CN111552691A - Access right control method and device for power grid model data - Google Patents

Access right control method and device for power grid model data Download PDF

Info

Publication number
CN111552691A
CN111552691A CN202010285601.7A CN202010285601A CN111552691A CN 111552691 A CN111552691 A CN 111552691A CN 202010285601 A CN202010285601 A CN 202010285601A CN 111552691 A CN111552691 A CN 111552691A
Authority
CN
China
Prior art keywords
model data
retrieval
power grid
model
user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202010285601.7A
Other languages
Chinese (zh)
Inventor
宋奇兵
季惠英
余璟
季学纯
周玲
杨立波
吴海伟
张刘冬
彭晖
孙云枫
薛驰
马斌
李一鹏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
State Grid Corp of China SGCC
State Grid Jiangsu Electric Power Co Ltd
NARI Group Corp
Nari Technology Co Ltd
NARI Nanjing Control System Co Ltd
State Grid Electric Power Research Institute
Original Assignee
State Grid Corp of China SGCC
State Grid Jiangsu Electric Power Co Ltd
NARI Group Corp
Nari Technology Co Ltd
NARI Nanjing Control System Co Ltd
State Grid Electric Power Research Institute
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by State Grid Corp of China SGCC, State Grid Jiangsu Electric Power Co Ltd, NARI Group Corp, Nari Technology Co Ltd, NARI Nanjing Control System Co Ltd, State Grid Electric Power Research Institute filed Critical State Grid Corp of China SGCC
Priority to CN202010285601.7A priority Critical patent/CN111552691A/en
Publication of CN111552691A publication Critical patent/CN111552691A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/24Querying
    • G06F16/242Query formulation
    • G06F16/2433Query languages
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/22Indexing; Data structures therefor; Storage structures
    • G06F16/2228Indexing structures
    • G06F16/2246Trees, e.g. B+trees
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/24Querying
    • G06F16/245Query processing
    • G06F16/2455Query execution
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Databases & Information Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computational Linguistics (AREA)
  • Computer Hardware Design (AREA)
  • Mathematical Physics (AREA)
  • Storage Device Security (AREA)

Abstract

The invention discloses a method and a device for controlling access authority of power grid model data, wherein the method comprises the steps of setting a retrieval path of the model data in a power grid model data table according to the physical significance of each field of the power grid model data table; constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of retrieval fields in a power grid model data table, and leaf nodes of the model retrieval tree are end model data nodes and are used for storing the model data; and setting the access authority of each layer of the model retrieval tree or the terminal model data node to each user, and controlling the access authority of the user to the terminal model data node by using the set user access authority. The method and the device can realize accurate access authority of the user to the power grid model data.

