CN107122381B - File generation method and device and data analysis method and device - Google Patents

Abstract

Embodiments of the present invention provide a file generation method and device, a data analysis method and device, and a mobile terminal, which relate to the technical field of computer applications. Wherein, the file generation method includes: acquiring a file template; determining a user authority based on a user identifier; and generating a file according to the file template and the user authority. The technical solution provided by the embodiments of the present invention determines the user authority in the file by using the user identifier, so that customized files can be generated in a targeted manner to implement personalized authority constraints, thereby improving user experience.

Description

File generation method and device and data analysis method and device

technical field

The present invention relates to the technical field of computer applications, and more particularly, to a file generation method and device, a data analysis method and device, and a mobile terminal.

Background technique

On-Line Analytical Processing (OLAP) is the main application of data warehouse systems, supporting complex analytical operations, focusing on decision support, and providing intuitive and easy-to-understand query results. In the scenario of big data analysis, OLAP is one of the important ways of data analysis.

In OLAP usage scenarios, permissions are supported for resources to ensure information security. However, the schema (schema) file used to obtain user permissions in OLAP is currently a static file (the same for all users), so the permission constraints provided to users are relatively static and cannot be performed for different users. Customized permission constraints, thus reducing the user experience.

SUMMARY OF THE INVENTION

The embodiments of the present invention provide a file generation method and device, a data analysis method and device, and a mobile terminal to solve the problem of the prior art that cannot be customized for different users, thereby reducing the user experience.

In a first aspect, an embodiment of the present invention provides a file generation method.

Specifically, the method includes:

Get file template;

Determining user rights based on the user identifier;

A file is generated according to the file template and the user rights.

Since in the present invention, the user's authority in the file is determined by the user identifier, a customized file can be generated in a targeted manner, so as to realize the personalized authority constraint, thereby improving the user experience.

With reference to the first aspect, in some implementations of the present invention, the determining the user authority based on the user identifier includes:

obtain a permission model according to the user identifier;

The user rights are determined according to the rights model.

With reference to the first aspect, in some implementations of the present invention, the generating a file according to the file template and the user authority includes:

Identifying, from the file template, a label template that matches the authority name of the user authority;

Judging whether the number of label templates is equal to the number of elements in the permission value set in the user permission;

If the number of the label templates is equal to the number of elements, in the file template, different elements in the permission value set are used to perform placeholder replacement processing on the different label templates respectively.

With reference to the first aspect, in some implementations of the present invention, the generating a file according to the file template and the user authority further includes:

If the number of the label templates is not equal to the number of elements, different replacement labels are generated respectively through the label templates and different elements in the permission value set;

In the document template, the tag template is deleted and the replacement tag is inserted.

In a second aspect, an embodiment of the present invention provides a data analysis method.

Specifically, the method includes:

Load the file generated according to any of the above file generation methods based on the data analysis request;

obtain user rights from said file;

Data analysis processing is performed according to the data analysis request and the user authority.

With reference to the second aspect, in some implementations of the present invention, the performing data analysis processing according to the data analysis request and the user authority includes:

generating a database query request according to the data analysis request;

Filter the database query request by using the user authority;

Read data from the database based on the filtered database query request;

Analytical processing is performed on the data.

Since in the present invention, the data filtering process is performed before querying the database, the pressure on the database can be reduced and the coverage rate of authority control can also be improved.

In a third aspect, an embodiment of the present invention provides an apparatus for generating a file.

Specifically, the device includes:

Get module, used to get file template;

a determination module for determining user rights based on the user identifier;

A generating module, configured to generate a file according to the file template and the user authority.

Since in the present invention, the user's authority in the file is determined by the user identifier, a customized file can be generated in a targeted manner, so as to realize the personalized authority constraint, thereby improving the user experience.

With reference to the third aspect, in some implementations of the present invention, the determining module includes:

an obtaining unit, configured to obtain a permission model according to the user identifier;

A determining unit, configured to determine the user authority according to the authority model.

