CN104424404A - Implementation method for realizing third-party escrow system through authorization management - Google Patents

Abstract

The invention relates to an implementation method for realizing a third-party escrow system through authorization management, which is capable of solving the problem that inconvenience is caused as one user account needs to be given to other users for operation due to a special reason in the system. Along with the continuous development of informationization, the computer application technology is already infiltrated in every industry; due to the difference of system authorization assignment, the roles of all users in the system are different, the own operation authorizations are different, the own user authorization needs to be temporarily escrowed by the other users under some conditions, the implementation method for realizing the third-party escrow system through the authorization management is realized aiming at the problems of undefined responsibility, user information leakage and the like as the authorization in the system is given to other users for use, and the problems of the system using responsibility, the user information leakage and the like can be effectively avoided.

Description

A kind ofly realize by empowerment management the implementation method that third party manages on behalf of another system

Technical field

The present invention relates to and a kind ofly realize by empowerment management the implementation method that third party manages on behalf of another system.The invention belongs to field of computer technology.

Background technology

Along with informationalized development, Computer Applied Technology has penetrated into often goes in every industry, due to the difference that System Privileges distributes, the role that each user is taken in systems in which is also different, the authority having operation is also different, in some cases (as employee goes on business, has a holiday), own user authority may be needed to allow other user temporarily on behalf of management.But easily be there is a lot of problem directly to the way of another person in user account number, such as, user profile all will inevitably be leaked user account to another people; New user is when the system of use, and data in system are got wrong by misoperation, can bring unnecessary trouble, even have larger loss to unit, and after causing damage, responsibility is indefinite.

Summary of the invention

To use thus the problems such as the responsibility brought is indefinite, user profile leakage to other user authority for this in system, this method achieves and a kind ofly realizes by empowerment management the implementation method that third party manages on behalf of another system, effectively can evade this system and use the problem such as responsibility and user profile leakage, meet the typing operational requirements of relation of inclusion business datum closely simultaneously.Concrete steps are as follows:

Step 1: delegation.After logging in system by user, selection " delegation " function can be clicked, select the people that will require to entrust, preserve.

Step 2: daily record entrusted by system log (SYSLOG).Clientage is when carrying out delegation, and system can entrust daily record by record automatically, mainly comprises the information such as clientage, mandatory, trust time.

Step 3: mandatory uses system.After the Account login system of mandatory with oneself, before can seeing, there is no the partial function of authority, every data manipulation can be carried out according to actual needs.

Step 4: system log (SYSLOG) Operation Log.System according to mandatory's practical operation record Operation Log, can comprise the information such as operator, running time, complete operation.

System is by by authority directly " transfer ", and all operation of user will leave system journal, can carry out responsibility in this way and evade.

Embodiment

Embodiment one

Use MyEclipse 8.6 as developing instrument, use special database management tools MySQL on market to set up the database required for system.

1. system manager is to user A(clientage), B(mandatory) authorize, ensure that these two users have different authorities.

2. under special circumstances, party A-subscriber login system can click " delegation " by the delegation of self to user B.

3. the Operation Log of system log (SYSLOG) scope of authority, comprises the information such as clientage, mandatory, trust time.

4. user B login system, can use all systemic-functions that user A entrusts.

5. the Operation Log that system records user B is all.Comprise the information such as operator, running time, complete operation.

In addition to the implementation, the present invention can also have other embodiments.All employings are equal to the technical scheme of replacement or equivalent transformation formation, all drop on the protection domain of application claims.

Claims (5)

1. system manager is to user A(clientage), B(mandatory) authorize, ensure that these two users have different authorities.

2. under special circumstances, party A-subscriber login system can click " delegation " by the delegation of self to user B.

3. the Operation Log of system log (SYSLOG) scope of authority, comprises the information such as clientage, mandatory, trust time.

4. user B login system, can use all systemic-functions that user A entrusts.

5. the Operation Log that system records user B is all; Comprise the information such as operator, running time, complete operation.