CN112580104B

CN112580104B - Authority management method, device, electronic equipment and storage medium

Info

Publication number: CN112580104B
Application number: CN202011631760.4A
Authority: CN
Inventors: 贺勇; 银鑫; 罗杰
Original assignee: Beijing Dajia Internet Information Technology Co Ltd
Current assignee: Beijing Dajia Internet Information Technology Co Ltd
Priority date: 2020-12-30
Filing date: 2020-12-30
Publication date: 2024-03-19
Anticipated expiration: 2040-12-30
Also published as: CN112580104A

Abstract

The disclosure relates to a rights management method, a device, an electronic device and a storage medium, wherein the method comprises the following steps: receiving a rights authorization request for a first object group, the rights authorization request including a user account; acquiring a set selection description of the first object group, wherein the set selection description comprises first object content and set selection logic associated with the first object content; acquiring an object set associated with the first object content according to the set selection logic; if the object set comprises the user account, authorizing the user account to use the authority of the first object set; and if the user account is not included in the object set, refusing the user account to use the permission. The method and the device do not need to store the object set corresponding to the first object set, but dynamically determine the object set of the first object set when the permission authorization request is received, solve the problem of complex permission management in the related art, and simplify the permission management mode.

Description

Authority management method, device, electronic equipment and storage medium

Technical Field

The present disclosure relates to rights management technologies, and in particular, to a rights management method, device, electronic apparatus, and storage medium.

Background

In the related art, when rights management is performed, the rights management is basically performed based on the dimension of a person or a group of persons, for example, the rights of one person may be added, or the rights of one department may also be added.

However, management is performed based on the dimensions of a person or a person group, and a management scheme in a complex scene is very complex, for example, a document of one company needs to be opened to a second-class division manager, all the second-class managers need to be extracted as a group, and if there are persons in the group that go in and go out, the group needs to be updated, and thus, the rights management scheme in the related art is very complex.

Disclosure of Invention

The disclosure provides a rights management method, a device, an electronic device and a storage medium, so as to at least solve the problem of complex rights management in the related art. The technical scheme of the present disclosure is as follows:

according to a first aspect of an embodiment of the present disclosure, there is provided a rights management method, including:

receiving a rights authorization request for a first object group, the rights authorization request including a user account;

acquiring a set selection description of the first object group, wherein the set selection description comprises first object content and set selection logic associated with the first object content;

Acquiring an object set associated with the first object content according to the set selection logic;

if the object set comprises the user account, authorizing the user account to use the authority of the first object set; and if the user account is not included in the object set, refusing the user account to use the permission.

Optionally, before receiving the request for authority authorization of the object group, the method includes:

acquiring a set selection description of a second object group to be added, wherein the set selection description comprises an object type and set selection logic associated with the object type;

acquiring second object content of the object type, and storing the second object group and the set selection description of the object type for the second object content;

and managing the authority of the second object group.

Optionally, before the acquiring the set selection description of the second object group to be added, the method includes:

and receiving a type selection operation of the second object group, wherein the type selection operation indicates that the type is a set operation group.

Optionally, after the receiving the type selection operation of the second object group, the method includes: receiving a tissue addition operation, the tissue addition operation comprising at least one tissue; the obtaining, according to the set selection logic, a set of objects associated with the first object content includes:

In the at least one organization, a set of objects having the set selection logic with the first object content is obtained.

Optionally, the object type is a user object, and the set selection logic includes at least: any level or multiple levels of the user object belong to any level or multiple levels of the user object; or (b)

The object type is an organization object, and the set selection logic includes at least: the organization object is responsible for the object, the formal object, the practice object and the outsourcing object.

According to a second aspect of embodiments of the present disclosure, there is provided a rights management method, comprising:

receiving a set selection description selected in a group addition interface, the set selection description representing an object type and set selection logic associated with the object type;

receiving object content corresponding to the object type, which is added in a group adding interface;

storing the association relation between the object type and the object group selected description for the set of the object content after receiving an addition determination instruction;

rights to the object group are managed.

Optionally, before the receiving the set selection description selected in the group adding interface, the method further includes:

Receiving a type selection operation of the object group;

and displaying the group adding interface when the type selection operation indicates that the type is a set operation group.