With reference to the third aspect, in some implementations of the present invention, the generating module includes:

an identification unit for identifying, from the file template, a label template matching the authority name of the user authority;

a judging unit for judging whether the number of the label templates is equal to the number of elements in the permission value set in the user permission;

a replacement unit, configured to use different elements in the permission value set in the file template to occupy places for different label templates respectively under the condition that the number of the label templates is equal to the number of elements Character replacement processing.

In conjunction with the third aspect, in some implementations of the present invention, the generating module further includes:

A generating unit, configured to respectively generate different replacement labels through the label template and different elements in the permission value set when the number of the label templates is not equal to the number of elements;

A deletion and insertion unit is used in the document template to delete the label template and insert the replacement label.

In a fourth aspect, an embodiment of the present invention provides a data analysis device.

Specifically, the device includes:

a loading module for loading the file generated according to any one of the above file generating methods based on the data analysis request;

an acquisition module for acquiring user permissions from the file;

A processing module, configured to perform data analysis processing according to the data analysis request and the user authority.

With reference to the fourth aspect, in some implementations of the present invention, the processing module includes:

a generating unit, configured to generate a database query request according to the data analysis request;

a filtering unit, configured to filter the database query request by using the user authority;

a reading unit for reading data from the database based on the filtered database query request;

a processing unit for performing analysis processing on the data.

Since in the present invention, the data filtering process is performed before querying the database, the pressure on the database can be reduced and the coverage rate of authority control can also be improved.

In a fifth aspect, an embodiment of the present invention provides a mobile terminal, where the mobile terminal includes a memory and a processor; wherein,

The memory is used to store one or more computer instructions, wherein the one or more computer instructions are invoked and executed by the processor;

The processor is configured to perform the operations described in any one of the above-mentioned file generation methods or any of the above-mentioned data analysis methods.

These and other aspects of the invention will be more clearly understood from the following description of the detailed description.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present invention more clearly, the following briefly introduces the accompanying drawings used in the description of the embodiments. Obviously, the drawings in the following description are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without any creative effort.

Fig. 1 is a flow chart of a file generation method according to method embodiment 1 of the present invention;

Fig. 2 shows an embodiment of the process S12 shown in Fig. 1;

Fig. 3 shows the architecture diagram of RBAC (Role-Based Access Control, role-based access control) model;

FIG. 4 shows an embodiment of the process S13 shown in FIG. 1;

5 is a flowchart of a data analysis method according to Embodiment 4 of the method of the present invention;

Fig. 6 shows an embodiment of the process S21 shown in Fig. 5;

Fig. 7 shows an embodiment of the process S23 shown in Fig. 5;

8 is a schematic structural diagram of a file generating apparatus according to Embodiment 1 of the apparatus of the present invention;

Fig. 9 shows an embodiment of the determination module 12 shown in Fig. 8;

Fig. 10 shows an embodiment of the generation module 13 shown in Fig. 8;

11 is a schematic structural diagram of a data analysis device according to Embodiment 4 of the device of the present invention;

Fig. 12 shows an embodiment of the loading module 21 shown in Fig. 11;

FIG. 13 shows an embodiment of the processing module 23 shown in FIG. 11 .

Detailed ways

Various aspects of the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. Wherein, in various specific embodiments of the present invention, well-known operation procedures, modules, units and their mutual connections, links, communications or operations are not shown or described in detail.

Also, the described features, architectures, or functions may be combined in any way in one or more embodiments.

In addition, those skilled in the art should understand that the following various embodiments are only used for illustration, but not for limiting the protection scope of the present invention. Those skilled in the art can also easily understand that the modules or units or steps in the various embodiments described herein and shown in the accompanying drawings can be combined and designed in many different configurations.

For technical terms that are not specifically described in this specification, unless otherwise specified, they should be interpreted with the broadest meaning in the art.

