claims

1. an operational order parametron control method, is characterized in that, comprising:

Receive the operational order execution request that user sends;

Determine described user's user type, and obtain described user's user right sign; Described user type comprises system definition user and/or self-defined user, and described system definition user's user right is designated user right grade, and described self-defined user's user right is designated user right role title;

2. the method for claim 1, it is characterized in that, according to described user's user right sign, the user right sign of obtaining described user from the operational order parameter configuration files corresponding with described user type allows the operational order parameter of operation, comprising:

If determine user type, be system definition user, according to described user's user right grade, the user right grade of inquiring about described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation;

If determine user type, be self-defined user, according to described user's user right role title, the user right role title of inquiring about described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation.

3. method as claimed in claim 2, is characterized in that, operational order parameter configuration files corresponding to described system definition user comprises operational order, and each operational order is arranged with corresponding operational order parameter;

Each operational order is provided with a corresponding first authority sign, in the user right grade that described the first authority sign is system definition user arbitrary one; Described the first authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the first authority identifies, and described user is allowed to the operational order of operational correspondence;

Each operational order parameter is provided with a corresponding second authority sign, and described the second authority is designated arbitrary in system definition user's user right grade; Described the second authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the second authority identifies, and described user is allowed to the operational order parameter of operational correspondence.

4. method as claimed in claim 3, it is characterized in that, the described operational order for ask execution, according to described user's user right grade, the user right grade of obtaining described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation, comprising:

In operational order parameter configuration files corresponding to described system definition user, inquire about described operational order of asking execution, if described user's user right grade is not less than the Permission Levels that described the first authority corresponding to operational order of asking to carry out identifies, inquire about the operational order parameter under described operational order of asking execution;

If there is operational order parameter to meet first condition, the user right grade that the operational order parameter that meets described first condition is defined as to described user allows the operational order parameter of operation; Described first condition is: described user's user right grade is not less than the Permission Levels that the second authority corresponding to operational order parameter identifies.

5. method as claimed in claim 2, is characterized in that, operational order parameter configuration files corresponding to described self-defined user comprises operational order and operational order parameter;

Each operational order is provided with the first corresponding authority sign set, described the first authority sign set comprises at least one self-defined user's user right role title, described the first authority identification sets is share in representing that described user is allowed to the operational order of operational correspondence when self-defined user's user right role title is contained in described the first authority sign set;

Each operational order parameter is provided with the second corresponding authority sign set, described the second authority sign set comprises at least one self-defined user's user right role title, described the second authority identification sets is share in representing that described user is allowed to the operational order parameter of operational correspondence when self-defined user's user right role title is contained in described the second authority sign set.

6. method as claimed in claim 5, it is characterized in that, the described operational order for ask execution, according to described user's user right role title, the user right role title of obtaining described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation, comprising:

In operational order parameter configuration files corresponding to described self-defined user, inquire about described operational order of asking execution, if described user's user right role title is included in described the first authority corresponding to operational order of carrying out of asking and identifies in set, inquire about the operational order parameter under the described operational order of asking to carry out;

If there is operational order parameter to meet second condition, the user right role title that the operational order parameter that meets described second condition is defined as to described user allows the operational order parameter of operation; Described second condition is: described user's user right role title is included in the second authority sign set corresponding to operational order parameter.

7. the method as described in any one in claim 3-6, is characterized in that, after the operational order parameter that described output gets, also comprises:

Described operational order parameter management and control devices is according to the operational order parameter getting, to by management and control devices transmit operation command request, described operational order request be used for asking described by management and control devices to operational order request reply;

Described operational order parameter management and control devices receives the described operational order parameter management and control operation response of being returned by management and control devices, and identifies the type of described response;

If the type of described response is response corresponding to operational order parameter query request, described operational order parameter management and control devices is according to described user's user right sign and the operational order parameter configuration files corresponding with described user's user type, in the operational order parameter query results set carrying from the response receiving, the user right sign of selecting described user allows the operational order parameter of operation, and the operational order parameter of selecting is exported.

8. method as claimed in claim 7, it is characterized in that, the described sign of the user right according to described user and the operational order parameter configuration files corresponding with described user's user type, in the operational order parameter query results set carrying from the response receiving, the user right sign of selecting described user allows the operational order parameter of operation, comprising:

If described user's user type is system definition user, in operational order parameter configuration files corresponding to described system definition user, inquire about the second authority sign corresponding to each operational order parameter in described operational order parameter query results set, and the operational order parameter that described user right grade is not less than to the Permission Levels that described the second authority identifies allows as described user's user right grade the operational order parameter operating;

If described user's user type is self-defined user, in operational order parameter configuration files corresponding to described self-defined user, inquire about the second authority sign set corresponding to each operational order parameter in described operational order parameter query results set, and described the second authority sign set is comprised to the operational order parameter of described user right role title is as the operational order parameter of described user's user right role title permission operation.

9. the method for claim 1, is characterized in that, the operational order that described reception user sends also comprises before carrying out request:

Receive the logging request that described user sends;

According to the user profile of carrying in described logging request, obtain corresponding user right sign.