Description

Access right control method and device for power grid model data
Technical Field
The invention belongs to the field of power grid dispatching automation, and particularly relates to a power grid model data access authority control method and device.
Background
In order to realize access authority control on power grid model data in a traditional power grid dispatching automation system, the whole model data is divided into a plurality of responsibility areas, and each dispatching personnel can only manage the model data of the own responsibility area.
Disclosure of Invention
In view of this, an object of the present application is to provide a method and an apparatus for controlling access permissions of power grid model data, so as to implement accurate permission control on fine granularity of the model data.
In a first aspect of embodiments of the present application, a method for controlling access rights to grid model data is provided. For example, the method may include:
setting a retrieval path of model data in the power grid model data table according to the physical significance of each field of the power grid model data table;
constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of retrieval fields in a power grid model data table, and leaf nodes of the model retrieval tree are end model data nodes and are used for storing the model data;
and setting the access authority of each layer of the model retrieval tree or the terminal model data node to each user, and controlling the access authority of the user to the terminal model data node by using the set user access authority.
In a second aspect of the embodiments of the present application, there is provided an apparatus for controlling access rights to grid model data, for example, the apparatus may include:
the retrieval path determining unit is used for setting a retrieval path of the model data in the power grid model data table according to the physical significance of each field of the power grid model data table;
the model retrieval tree construction unit is used for constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of a retrieval field in a power grid model data table, and leaf nodes of the model retrieval tree are tail end model data nodes and are used for storing the model data;
the access authority setting unit is used for setting the access authority of each layer of retrieval nodes or tail end model data nodes of the model retrieval tree to each user;
and the authority identification control unit is used for controlling the access authority of the user to the terminal model data node by using the set user access authority.
The application has the following beneficial effects:
the method and the device have the advantages that the retrieval path of the model is abstracted according to the physical significance of each field of the model table, the field of the model table corresponding to each layer of retrieval node is definite, the grouping value of the retrieval field in the model table is obtained through a grouping query mode from the first layer of retrieval node to form the model retrieval tree, the access authority of a user to each layer of retrieval nodes or tail end model data nodes on the retrieval tree is set, and the accurate access authority of the user to the power grid model data can be realized.
According to the method and the device, whether the access authority of the user to the model data node is set or not is judged, the access authority is obtained if the access authority is set, otherwise, the retrieval node which is closest to the user and is set with the access authority is searched from the retrieval path of the retrieval node, the access authority is obtained and used as the access authority of the model data node, the shortest distance relay is convenient to set the access authority of the user to a huge number of records in the model data table, and the efficiency is improved.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below, it is obvious that the drawings in the following description are only some embodiments described in the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without any creative effort.
Fig. 1 is a schematic flow chart of a process of drawing a model retrieval tree and defining rights of a power grid model data access rights control method according to an embodiment of the present application;
fig. 2 is a schematic view illustrating authority definition of an access authority control method for power grid model data according to an embodiment of the present application;
fig. 3 is a schematic flowchart of a method for controlling access rights to power grid model data according to another embodiment of the present application.
Detailed Description
In order to make those skilled in the art better understand the technical solutions in the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
For example, in the first embodiment, referring to fig. 1, a schematic flow chart of a method for controlling access rights to power grid model data provided in the first embodiment of the present application is shown. As shown in fig. 1, the method may include:
the method comprises the following steps: and setting a retrieval path of the model data in the power grid model data table according to the physical significance of each field of the power grid model data table. In the step, a retrieval path of the model data is abstracted according to the physical meaning of each field of the model table, and the field of the model table corresponding to each retrieval node is determined. Taking a power PLANT information table RT _ CON _ PLANT of a power grid dispatching automation system as an example, the table has tens of fields such as a NAME of a power PLANT, a PG _ ID of an affiliated power grid, a VOLTAGE class TYPE of VOLTAGE _ TYPE, a TYPE ST _ TYPE of a power PLANT, and the total number of records in the table is often in thousands or ten thousands of levels, and a control worker searches a specific power PLANT record through an interface, usually according to three levels of "affiliated power grid", "VOLTAGE class TYPE", and "power PLANT TYPE", layer by layer, so as to reduce the search range layer by layer. Therefore, it can be determined that the plant information table model search path is "affiliated grid/VOLTAGE class TYPE/plant TYPE", and the mapping table field path is "PG _ ID/VOLTAGE _ TYPE/ST _ TYPE".