In some of the processes described in the description and claims of the present invention and the above-mentioned drawings, various operations are included in a specific order, but it should be clearly understood that these operations may not be in accordance with the order in which they appear herein. For execution or parallel execution, the sequence numbers of the operations, such as 101, 102, etc., are only used to distinguish different operations, and the sequence numbers themselves do not represent any execution order. Additionally, these flows may include more or fewer operations, and these operations may be performed sequentially or in parallel. It should be noted that the descriptions such as "first" and "second" in this document are used to distinguish different messages, devices, modules, etc., and do not represent a sequence, nor do they limit "first" and "second" are different types.

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative efforts shall fall within the protection scope of the present invention.

[Method Embodiment 1]

FIG. 1 is a flow chart of a file generation method according to Embodiment 1 of the method of the present invention. Referring to FIG. 1, in this embodiment, the method includes:

S11: Obtain a file template.

S12: Determine user authority based on the user identifier.

S13: Generate a file according to the file template and the user authority.

In the present invention, the user identifier includes, but is not limited to, identification information such as a user number, a user mailbox, and the like. The user rights include, but are not limited to, rights names and rights value sets, for example. Among them, the permission name is used to indicate which resources the user performs access control on, and the permission value set is used to indicate the specific resources that the user has the ability to access. For example, the permission name is: CITY (city), and the permission value set is: {Shanghai, Beijing ,Shenyang}.

Since in the present invention, the user's authority in the file is determined by the user identifier, a customized file can be generated in a targeted manner, so as to realize the personalized authority constraint, thereby improving the user experience.

[Method Embodiment 2]

The method provided in this embodiment includes all the contents in the method embodiment 1, and details are not repeated here. Wherein, as shown in FIG. 2 , in this embodiment, the process S12 is implemented in the following manner:

S121: Acquire an authority model according to the user identifier.

S122: Determine the user authority according to the authority model.

In the present invention, the permission model includes, but is not limited to, a "user-permission" model and a "user-role-permission" model, for example.

Among them, the "user-authority" model is a model that directly associates users and authorities; and the "user-role-authority" model is a model that associates users and authorities through roles, also known as the RBAC model.

Figure 3 shows the architecture diagram of the RBAC model. It should be noted that 1 in Figure 3...? , 1…* represents the number of mappings between the head of the arrow and the tail of the arrow. Among them, 1...? Indicates that there is at least 1 arrow head and arrow tail; 1...* means that there are at least 0 arrow heads and at least 1 arrow tail. For example, between users and roles, users have at least one role.

[Method Embodiment 3]

The method provided in this embodiment includes all the contents of the method embodiment 1 or the method embodiment 2, and details are not repeated here. Among them, as shown in FIG. 4 , in this embodiment, the process S13 is implemented in the following manner:

S131: Identify, from the file template, a label template matching the authority name of the user authority.

S132: Determine whether the number of label templates is equal to the number of elements in the permission value set in the user permission. If yes, execute S133, if not, execute S134.

S133: In the file template, use different elements in the permission value set to perform placeholder replacement processing on different label templates respectively.

S134: Generate different replacement labels respectively by using the label template and different elements in the permission value set.

S135: In the document template, delete the label template and insert the replacement label.

In the present invention, placeholder replacement processing refers to replacing a placeholder (a character string starting with @ and ending with @) with specified content.

[Method Embodiment 4]

FIG. 5 is a flowchart of a data analysis method according to Embodiment 4 of the method of the present invention. Referring to FIG. 5, in this embodiment, the method includes:

S21: Load the file based on the data analysis request.

Wherein, the file is generated according to the method provided in any one of the method embodiments 1 to 3.

S22: Obtain user rights from the file.

S23: Execute data analysis processing according to the data analysis request and the user authority.

[Method Embodiment 5]

The method provided in this embodiment includes all the content in the method embodiment 4, and details are not repeated here. Among them, as shown in FIG. 6 , in this embodiment, the process S21 is implemented in the following manner:

S211: Parse the user identifier from the data analysis request.

S212: Load the file according to the user identifier.