10. an operational order parameter management and control devices, is characterized in that, comprising:

Receiver module, the operational order execution request sending for receiving user;

Acquisition module, for determining described user's user type, and obtains described user's user right sign; Described user type comprises system definition user and/or self-defined user, and described system definition user's user right is designated user right grade, and described self-defined user's user right is designated user right role title;

Output module, for exporting the operational order parameter getting.

11. equipment as claimed in claim 10, is characterized in that, described enquiry module specifically for,

If it is system definition user that described acquisition module is determined user type, according to described user's user right grade, the user right grade of inquiring about described user in operational order parameter configuration files corresponding to in-system define user allows the operational order parameter of operation;

If it is self-defined user that described acquisition module is determined user type,, according to described user's user right role title, the user right role title of inquiring about described user in operational order parameter configuration files corresponding to self-defined user allows the operational order parameter of operation.

12. equipment as claimed in claim 11, is characterized in that, this equipment also comprises:

Configuration module, for being configured the form of operational order parameter configuration files corresponding to described system definition user; Wherein, operational order parameter configuration files corresponding to described system definition user comprises operational order, and each operational order is arranged with corresponding operational order parameter; Each operational order is provided with a corresponding first authority sign, in the user right grade that described the first authority sign is system definition user arbitrary one; Described the first authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the first authority identifies, and described user is allowed to the operational order of operational correspondence; Each operational order parameter is provided with a corresponding second authority sign, and described the second authority is designated arbitrary in system definition user's user right grade; Described the second authority sign is when representing that user right grade as described user is not less than the Permission Levels that described the second authority identifies, and described user is allowed to the operational order parameter of operational correspondence.

13. equipment as claimed in claim 12, is characterized in that, described enquiry module specifically for,

In operational order parameter configuration files corresponding to described system definition user, inquire about described operational order of asking execution, if described user's user right grade is not less than the Permission Levels that described the first authority corresponding to operational order of asking to carry out identifies, inquire about the operational order parameter under described operational order of asking execution; If there is operational order parameter to meet first condition, the user right grade that the operational order parameter that meets described first condition is defined as to described user allows the operational order parameter of operation; Described first condition is: described user's user right grade is not less than the Permission Levels that the second authority corresponding to operational order parameter identifies.

14. equipment as claimed in claim 11, is characterized in that, this equipment also comprises:

Configuration module, for being configured the form of operational order parameter configuration files corresponding to described self-defined user; Wherein, operational order parameter configuration files corresponding to described self-defined user comprises operational order and operational order parameter; Each operational order is provided with the first corresponding authority sign set, described the first authority sign set comprises at least one self-defined user's user right role title, described the first authority identification sets is share in representing that described user is allowed to the operational order of operational correspondence when self-defined user's user right role title is contained in described the first authority sign set; Each operational order parameter is provided with the second corresponding authority sign set, described the second authority sign set comprises at least one self-defined user's user right role title, described the second authority identification sets is share in representing that described user is allowed to the operational order parameter of operational correspondence when self-defined user's user right role title is contained in described the second authority sign set.

15. equipment as claimed in claim 14, is characterized in that, described enquiry module specifically for,

In operational order parameter configuration files corresponding to described self-defined user, inquire about described operational order of asking execution, if described user's user right role title is included in described the first authority corresponding to operational order of carrying out of asking and identifies in set, inquire about the operational order parameter under the described operational order of asking to carry out; If there is operational order parameter to meet second condition, the user right role title that the operational order parameter that meets described second condition is defined as to described user allows the operational order parameter of operation; Described second condition is: described user's user right role title is included in the second authority sign set corresponding to operational order parameter.

16. equipment as described in any one in claim 12-15, it is characterized in that, described enquiry module specifically for, after returning to the operational order parameter getting, according to the operational order parameter getting, determining need to be to the operational order request being sent by management and control devices; Described operational order request be used for asking described by management and control devices to operational order request reply;

This equipment also comprises:

Sending module, for the operational order request to being sent described enquiry module by management and control devices and determining;

Described receiver module also for, receive the described operational order parameter management and control operation response of being returned by management and control devices;

Described enquiry module also for, identify the type of described response; If the type of described response is response corresponding to operational order parameter query request, according to described user's user right sign and the operational order parameter configuration files corresponding with described user's user type, in the operational order parameter query results set carrying from the response receiving, the user right sign of selecting described user allows the operational order parameter of operation;

Described output module also for, the operational order parameter of selecting is exported.

17. equipment as claimed in claim 16, is characterized in that, described enquiry module specifically for,

If described user's user type is system definition user, in operational order parameter configuration files corresponding to described system definition user, inquire about the second authority sign corresponding to each operational order parameter in described operational order parameter query results set, and the operational order parameter that described user right grade is not less than to the Permission Levels that described the second authority identifies allows as described user's user right grade the operational order parameter operating; If described user's user type is self-defined user, in operational order parameter configuration files corresponding to described self-defined user, inquire about the second authority sign set corresponding to each operational order parameter in described operational order parameter query results set, and described the second authority sign set is comprised to the operational order parameter of described user right role title is as the operational order parameter of described user's user right role title permission operation.

18. equipment claimed in claim 10, is characterized in that, described receiver module also for, the operational order sending the user who receives described management and control devices receives the logging request that described user sends before carrying out request;

Described acquisition module also for, according to the user profile of carrying in described logging request, obtain corresponding user right sign.