Optionally, the receiving the set selection description selected in the group adding interface includes:

displaying a set selection description acquisition interface in the group addition interface;

receiving a selected set selection description through the set selection description acquisition interface;

the receiving the object content corresponding to the object type added in the group adding interface includes:

displaying an object content acquisition interface corresponding to the object type in the group addition interface;

and acquiring the object content corresponding to the object type through the object content acquisition interface.

Optionally, receiving, by the set selection description acquisition interface, a set selection description of a selection, including:

and displaying a set selection description drop-down list from the set selection description acquisition interface when a click operation on the set selection description acquisition interface is detected, and receiving a selected set selection description from the set selection description drop-down list.

Optionally, the obtaining, by the object content obtaining interface, the object content corresponding to the object type includes:

When a click operation on the object content acquisition interface is detected, displaying an object content drop-down list from the object content acquisition interface, and receiving selected object content from the object content drop-down list as object content corresponding to an object type; or alternatively

And when the clicking operation on the object content acquisition interface is detected, displaying an input box and acquiring the object content corresponding to the object type.

Optionally, managing rights of the object group includes:

displaying the object group and all rights, acquiring the selected rights, and storing the selected rights as the rights of the object group; and/or

Acquiring a role corresponding to the object group and at least one authority corresponding to the role, and storing at least one authority corresponding to the role as the authority of the object group.

According to a third aspect of the embodiments of the present disclosure, there is provided a rights management unit including:

an authorization request receiving module configured to perform receiving an authorization request for a first object group, the authorization request including a user account;

a first set description acquisition module configured to perform acquisition of a set selection description of the first object group, the set selection description including first object content and set selection logic associated with the first object content;

an object set acquisition module configured to perform acquisition of an object set associated with the first object content in accordance with the set selection logic;

a rights control module configured to execute rights to authorize the user account to use the first object group if the user account is included in the object set; and if the user account is not included in the object set, refusing the user account to use the permission.

Optionally, the apparatus further includes:

a second set description acquisition module configured to perform acquisition of a set selection description of a second object group to be added, the set selection description including an object type and set selection logic associated with the object type;

The object content acquisition module is configured to acquire second object content of the object type, and save the second object group and the set selection description of the object type for the second object content;

and a rights management module configured to perform rights for managing the second object group.

Optionally, the apparatus further includes:

and a type selection operation receiving module configured to perform a type selection operation of receiving the second object group, the type selection operation indicating that the type is a set operation group.

Optionally, the apparatus further includes: a tissue augmentation operation receiving module configured to perform a receiving tissue augmentation operation, the tissue augmentation operation comprising at least one tissue; the object set acquisition module is configured to perform:

According to a fourth aspect of embodiments of the present disclosure, there is provided a rights management unit including:

a set description receiving module configured to perform receiving a set selection description selected in a group addition interface, the set selection description representing an object type and set selection logic associated with the object type;

an object content receiving module configured to perform receiving object content corresponding to the object type added in the group addition interface;

the association relation saving module is configured to execute a receiving and adding determination instruction, save the association relation between the object type selection description and the object group for the set of the object content;

and the right management module is configured to execute the right for managing the object group.

Optionally, the apparatus further includes:

a type selection operation receiving module configured to perform a type selection operation of receiving the object group;

and the group adding interface display module is configured to display the group adding interface when the type selection operation indicates that the type is a set operation group.

Optionally, the set description receiving module includes:

a description acquisition interface display unit configured to execute displaying a set selection description acquisition interface in the group addition interface;

A set-description receiving unit configured to execute a set-selection description of receiving a selection through the set-selection-description acquiring interface;

the object content receiving module includes:

a content acquisition interface display unit configured to perform display of an object content acquisition interface corresponding to the object type in the group addition interface;

and an object content acquisition unit configured to perform acquisition of object content corresponding to the object type through the object content acquisition interface.

Optionally, the set description receiving unit is specifically configured to perform:

Optionally, the object content acquisition unit is specifically configured to perform:

Optionally, the rights management module is specifically configured to perform:

According to a fifth aspect of embodiments of the present disclosure, there is provided an electronic device, comprising:

a processor;

a memory for storing the processor-executable instructions;

wherein the processor is configured to execute the instructions to implement the rights management method according to the first or second aspect.

According to a sixth aspect of embodiments of the present disclosure, there is provided a computer readable storage medium, which when executed by a processor of an electronic device, causes the electronic device to perform the rights management method according to the first or second aspect.