[Method Embodiment 6]

The method provided in this embodiment includes all the contents of the method embodiment 4 or the method embodiment 5, and details are not repeated here. Wherein, as shown in FIG. 7 , in this embodiment, the process S23 is implemented in the following manner:

S231: Generate a database query request according to the data analysis request.

S232: Filter the database query request by using the user authority.

S233: Read data from the database based on the filtered database query request.

S234: Perform analysis processing on the data.

Since in the present invention, the data filtering process is performed before querying the database, the pressure on the database can be reduced and the coverage rate of authority control can also be improved.

[Method Embodiment 7]

The file generation method provided by this embodiment is described below by taking an OLAP scenario as an example. The method includes:

Process 1: The OLAP service passes the user identifier to the dynamic processing service (hereinafter referred to as service S).

Process 2: The service S sends the user identifier to the user resource list service to request user permission, and reads the corresponding schema file template.

Process 3: After obtaining the user identifier, the user resource list service obtains the user permission based on the RBAC permission model, and returns the user permission in the form of MAP(K, V) (name-value pair).

Among them, K is the permission name, and V is the permission value set.

Process 4: The service S generates a schema file according to the schema file template and user permissions.

The specific implementation process of processing 4 will be described in detail below with reference to the accompanying drawings.

Perform the following processing for each acquired user authority:

A. Identify the label template matching the permission name of the user permission from the schema file template.

B. Determine whether the number of label templates is equal to the number of elements in the permission value set in the user permission. If yes, execute C, if not, execute D.

C. In the file template, use different elements in the permission value set to perform placeholder replacement processing on different label templates respectively.

D. Different replacement labels are respectively generated through the label template and different elements in the permission value set, and, in the file template, the label template is deleted and the replacement label is inserted.

A partial example of a schema file template is given below:

Take the user authority with K as DYNAMIC_CITY as an example. In the schema file template above, the label template that matches the permission name of the user permission is:

<MemberGrant member="[City Role.Default].[City].[@

DYNAMIC_CITY@]”access="all”></MemberGrant>

The number of this label template is 1. If the V of the user permission is {Beijing}, and the number of elements is also 1, then directly replace the placeholder "@DYNAMIC_CITY@" in the label template with "Beijing".

If the V of the user authority is {Shanghai, Beijing, Shenyang}, and the number of elements is 3, use the tag template and different elements in V to generate different replacement tags, for example, the generated replacement tags are:

1. <MemberGrant member=”[City Role.Default].[City].[Shanghai]” access=”all”> </MemberGrant>

2. <MemberGrant member="[City Role.Default].[City].[Beijing]" access="all"> </MemberGrant>

3. <MemberGrant member="[City Role.Default].[City].[Shenyang]" access="all"> </MemberGrant>

Insert the generated replacement tag into the schema file template where the tag template is located, and delete the tag template. Therefore, the contents of the original schema file template:

<HierarchyGrant hierarchy=”[City Role.Default]”rollupPolicy=”partial” access=”custom”>

<MemberGrant member=”[City Role.Default].[City].[@DYNAMIC_CITY@]” access=”all”>

</MemberGrant>

</HierarchyGrant>

become:

<HierarchyGrant hierarchy=”[City Role.Default]”rollupPolicy=”partial” access=”custom”>

<MemberGrant member="[City Role.Default].[City].[Shanghai]" access="all">

</MemberGrant>

<MemberGrant member="[City Role.Default].[City].[Beijing]" access="all">

</MemberGrant>

<MemberGrant member="[City Role.Default].[City].[Shenyang]" access="all">

</MemberGrant>

</HierarchyGrant>

[Method Embodiment 8]

The data analysis method provided by this embodiment is described below by taking an OLAP scenario as an example. The method includes:

Process 1: The client sends a data analysis request to the OLAP service.

Process 2: The OLAP service parses the user identifier from the received data analysis request.

Process 3: The OLAP service loads the schema file according to the parsed user identifier.