Step two: and constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of retrieval fields in a power grid model data table, and leaf nodes of the model retrieval tree are end model data nodes and are used for storing the model data. The model retrieval tree is drawn, starting from a first layer of retrieval nodes, a grouping value of a retrieval field in a model table is obtained through a grouping query mode to form the model retrieval tree, and model data are mounted under the last layer of retrieval nodes to serve as leaf nodes. Taking the power PLANT information table RT _ CON _ PLANT as an example, the GROUP query pseudo SQL statement of the first-layer search field PG _ ID is "SELECT PG _ ID FROM RT _ CON _ PLANT GROUP BY PG _ ID", and the obtained GROUP value PG _ ID _ N (where N =1,2, 3.) forms a model search tree first-layer search node. The GROUP value query of the second-layer search field search _ TYPE is performed BY taking the first-layer GROUP value as a query condition, taking the GROUP query pseudo SQL statement as "select search _ TYPE FROM RT _ CON _ print _ GROUP BY search _ TYPE WHERE PG _ ID = 'PG _ ID _ N'", and taking the obtained GROUP value search _ TYPE _ NM (where N =1,2,3, M = a, b, c..) to form a second-layer search node of the model search tree. The query of the GROUP value of the third-layer search field ST _ TYPE is performed BY taking the GROUP values of the first layer AND the second layer as query conditions, taking a GROUP query pseudo SQL statement as "SELECT ST _ TYPE FROM RT _ CON _ plan _ GROUP BY ST _ TYPE WHERE PG _ ID = 'PG _ ID _ N' AND candidate _ TYPE = 'candidate _ TYPE _ NM'", AND taking the obtained GROUP value ST _ TYPE _ NMQ (where N =1,2,3.,. M = a, B, c.,. Q = a, B, c.,. etc.) to form a third-layer search node of the model search tree. The end leaf node is a specific data record of the power plant, the packet values of the first layer, the first layer AND the second layer are used as query conditions, AND the pseudo SQL statement is "SELECTNAME FROM RT _ CON _ PLANT WHERE PG _ ID = 'PG _ ID _ N' AND VOLTAGE _ TYPE = 'VOLTAGE _ TYPE _ NM' AND ST _ TYPE = 'ST _ TYPE _ NMQ'".
Step three: and setting the access authority of each layer of the model retrieval tree or the end model data node to each user. The access authority of each layer of retrieval nodes or end model data nodes needs to be set differently according to different user identities.
Step four: and controlling the access authority of the user to the terminal model data node by using the set user access authority. When the user has the access right of the terminal model data node, the model data can be accessed according to the set access right, and optionally, the setting of the access right comprises reading only and reading and writing.
FIG. 2 is a diagram illustrating a model search tree and rights definition according to an embodiment. Starting from the first layer of retrieval nodes, obtaining the grouping value of the retrieval field in the model table in a grouping query mode to form a model retrieval tree, hanging the vehicle model data on the last layer of retrieval nodes to form a complete model retrieval tree, and setting the access right of each retrieval node or model data node on the tree. Taking the PLANT information table RT _ CON _ TYPE as an example, the explicit search path is "PG _ ID/volume _ TYPE/ST _ TYPE", the first-layer search node packet value query pseudo SQL statement is "SELECT PG _ ID FROM RT _ CON _ GROUP BY PG _ ID", the query result is obtained { PG _ ID _1, PG _ ID _2}, the second-layer packet query pseudo SQL statement is "SELECT volume _ TYPE FROM RT _ CON _ GROUP BY volume _ TYPE WHERE PG _ ID = ' PG _ ID _ N ', the query result is obtained { volume _ TYPE _11, volume _ TYPE _12, volume _ TYPE _21}, the third-layer packet query pseudo SQL statement is" SELECT ST _ TYPE RT _ CON _ TYPE _112 ', the query result is obtained { volume _ TYPE _11, volume _ TYPE _12, volume _ TYPE _21}, the third-layer packet query pseudo SQL statement is "SELECT ST _ TYPE _ AND" { volume _ ID _ TYPE _112, volume _ TYPE \ "AND the query result is obtained, ST _ TYPE _121, ST _ TYPE _211 }; the end leaf node is a power plant specific data record, AND the pseudo SQL statement is "SELECT NAME FROM RT _ CON _ PLANT WHERE PG _ ID = 'PG _ ID _ N' AND VOLTAGE _ TYPE = 'VOLTAGE _ TYPE _ NM' AND ST _ TYPE = 'ST _ TYPE _ NMQ'", resulting in a query result { name1_111, name2_111, ·.
From the model search tree diagram of FIG. 2, it can be seen that the search path of the model record name1_112 is PG _ ID _1/VOLTAGE _ TYPE _11/ST _ TYPE _112/name 1-112. The access authority of three search nodes PG _ ID _1, VOLTAGE _ TYPE _11 and ST _ TYPE _112 can be set according to the requirement of actual authority control of a user. In a specific embodiment, when the access permission settings of all model data under the path of a specific retrieval node are consistent, only the permission of the specific retrieval node needs to be set separately. In this embodiment, if the access permissions of all model data records under the PG _ ID _1 retrieval node are consistent (the permission is "read-write"), only the PG _ ID _1 access permission is set. As shown in fig. 2, if the model data in the sub-level ST _ TYPE _112 search path of PG _ ID _1 is not identical to the access authority of other model data in PG _ ID _1, the authority of ST _ TYPE _112 is set independently (the authority is "read only").
An embodiment provides a method for controlling access rights of power grid model data, and on the basis of the above embodiment, the method provided by this embodiment includes:
step one, setting a retrieval path of model data in a power grid model data table according to the physical significance of each field of the power grid model data table;
constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of retrieval fields in a power grid model data table, and leaf nodes of the model retrieval tree are end model data nodes and are used for storing the model data;
thirdly, setting the access authority of each layer of retrieval nodes or end model data nodes of the model retrieval tree to each user;
and step four, controlling the access authority of the user to the terminal model data node by using the set user access authority. In this embodiment, the shortest distance relay inheritance is used to identify the access right of the user to the model data node, that is, in this embodiment, the model retrieval tree does not set the access right of the end model data node of the user, and the access right of the user inherits the retrieval node right which is closest to the model retrieval tree on the retrieval path and is set with the access right.