According to a seventh aspect of embodiments of the present disclosure, there is provided a computer program product comprising a computer program or computer instructions which, when executed by a processor, implement the rights management method as described in the first or second aspect.

The technical scheme provided by the embodiment of the disclosure at least brings the following beneficial effects:

according to the method, when a permission authorization request for a first object group is received, a set selection description of the first object group is obtained, the set selection description comprises first object content and set selection logic associated with the first object content, the set of objects associated with the first object content is obtained according to the set selection logic, if the set of objects comprises a user account, the user account is authorized to use the permission of the first object group, if the set of objects does not comprise the user account, the user account is refused to use the permission, the set of objects corresponding to the first object group is not saved, the set selection description of the first object group is saved, and further the set of objects included in the first object group is dynamically determined when the permission authorization request is received, so that the problem of complex permission management in the related technology is solved without independently maintaining the set of objects of the first object group, and a permission management mode is simplified.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description, serve to explain the principles of the disclosure and do not constitute an undue limitation on the disclosure.

FIG. 1 is a flowchart illustrating a method of rights management, according to an example embodiment;

FIG. 2 is a flowchart illustrating another rights management method in accordance with an exemplary embodiment;

FIG. 3 is an exemplary diagram of a group addition interface in an embodiment of the present disclosure;

FIG. 4 is another exemplary diagram of a group addition interface in an embodiment of the present disclosure;

FIG. 5 is an exemplary diagram of displaying a set selection description drop down list at a set selection description acquisition interface in an embodiment of the present disclosure;

FIG. 6 is a block diagram of a rights management unit according to an exemplary embodiment;

FIG. 7 is a block diagram of another rights management unit shown in accordance with an exemplary embodiment;

fig. 8 is a block diagram of an electronic device, according to an example embodiment.

Detailed Description

In order to enable those skilled in the art to better understand the technical solutions of the present disclosure, the technical solutions of the embodiments of the present disclosure will be clearly and completely described below with reference to the accompanying drawings.

It should be noted that the terms "first," "second," and the like in the description and claims of the present disclosure and in the foregoing figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the disclosure described herein may be capable of operation in sequences other than those illustrated or described herein. The implementations described in the following exemplary examples are not representative of all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present disclosure as detailed in the accompanying claims.

Fig. 1 is a flowchart illustrating a rights management method according to an exemplary embodiment, and as shown in fig. 1, the rights management method may be used in an electronic device such as a computer, a mobile phone, a tablet computer, a server, etc., and includes the following steps.

In step S11, a rights authorization request for a first object group is received, the rights authorization request comprising a user account.

The first object group is a dynamic object group, and when the first object group is saved, the set selection description of the object group is saved instead of the object set corresponding to the first object group, namely, the first object content and the set selection logic associated with the first object content are saved. The dynamic object group refers to that when a permission authorization request is received, the object set in the object group can be dynamically determined according to the set selection description of the object group, and the object set in the object group does not need to be stored; a static object group refers to a set of objects in the object group that is stored, so that personnel can enter and leave the object group, and the set of objects in the object group needs to be updated.

When the user wants to use the rights of the first object group, logging in the user account at the first electronic device, and operating through the first electronic device logging in the user account, so that the first electronic device logging in the user account sends a rights authorization request for the first object group, and the second electronic device executing the rights management method receives the rights authorization request for the first object group.

In step S12, a set selection description of the first object group is obtained, the set selection description comprising first object content and set selection logic associated with the first object content.

Upon receiving a rights authorization request for a first object group, a set selection description of the first object group is obtained to determine a set of objects in the first object group based on the set selection description. The object type of the first object content may be a user object or an organization object, and when the object type of the first object content is a user object, the set selection logic associated with the first object content at least includes: any level or level of the user object is subordinate, any level or level of the user object is superior, such as subordinate of Zhang san and the like; when the object type of the first object content is an organization object, the set selection logic associated with the first object content at least comprises: the organization object may be a department or a plurality of departments, for example, the collection selection logic associated with the first object content may be the responsible person of the administrative department, or the responsible person of the administrative department and the warehouse management department.

In step S13, an object set associated with the first object content is acquired according to the set selection logic.

After the set selection description of the first object group is obtained, the first object content can be searched in an organization architecture corresponding to the first object group, and an object set associated with the first object content can be obtained according to set selection logic. For example, if the first object content is Zhang San and the set selection logic is the upper level of Zhang San, the position of the first object content in the organization structure is found in the organization structure, and all the upper levels of Zhang San are obtained, so as to obtain the object set associated with the first object content of Zhang San.