The schema file is a customized file generated according to the user identifier (for the specific generation method, please refer to the aforementioned file generation method, which will not be repeated here). In addition, if the schema file has already been generated, it will not be generated again, but when the user permissions are changed, the original schema file needs to be cleaned up and a new schema file is generated according to the changed user permissions.

Process 4: The OLAP service obtains user permissions from the loaded schema file.

Process 5: The OLAP service generates a database query request according to the received data analysis request.

Process 6: The OLAP service uses the acquired user authority to filter the generated database query request.

Process 7: The OLAP service sends the filtered database query request to the data warehouse.

Process 8: The data warehouse performs query processing after receiving the database query request, and feeds back the queried data to the OLAP service.

Process 9: The OLAP service performs analysis processing on the data fed back by the data warehouse according to the received data analysis request, and feeds back the processing result to the client.

The analysis processing includes, but is not limited to, drilling, slicing, and dicing, for example.

Since in the present invention, the data filtering process is performed before querying the database, the pressure on the database can be reduced and the coverage rate of authority control can also be improved.

[Apparatus Embodiment 1]

FIG. 8 is a schematic structural diagram of a file generating apparatus according to Embodiment 1 of the apparatus of the present invention. Referring to FIG. 8, the file generation apparatus 1 includes: an acquisition module 11, a determination module 12, and a generation module 13, specifically:

The obtaining module 11 is used to obtain the file template.

The determination module 12 is used to determine user rights based on the user identifier.

The generating module 13 is configured to generate a file according to the file template acquired by the acquiring module 11 and the user authority determined by the determining module 12 .

In the present invention, the user identifier includes, but is not limited to, identification information such as a user number, a user mailbox, and the like. The user rights include, but are not limited to, rights names and rights value sets, for example. Among them, the permission name is used to indicate which resources the user performs access control on, and the permission value set is used to indicate the specific resources that the user has the ability to access. For example, the permission name is: CITY (city), and the permission value set is: {Shanghai, Beijing ,Shenyang}.

Since in the present invention, the user's authority in the file is determined by the user identifier, a customized file can be generated in a targeted manner, so as to realize the personalized authority constraint, thereby improving the user experience.

[Apparatus Embodiment 2]

The apparatus provided in this embodiment includes all the contents of the apparatus in Embodiment 1, and details are not repeated here. Wherein, as shown in Figure 9, in this embodiment, the determination module 12 includes: an acquisition unit 121 and a determination unit 122, specifically:

The obtaining unit 121 is configured to obtain the permission model according to the user identifier.

The determining unit 122 is configured to determine the user permission according to the permission model acquired by the acquiring unit 121 .

In the present invention, the permission model includes, but is not limited to, a "user-permission" model and a "user-role-permission" model, for example.

Among them, the "user-authority" model is a model that directly associates users and authorities; and the "user-role-authority" model is a model that associates users and authorities through roles, also known as the RBAC model.

[Apparatus Embodiment 3]

The apparatus provided in this embodiment includes all the contents of the apparatus embodiment 1 or the apparatus embodiment 2, and details are not described herein again. Wherein, as shown in FIG. 10, in this embodiment, the generation module 13 includes: an identification unit 131, a judgment unit 132, a replacement unit 133, a generation unit 134, and a deletion and insertion unit 135, specifically:

The identifying unit 131 is configured to identify, from the file template, a label template matching the authority name of the user authority.

The judging unit 132 is configured to judge whether the number of label templates identified by the identifying unit 131 is equal to the number of elements of the permission value set in the user permission.

The replacement unit 133 is configured to, in the file template, use different elements in the permission value set, respectively, for the different label templates in the case where the determination unit 132 determines that the number of label templates is equal to the number of elements. Perform placeholder replacement processing.

The generating unit 134 is configured to respectively generate different replacement labels by using the label template and different elements in the permission value set when the judging unit 132 determines that the number of label templates is not equal to the number of elements.

The deletion and insertion unit 135 is used in the document template to delete the label template and insert the replacement label generated by the generation unit 134 .

In the present invention, placeholder replacement processing refers to replacing a placeholder (a character string starting with @ and ending with @) with specified content.