Fig. 3 is a process of authority authentication of model data of the present embodiment. The access authority of the model data is subjected to the shortest distance succession, namely, the authority of the retrieval node which is closest to the model data and is set with the access authority is inherited. As shown in the drawings, taking the authentication records name1-112 as an example for explanation, acquiring the complete retrieval path PG _ ID _ 1/volume _ TYPE _11/ST _ TYPE _112/name1-112 of the model records name1-112, directly acquiring the access right of a user if the access right of the user to the model data name1-112 is set, otherwise, reversely querying the access right of each layer of retrieval nodes along the path, and acquiring the access right of the first retrieved retrieval node with the access right as the access right of the user to the model data record. It can be seen in fig. 2 that the access right of the name1-112 is not directly set, so the access right "read-write" of the retrieval node ST _ TYPE _112 is found along the reverse path thereof as the access right of the name 1-112.
As will be apparent from the above description: the model table retrieval tree is drawn, which is to set the access authority of the user to the model table record conveniently, such as 'read only' and 'read and write'. The number of model table records is huge, one set is impossible and unnecessary, and generally, users are set to have the same access authority to model data in a certain retrieval range, for example, a user Zhang three has read-write authority to 220KV thermal power station records in east China, so that the authority to the retrieval node of east China/220 KV/thermal power station is set to be read-write. However, if he has only "read only" rights to a particular thermal power station x below, then x is found on the tree and the rights are set to "read only". When judging what authority the user Zhang III has on x, firstly checking whether the authority on x is directly configured, wherein 'read only' is configured, and then returning 'read only'; similarly, when judging the right of the user to record y of another thermal power station, firstly checking whether the right of the user to the y is directly configured, and if not, checking the right of the user to the retrieval node of the east China/220 KV/thermal power station, wherein the user has the right of reading and writing for the y by Zhang three because the user is configured with reading and writing.
According to the method, the model retrieval tree is drawn firstly, and then the user access authority is set. Abstracting a retrieval path of the model according to the physical meaning of each field of the model table, determining the fields of the model table corresponding to the retrieval nodes of each layer, starting from the retrieval nodes of the first layer, obtaining the grouping values of the retrieval fields in the model table in a grouping query mode to form a model retrieval tree, and setting the access authority of a user to the retrieval nodes of each layer or the end model data nodes on the retrieval tree. And adopting the shortest distance relay inheritance to identify the access authority of the user to the model data node. Firstly, judging whether the access authority of a user to the model data node is set, if so, acquiring the access authority, otherwise, searching a retrieval node which is closest to the model data node and is set with the access authority from a retrieval path of the retrieval node, and acquiring the access authority as the access authority of the model data node.
Correspondingly to the method for controlling the access right of the power grid model data, the embodiment of the application also provides a method and a device for controlling the access right of the power grid model data. For example, the apparatus may comprise: the retrieval path determining unit is used for setting a retrieval path of the model data in the power grid model data table according to the physical significance of each field of the power grid model data table; the model retrieval tree construction unit is used for constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of a retrieval field in a power grid model data table, and leaf nodes of the model retrieval tree are tail end model data nodes and are used for storing the model data; the access authority setting unit is used for setting the access authority of each layer of retrieval nodes or tail end model data nodes of the model retrieval tree to each user; and the authority identification control unit is used for controlling the access authority of the user to the terminal model data node by using the set user access authority.
In other embodiments, optionally, the search path determining unit determines the layer-by-layer search field according to a physical meaning of each field of the power grid model data table, and maps the layer-by-layer search field to a field name of the power grid model data table to obtain the search path of the model data.
In other embodiments, optionally, when the access rights of all model data under the path of a particular search node are consistent, the access right setting unit only sets the right of the particular search node.
In other embodiments, optionally, if the access right of the end model data node of the user is not set by the access right setting unit for the model retrieval tree, when the right authentication control unit controls the access right of the user to the end model data node, the right authentication control unit inherits the retrieval node right which is closest to the user on the retrieval path and is set with the access right, by using the access right of the user.
The retrieval path determining unit of the device provided by the embodiment of the application firstly abstracts the retrieval path of the model according to the physical significance of each field of the model table, and determines the field of the model table corresponding to each layer of retrieval nodes, the model retrieval tree constructing unit obtains the grouping value of the retrieval fields in the model table in a grouping query mode from the first layer of retrieval nodes to form the model retrieval tree, the access authority setting unit sets the access authority of a user to each layer of retrieval nodes or tail end model data nodes on the retrieval tree, and the authority identification control unit controls the access authority of the user to the tail end model data nodes by using the set user access authority, so that the accurate authority control of the fine granularity of the model data is flexibly realized. In the embodiment, the shortest distance relay is further adopted to inherit and identify the access authority of the model data, so that the accurate authority control on the fine granularity of the model data can be more flexibly realized.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While the present invention has been described with reference to the embodiments shown in the drawings, the present invention is not limited to the embodiments, which are illustrative and not restrictive, and it will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the invention as defined in the appended claims.