In step S14, if the object set includes the user account, authorizing the user account to use the rights of the first object set; and if the user account is not included in the object set, refusing the user account to use the permission.

After the object set associated with the first object content is acquired, whether the user account is included in the object set or not can be judged, so that whether the user account can use the authority of the first object set or not is determined, if the user account is included in the object set, the authority of the user account for using the first object set is authorized, and if the user account is not included in the object set, the user account is refused to use the authority.

The rights management method provided by the present exemplary embodiment does not store the object set corresponding to the first object set, but stores the set selection description of the first object set, further dynamically determines the object set included in the first object set when the rights authorization request is received, and authorizes the user account to use the rights of the first object set when the user account included in the rights authorization request belongs to the object set, so that the object set of the first object set does not need to be maintained separately, the problem of complex rights management in the related art is solved, and the rights management mode is simplified. For example, when a document of a company needs to be opened to a second-level department manager, when rights management is performed by using a related technology, an object group and object sets in the object group need to be saved, that is, the object group and all second-level manager names need to be saved, if someone leaves or takes part in, the object set of the object group needs to be updated, and when the rights management method in the embodiment of the present disclosure is used, only the object group and the set selection description need to be saved, the set selection description may be "first-level manager and second-level manager", and when a rights authorization request is received, the object set of the object group is determined based on the set selection description, so that names of all first-level managers and second-level managers can be determined.

On the basis of the technical scheme, before receiving the permission authorization request for the object group, the method comprises the following steps: acquiring a set selection description of a second object group to be added, wherein the set selection description comprises an object type and set selection logic associated with the object type; acquiring second object content of the object type, and storing the second object group and the set selection description of the object type for the second object content; and managing the authority of the second object group.

The second object group may be the first object group or other object groups, where the first object group and the second object group are object groups of the same type, and are all object groups determined by the set selection description.

The manager with rights management rights can create a second object group. When the manager wants to add a second object group, the manager can choose to add the second object group, and select the object type and the set selection logic associated with the object type, at which time the second electronic device executing the rights management method obtains the set selection description of the second object group to be added. And then, the manager can select the second object content of the object type, the second electronic equipment executing the rights management method acquires the second object content of the object type, and the second object group and the object type are saved for the set selection description of the second object content, so that the dynamic second object group is added. The subsequent second electronic device obtains the rights of the second object group and manages the rights of the second object group. The embodiment of the disclosure realizes that when the rights management is performed, the object set of the second object group is not saved, but the second object group and the object type are saved for the set selection description of the second object content, so that even if personnel change, the table corresponding to the object set is not required to be updated, and the rights management mode is simplified.

Wherein the object type is a user object, and the set selection logic at least includes: any level or multiple levels of the user object belong to any level or multiple levels of the user object; or (b)

The object type may be a user object or an organization object. When the object type is a user object, the set selection logic associated with the object type may be any level of subordinate of the user object, any level of superordinate of the user object, or any level of superordinate of the user object. When the object type is an organization object, the set selection logic associated with the object type may be a responsible object of the organization object, a formal object of the organization object, a practice object of the organization object, or an outsource object of the organization object, such as a responsible person of a department, a formal employee of a department, a practice student of a department, an outsource of a department, and so on.

On the basis of the above technical solution, before the acquiring the set selection description of the second object group to be added, the method includes: and receiving a type selection operation of the second object group, wherein the type selection operation indicates that the type is a set operation group.

Wherein the set operation group is an object group type of a set selection description of the save object content, the object group type not requiring the save object set.

Before acquiring the set selection description of the second object group to be added, the manager selects the type of the second object group to be added to indicate the type of the second object group as the set operation group, and the second electronic equipment executing the rights management method receives the type selection operation of the second object group, and determines that the type of the second object group to be added is the set operation group through the type selection operation, thereby realizing adding different types of object groups according to requirements. The object group types are not only collection operation groups, but also other existing object group types, such as project member groups, department groups, mail groups and the like, and are all groups requiring maintenance of specific object sets unlike the collection operation groups.