[Apparatus Embodiment 4]

FIG. 11 is a schematic structural diagram of a data analysis apparatus according to Embodiment 4 of the apparatus of the present invention. 11, the data analysis device 2 includes: a loading module 21, an acquisition module 22, and a processing module 23, specifically:

The loading module 21 is used to load the file based on the data analysis request.

Wherein, the file is generated according to the method described in any one of method embodiments 1 to 3.

The obtaining module 22 is used to obtain the user authority from the file loaded by the loading module 21 .

The processing module 23 is configured to perform data analysis processing according to the data analysis request and the user authority obtained by the obtaining module 22 .

[Apparatus Embodiment 5]

The device provided in this embodiment includes all the contents in the device embodiment 4, and details are not repeated here. Among them, as shown in FIG. 12, in this embodiment, the loading module 21 includes: a parsing unit 211 and a loading unit 212, specifically:

The parsing unit 211 is configured to parse out the user identifier from the data analysis request.

The loading unit 212 is configured to load the file according to the user identifier parsed by the parsing unit 211 .

[Apparatus Embodiment 6]

The apparatus provided in this embodiment includes all the contents of the apparatus embodiment 4 or the apparatus embodiment 5, and details are not described herein again. Wherein, as shown in Figure 13, in this embodiment, the processing module 23 includes: a generating unit 231, a filtering unit 232, a reading unit 233, and a processing unit 234, specifically:

The generating unit 231 is configured to generate a database query request according to the data analysis request.

The filtering unit 232 is configured to filter the database query request generated by the generating unit 231 by using the user authority.

The reading unit 233 is configured to read data from the database based on the database query request filtered by the filtering unit 232 .

The processing unit 234 is configured to perform analysis processing on the data read by the reading unit 233 .

Since in the present invention, the data filtering process is performed before querying the database, the pressure on the database can be reduced and the coverage rate of authority control can also be improved.

Embodiments of the present invention also provide a mobile terminal, including a memory and a processor; wherein,

The memory is used to store one or more computer instructions, wherein the one or more computer instructions are invoked and executed by the processor;

The processor is configured to perform the operations described in any one of method embodiment 1 to method embodiment 8.

In addition, an embodiment of the present invention also provides a computer storage medium, the computer storage medium stores one or more computer instructions, when the one or more computer instructions are executed by one or more devices, the one or more computer instructions cause the The device performs the operation described in any one of method embodiment 1 to method embodiment 8.

Those skilled in the art can clearly understand that the present invention can be implemented entirely by software, and can also be implemented by means of software combined with a hardware platform. Based on this understanding, all or part of the technical solutions of the present invention that contribute to the background technology can be embodied in the form of software products, and the computer software products can be stored in storage media, such as ROM/RAM, magnetic disks, optical disks etc., including several instructions for causing a computer device (which may be a personal computer, a server, a smart phone or a network device, etc.) to perform the methods described in various embodiments or some parts of the embodiments of the present invention.

As used herein, terms such as "software" refer generally to any type of computer code or set of computer-executable instructions that can be executed to program a computer or other processor to perform the operations described above. various aspects of the technical solutions of the present invention. In addition, it should be noted that, according to an aspect of the embodiment, one or more computer programs that implement the method of the technical solution of the present invention when executed do not necessarily need to be on one computer or processor, but can be distributed over multiple modules in a computer or processor to execute various aspects of the technical solutions of the present invention.

Computer-executable instructions can take many forms, such as program modules, that can be executed by one or more computers or other devices. Generally, program modules include routines, programs, objects, components, and data structures, etc., that perform particular tasks or implement particular abstract data types. In particular, in various implementations, the functions of the program modules may be combined or split according to the needs of various implementations.

Also, the technical solution of the present invention may be embodied as a method, and at least one example of the method has been provided. Actions may be performed in any suitable order as part of the described method. Accordingly, embodiments may be constructed such that acts may be performed in an order different from that shown, which may include performing some of the acts concurrently (although in the illustrated embodiment, the acts are sequential).