Claims (10)

1. A method for controlling access authority of power grid model data is characterized by comprising the following steps:
setting a retrieval path of model data in the power grid model data table according to the physical significance of each field of the power grid model data table;
constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of retrieval fields in a power grid model data table, and leaf nodes of the model retrieval tree are end model data nodes and are used for storing the model data;
and setting the access authority of each layer of the model retrieval tree or the terminal model data node to each user, and controlling the access authority of the user to the terminal model data node by using the set user access authority.
2. The method as claimed in claim 1, wherein setting the search path of the model data in the power grid model data table according to the physical meaning of each field of the power grid model data table comprises: and determining the retrieval fields layer by layer according to the physical meanings of the fields of the power grid model data table, and mapping the retrieval fields to the field names of the power grid model data table to obtain the retrieval path of the model data.
3. The method as claimed in claim 1, wherein the step of constructing the model search tree according to the search path of the model data includes obtaining a grouping value of the search field in the power grid model table by means of grouping query.
4. The method for controlling access rights to power grid model data according to claim 1, wherein setting access rights of each user to each layer of model search tree search nodes or end model data nodes comprises: when the access rights of all model data under the path of a specific retrieval node are consistent, only the right of the specific retrieval node needs to be set.
5. The method as claimed in claim 1, wherein the model search tree does not set the access right of the end model data node of the user, and the access right of the user inherits the search node right which is closest to the model search tree on the search path and is set with the access right.
6. An access right control device for power grid model data, comprising:
the retrieval path determining unit is used for setting a retrieval path of the model data in the power grid model data table according to the physical significance of each field of the power grid model data table;
the model retrieval tree construction unit is used for constructing a model retrieval tree according to a retrieval path of model data, wherein non-leaf nodes of the model retrieval tree are retrieval nodes of each layer and are used for storing grouping values of a retrieval field in a power grid model data table, and leaf nodes of the model retrieval tree are tail end model data nodes and are used for storing the model data;
the access authority setting unit is used for setting the access authority of each layer of retrieval nodes or tail end model data nodes of the model retrieval tree to each user;
and the authority identification control unit is used for controlling the access authority of the user to the terminal model data node by using the set user access authority.
7. The device for controlling access rights to power grid model data according to claim 6, wherein the search path determining unit determines the search fields layer by layer according to the physical meanings of the fields in the power grid model data table, and maps the search fields to the field names in the power grid model data table to obtain the search path of the model data.
8. The apparatus for controlling access rights to power grid model data according to claim 6, wherein the access rights setting unit only sets the rights of a specific search node when the access rights of all model data under the path of the specific search node are consistent.
9. The apparatus of claim 6, wherein if the access right setting unit does not set the access right of the end model data node of the user to the model search tree, the right authentication control unit controls the access right of the user to the end model data node, and inherits the search node right which is closest to the user on the search path and has the access right, by using the access right of the user.
10. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 5.
CN202010285601.7A 2020-04-13 2020-04-13 Access right control method and device for power grid model data Pending CN111552691A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010285601.7A CN111552691A (en) 2020-04-13 2020-04-13 Access right control method and device for power grid model data