On the basis of the above technical solution, after the receiving the type selection operation of the second object group, the method includes: receiving a tissue addition operation, the tissue addition operation comprising at least one tissue; the obtaining, according to the set selection logic, a set of objects associated with the first object content includes:

After the manager selects the type of the second object group to be added, the second electronic device can also display the organization architecture where the second object group is located, at this time, the manager selects at least one organization to be added in the organization architecture, and the second electronic device executing the rights management method receives the organization adding operation. In acquiring an object set associated with first object content based on set selection logic, the object set having set selection logic with the first object content is acquired in at least one organization corresponding to the first object group. The object set having set selection logic with the first object content is acquired within a certain range. In the embodiment of the disclosure, at least one organization to which the object group belongs can be configured according to the requirement, and the object set of the object group is acquired from the at least one organization, so that the management requirement is met, and the method is flexible and convenient.

Fig. 2 is a flowchart illustrating a rights management method according to an exemplary embodiment, and as shown in fig. 2, the rights management method may be used in an electronic device such as a computer, a mobile phone, a tablet computer, a server, etc., and includes the following steps.

In step S21, a set selection description is received that is selected in the group addition interface, the set selection description representing an object type and set selection logic associated with the object type.

The manager with authority management authority can add the object group and set and manage the authority of the object group. In one example, an administrator selects a set selection description of an object set to be added on a set addition interface, and a second electronic device executing the rights management method receives the set selection description of the object set selected in the set addition interface. The set selection description may be set selection logic for one object type.

In step S22, object content corresponding to the object type added in the group addition interface is received.

After the manager selects the set selection description in the group adding interface, the object content corresponding to the object type can be added in the group adding interface. For example: when the object type is a user object, the object content can be a user object identifier; when the object type is an organization object, the object content may be an organization object identification. After the manager adds the object content corresponding to the object type in the group adding interface, the second electronic device executing the rights management method receives the object content corresponding to the object type added in the group adding interface.

In step S23, an add determination instruction is received, and the association relationship between the object type and the object group is saved for the set selection description of the object content.

The group adding interface comprises a determination button, after the manager selects the set selection description of the object group to be added and the object content corresponding to the object type, if the manager determines that the object group corresponding to the set selection description is the object group, the determination button can be clicked, the second electronic device executing the rights management method receives an addition determination instruction, creates the object group corresponding to the set selection description of the object type for the object content, saves the association relationship between the set selection description of the object type for the object content and the object group, thereby creating the object group of the set selection description for the object content based on the object type, wherein the object group is a dynamic object group, and when the object group is saved, the set selection description associated with the object group is saved, and the object set of the object group is not saved. In one example, the object type may be a user object, or may also be an organization object, where the aggregate selection description includes at least: any level or multi-level subordinate of the user object, any level or multi-level superordinate, for example, the object content is 'Zhang Sanning', and the association relation between the object group and the aggregate selection description 'Zhang Sanning' can be saved based on the fact that the object type is 'Zhang Sanning' and the aggregate selection description of the object content is 'Zhang Sanning' and the like; when the object type is an organization object, the set selection description at least comprises: the organization object may be a department or a plurality of departments, for example, the object content is an "administrative department", the person responsible for the administrative department "is selected for the collection of the object content based on the object type, and then the association relationship between the object group and the person responsible for the administrative department is saved.

In step S24, rights of the object group are managed.

After the creation of the object group is completed, the rights of the object group can be acquired and managed.

The object group is a dynamic object group, and the embodiment of the disclosure does not save the object set of the object group, but acquires the set selection description of the object group when receiving the permission authorization request of the object group, so that the set selection logic in the set selection description acquires the object set associated with the object content, that is, the object set of the object group is dynamically determined when receiving the permission authorization request, and determines whether the user account in the permission authorization request can use the permission of the object group based on the object set.

The rights management method provided by the present exemplary embodiment does not store the object set corresponding to the object set, but stores the set selection description of the object set, and further dynamically determines the object set included in the object set when the rights authorization request is received, so that the object set of the object set does not need to be maintained, the problem of complex rights management in the related art is solved, and the rights management mode is simplified. For example, when a document of a company needs to be opened to a second-level department manager, when rights management is performed by using a related technology, an object group and object sets in the object group need to be saved, that is, the object group and all second-level manager names need to be saved, if someone leaves or takes part in, the object set of the object group needs to be updated, and when the rights management method in the embodiment of the present disclosure is used, only the object group and the set selection description need to be saved, the set selection description may be "first-level manager and second-level manager", and when a rights authorization request is received, the object set of the object group is determined based on the set selection description, so that names of all first-level managers and second-level managers can be determined.