Definitions, given and used herein, should be read against definitions in dictionaries, documents incorporated by reference, and/or their ordinary meanings.

In the claims as well as in the above description, all transitional phrases such as "comprising", "having", "comprising", "bearing", "having", "involving", "consisting essentially of" and similar words is to be understood as open ended, ie, including but not limited to. Only "consisting of" should be a closed or semi-closed over phrase.

The terms and phraseology used in the specification of the present invention are for the purpose of illustration only and not limitation. It will be understood by those skilled in the art that various changes may be made in the details of the above-described embodiments without departing from the basic principles of the disclosed embodiments. Therefore, the scope of the invention is to be determined only by the appended claims, in which all terms are to be interpreted in their broadest reasonable meaning unless otherwise specified.

The invention discloses A1, a file generation method, comprising:

Get file template;

Determining user rights based on the user identifier;

A file is generated according to the file template and the user rights.

A2. In the method of A1, the determining the user authority based on the user identifier includes:

obtain a permission model according to the user identifier;

The user rights are determined according to the rights model.

A3. In the method according to A1 or A2, the generating the file according to the file template and the user authority includes:

Identifying, from the file template, a label template that matches the authority name of the user authority;

Judging whether the number of label templates is equal to the number of elements in the permission value set in the user permission;

If the number of the label templates is equal to the number of elements, in the file template, different elements in the permission value set are used to perform placeholder replacement processing on the different label templates respectively.

A4. In the method according to A3, the generating the file according to the file template and the user authority further includes:

If the number of the label templates is not equal to the number of elements, different replacement labels are generated respectively through the label templates and different elements in the permission value set;

In the document template, the tag template is deleted and the replacement tag is inserted.

The present invention also discloses A5, a data analysis method, comprising:

Load the file generated according to the method of any one of A1 to A4 based on the data analysis request;

obtain user rights from said file;

Data analysis processing is performed according to the data analysis request and the user authority.

A6. In the method according to A5, the performing data analysis processing according to the data analysis request and the user authority includes:

generating a database query request according to the data analysis request;

Filter the database query request by using the user authority;

Read data from the database based on the filtered database query request;

Analytical processing is performed on the data.

The invention also discloses B7, a file generation device, comprising:

Get module, used to get file template;

a determination module for determining user rights based on the user identifier;

A generating module, configured to generate a file according to the file template and the user authority.

B8. In the device according to B7, the determining module includes:

an obtaining unit, configured to obtain a permission model according to the user identifier;

A determining unit, configured to determine the user authority according to the authority model.

B9. In the device according to B7 or B8, the generating module includes:

an identification unit for identifying, from the file template, a label template matching the authority name of the user authority;

a judging unit for judging whether the number of the label templates is equal to the number of elements in the permission value set in the user permission;

a replacement unit, configured to use different elements in the permission value set in the file template to occupy places for different label templates respectively under the condition that the number of the label templates is equal to the number of elements Character replacement processing.

B10. In the device according to B9, the generating module further includes:

A generating unit, configured to respectively generate different replacement labels through the label template and different elements in the permission value set when the number of the label templates is not equal to the number of elements;

A deletion and insertion unit is used in the document template to delete the label template and insert the replacement label.

The present invention discloses B11, a data analysis device, comprising:

A loading module for loading the file generated by the method according to any one of A1 to A4 based on the data analysis request;

an acquisition module for acquiring user permissions from the file;

A processing module, configured to perform data analysis processing according to the data analysis request and the user authority.

B12. In the device according to B11, the processing module includes:

a generating unit, configured to generate a database query request according to the data analysis request;

a filtering unit, configured to filter the database query request by using the user authority;

a reading unit for reading data from the database based on the filtered database query request;

a processing unit for performing analysis processing on the data.

The present invention also discloses C13, a mobile terminal, comprising a memory and a processor; wherein,

The memory is used to store one or more computer instructions, wherein the one or more computer instructions are invoked and executed by the processor;

The processor is configured to perform operations as described in any one of A1 to A6.