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010285601.7A CN111552691A (en) 2020-04-13 2020-04-13 Access right control method and device for power grid model data

Publications (1)

Publication Number Publication Date
CN111552691A true CN111552691A (en) 2020-08-18

Family

ID=71998107

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010285601.7A Pending CN111552691A (en) 2020-04-13 2020-04-13 Access right control method and device for power grid model data

Country Status (1)

Country Link
CN (1) CN111552691A (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105468689A (en) * 2015-11-17 2016-04-06 广东电网有限责任公司电力科学研究院 Power grid object level authority configuration and inheritance method
CN110569657A (en) * 2019-09-10 2019-12-13 北京字节跳动网络技术有限公司 Data access method, device, equipment and storage medium
CN110895537A (en) * 2019-11-29 2020-03-20 中国银行股份有限公司 Method and device for freely inquiring authority control

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105468689A (en) * 2015-11-17 2016-04-06 广东电网有限责任公司电力科学研究院 Power grid object level authority configuration and inheritance method
CN110569657A (en) * 2019-09-10 2019-12-13 北京字节跳动网络技术有限公司 Data access method, device, equipment and storage medium
CN110895537A (en) * 2019-11-29 2020-03-20 中国银行股份有限公司 Method and device for freely inquiring authority control

Similar Documents

Publication Publication Date Title
US11468103B2 (en) Relational modeler and renderer for non-relational data
CN103345469B (en) The storage of set of numbers, querying method and device thereof
CN106970958B (en) A kind of inquiry of stream file and storage method and device
US11288287B2 (en) Methods and apparatus to partition a database
CN105868421A (en) Data management method and data management device
CN112765405B (en) Method and system for clustering and inquiring spatial data search results
CN105989015B (en) Database capacity expansion method and device and method and device for accessing database
CN113254451B (en) Data index construction method and device, electronic equipment and storage medium
CN110019111A (en) Data processing method, device, storage medium and processor
CN107609179B (en) Data processing method and equipment
CN116627972A (en) Structured data discrete storage system for covering index
CN109189343B (en) Metadata disk-dropping method, device, equipment and computer-readable storage medium
CN113297171A (en) Database migration method and device and database cluster
CN107515807A (en) A kind of method and device for storing monitoring data
CN111552691A (en) Access right control method and device for power grid model data
CN113986545A (en) Method and device for associating user with role
CN111143006B (en) Method and device for acquiring command help information
CN113849482A (en) Data migration method and device and electronic equipment
CN101944127B (en) Method and device for controlling data permission
CN113434596A (en) Method and device for generating test data of distributed database
JP2004192657A (en) Information retrieval system, and recording medium recording information retrieval method and program for information retrieval
CN113987785B (en) Management method and device for complete information of algorithm block of nuclear power station DCS system
CN113190550B (en) Organization structure authority distribution method based on tree structure
CN114238704B (en) Tree index splitting method, data access method and device and electronic equipment
CN117453577B (en) Method, device and computer equipment for generating interface automation use case based on flow recording

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20200818