On the basis of the technical scheme, before the receiving the set selection description selected in the group adding interface, the method further comprises the following steps: receiving a type selection operation of the object group; and displaying the group adding interface when the type selection operation indicates that the type is a set operation group.

In one embodiment, the process of creating an object group is: the manager selects the type of the object group to be created, the type is used for indicating that the type of the second object group is a set operation group, the second electronic equipment executing the authority management method receives the type selection operation of the object group, and when the type selection operation indicates that the type is the set operation group, a group adding interface corresponding to the set operation group is displayed. The object group types are not only collection operation groups, but also other existing object group types, such as project member groups, department groups, mail groups and the like, and are all groups requiring maintenance of specific object sets unlike the collection operation groups.

On the basis of the technical scheme, the receiving the set selection description selected in the group adding interface comprises the following steps: displaying a set selection description acquisition interface in the group addition interface; receiving a selected set selection description through the set selection description acquisition interface;

The receiving the object content corresponding to the object type added in the group adding interface includes: displaying an object content acquisition interface corresponding to the object type in the group addition interface; and acquiring the object content corresponding to the object type through the object content acquisition interface.

A set selection description acquisition interface through which a set selection description input or selected by a manager is acquired, which represents set selection logic for user objects or set selection logic for organization objects, may be displayed in the group addition interface. After acquiring the set selection logic associated with the object type, displaying an object content acquisition interface corresponding to the object type in the group adding interface, and acquiring the object content corresponding to the object type through the object content acquisition interface.

Fig. 3 is an exemplary diagram of a group adding interface in the present disclosure, and as shown in fig. 3, the obtained set selection description is "all the subordinates of someone", that is, the object type in the set selection description is a user object, at this time, an object content obtaining interface corresponding to the user object, which is displayed as "selector", is displayed in the group adding interface, and through which object content corresponding to the user object input by the manager can be obtained. The object content acquisition interface is shown as a "selector," and may be selected from a corporate group or from one or more organizations that are selected.

Fig. 4 is another exemplary diagram of a group adding interface in the present disclosure, and as shown in fig. 4, the obtained set selection description is "a practice student of a certain department", that is, the object type in the set selection description is an organization object, at this time, an object content obtaining interface corresponding to the organization object is displayed in the group adding interface, and the object content obtaining interface is displayed as "a selection department", through which object content corresponding to the organization object that is input or selected by a manager can be obtained. The object content acquisition interface is shown as a "selection department," and may be selected from all organizations, or may be selected from one or more selected organizations.

The collection selection description acquisition interface and the object content acquisition interface displayed by the group adding interface can be used for conveniently acquiring the collection selection description and the object content of the object group provided by the manager.

On the basis of the technical scheme, the set selection description acquisition interface receives the set selection description of the selection, and the method comprises the following steps: and displaying a set selection description drop-down list from the set selection description acquisition interface when a click operation on the set selection description acquisition interface is detected, and receiving a selected set selection description from the set selection description drop-down list.

Fig. 5 is an example diagram of displaying a drop-down list of a set selection description at a set selection description acquisition interface in the present disclosure, as shown in fig. 5, when a clicking operation of an interface acquired by a manager on the set selection description (in a set operation manner in fig. 5) is detected, the drop-down list of the set selection description is displayed from the set selection description, and includes a plurality of set selection descriptions for selection in the drop-down list of the set selection description, where the plurality of set selection descriptions may be preset set selection descriptions, for example, the drop-down list of the set selection description includes at least all the subordinates of a person, all the superordinates of a person, the responsible person of a department, the officials of a department, the interns of a department, the outsourcing of a department, and the like, and a set selection description adding interface is further provided in the drop-down list of the set selection description, and the set selection description added by the manager is acquired through the set selection description adding interface, where, for example, when there is no set selection description that the manager wants to select in the drop-down list of the set selection description, the set selection description may be added through the set selection description, and the set selection description may be added through the set selection description, for example, the set selection description may be added through the set selection description, the set selection description may be added by the set selection description, and the set selection description, the set selection description and the set selection description, the addition may be the set selection description and the addition may be the addition and the addition. And acquiring a set selection description selected by the manager in a set selection description drop-down list, wherein the set selection description is the set selection description of the object group to be added. By displaying the set selection description to be selected in the form of a drop-down list at the set selection description acquisition interface, the manager can conveniently select the set selection description, thereby improving the creation speed of the object group.