Claims (11)

1. a file generation method, is characterized in that, described method is applied to the online analytical processing OLAP service in data warehouse system, described method comprises: Get the schema file template; The user identifier of the user is parsed from the data analysis request of the client, and the user authority is determined based on the user identifier; A schema file is generated according to the schema file template and the user authority, and the schema file is used for the OLAP service to respond to the user's data analysis request according to the user authority in the schema file, Filter database query requests generated from data analysis requests; Wherein, the generating the schema file according to the schema file template and the user authority includes: Identifying, from the schema file template, a label template that matches the permission name of the user permission; Judging whether the number of label templates is equal to the number of elements in the permission value set in the user permission; If the number of the label templates is equal to the number of elements, in the schema file template, different elements in the permission value set are used to perform placeholder replacement processing on the different label templates respectively. 2. The method of claim 1, wherein the determining the user authority based on the user identifier comprises: obtain a permission model according to the user identifier; The user rights are determined according to the rights model. 3. The method according to claim 1, wherein the generating the schema file according to the schema file template and the user authority further comprises: If the number of the label templates is not equal to the number of elements, different replacement labels are generated respectively through the label templates and different elements in the permission value set; In the schema file template, delete the tag template and insert the replacement tag. 4. A data analysis method, characterized in that the method comprises: Load the schema file generated by the method according to any one of claims 1 to 3 based on the data analysis request; Obtain user permissions from the schema file; Data analysis processing is performed according to the data analysis request and the user authority. 5. The method of claim 4, wherein the performing data analysis processing according to the data analysis request and the user authority comprises: generating a database query request according to the data analysis request; Filter the database query request by using the user authority; Read data from the database based on the filtered database query request; Analytical processing is performed on the data. 6. A file generation device, characterized in that the device is applied to an online analytical processing OLAP service in a data warehouse system, the device comprising: Get module, used to get schema file template; A determination module, configured to parse out the user identifier of the user from the data analysis request of the client, and determine the user authority based on the user identifier; A generation module, configured to generate a schema file according to the schema file template and the user authority, and the schema file is used for the OLAP service to respond to the user's data analysis request according to the user authority in the schema file. , filtering the database query request generated based on the data analysis request; Wherein, the generation module includes: an identification unit, configured to identify, from the schema file template, a label template matching the authority name of the user authority; a judging unit for judging whether the number of the label templates is equal to the number of elements in the permission value set in the user permission; The replacement unit is configured to, in the schema file template, use different elements in the permission value set to occupy different label templates respectively when the number of the label templates is equal to the number of elements. Bit character replacement processing. 7. The apparatus of claim 6, wherein the determining module comprises: an obtaining unit, configured to obtain a permission model according to the user identifier; A determining unit, configured to determine the user authority according to the authority model. 8. The apparatus of claim 6, wherein the generating module further comprises: A generating unit, configured to respectively generate different replacement labels through the label template and different elements in the permission value set when the number of the label templates is not equal to the number of elements; A deletion and insertion unit, used in the schema file template, deletes the tag template and inserts the replacement tag. 9. A data analysis device, characterized in that the device comprises: A loading module for loading a schema file generated by the method according to any one of claims 1 to 3 based on a data analysis request; Get a module for obtaining user permissions from the schema file; A processing module, configured to perform data analysis processing according to the data analysis request and the user authority. 10. The apparatus of claim 9, wherein the processing module comprises: a generating unit, configured to generate a database query request according to the data analysis request; a filtering unit, configured to filter the database query request by using the user authority; a reading unit for reading data from the database based on the filtered database query request; a processing unit for performing analysis processing on the data. 11. A mobile terminal, characterized in that the mobile terminal comprises a memory and a processor; wherein, The memory is used to store one or more computer instructions, wherein the one or more computer instructions are invoked and executed by the processor; The processor is adapted to perform the method of any one of claims 1 to 5.

Images