On the basis of the above technical solution, the object content obtaining interface obtains the object content corresponding to the object type, including:

When the object content corresponding to the object type is acquired through the object content acquisition interface, the object content selected by the manager can be acquired in the form of a drop-down list, or the object content corresponding to the object type input by the manager can also be acquired. By providing different ways to acquire the object content corresponding to the object type, the manager can select an appropriate way to give the object content corresponding to the object type.

On the basis of the technical scheme, managing the rights of the object group comprises the following steps:

And correspondingly displaying the object group and all the rights, if one or more rights selected by the manager are detected, giving the selected rights to the object group, taking the selected rights as the rights corresponding to the object group, and storing the rights selected as the rights of the object group. The rights to be allocated for the just created object group can be managed in a unified way on one interface, namely, all the object groups and the rights to be allocated are correspondingly displayed, for example, the object groups and the rights to be allocated can be displayed in a manner as shown in table 1, and the rights to be allocated can be for example, all pages are viewed, pages are copied, comments are deleted, pages are moved and the like.

TABLE 1 object group and rights to be assigned

Group name	First authority	Second authority	Third authority	Fourth right
					Rights group 1
Rights group 2
					Rights group 3

In addition to the above manner of assigning rights to object groups, multiple roles may be created in advance, and at least one right may be assigned to each role, after creating an object group, a role assigned to the object by a manager may be acquired, and at least one right corresponding to the role may be assigned to the object group, that is, at least one right corresponding to the role may be saved as a right of the object group.

The mode of assigning the rights to the object group by displaying the object group and all the rights can assign the right to the object group, and the time for assigning the rights to the object group can be saved by acquiring the roles corresponding to the object group.

Fig. 6 is a block diagram illustrating a rights management unit according to an exemplary embodiment. Referring to fig. 6, the apparatus includes an authorization request receiving module 61, a first set description acquiring module 62, an object set acquiring module 63, and a rights control module 64.

The authorization request receiving module 61 is configured to perform receiving a rights authorization request for a first object group, the rights authorization request comprising a user account;

the first set description acquisition module 62 is configured to perform acquiring a set selection description of the first object group, the set selection description comprising first object content and set selection logic associated with the first object content;

the object set acquisition module 63 is configured to perform acquisition of an object set associated with the first object content in accordance with the set selection logic;

the rights control module 64 is configured to execute rights to authorize the user account to use the first set of objects if the user account is included in the set of objects; and if the user account is not included in the object set, refusing the user account to use the permission.

Optionally, the apparatus further includes:

Fig. 7 is a block diagram illustrating a rights management unit according to an exemplary embodiment. Referring to fig. 7, the apparatus includes a set description receiving module 71, an object content receiving module 72, an association relation saving module 73, and a rights management module 74.

The set description receiving module 71 is configured to perform receiving a set selection description selected in the group addition interface, the set selection description being used to represent an object type and set selection logic associated with the object type;

the object content receiving module 72 is configured to perform receiving object content corresponding to the object type added in the group addition interface;

the association relation saving module 73 is configured to execute a receiving addition determination instruction, and save the association relation between the object type and the object group selected description for the set of object contents;

The rights management module 74 is configured to perform rights to manage the set of objects.

Optionally, the apparatus further includes:

Optionally, the set description receiving module includes:

the object content receiving module includes:

Optionally, the rights management module is specifically configured to perform:

The specific manner in which the various modules perform the operations in the apparatus of the above embodiments have been described in detail in connection with the embodiments of the method, and will not be described in detail herein.

Fig. 8 is a block diagram of an electronic device, according to an example embodiment. For example, electronic device 800 may be a mobile phone, computer, digital broadcast terminal, messaging device, game console, tablet device, medical device, exercise device, personal digital assistant, or the like.

Referring to fig. 8, an electronic device 800 may include one or more of the following components: a processing component 802, a memory 804, a power component 806, a multimedia component 808, an audio component 810, an input/output (I/O) interface 812, a sensor component 814, and a communication component 816.

The processing component 802 generally controls overall operation of the electronic device 800, such as operations associated with display, telephone calls, data communications, camera operations, and recording operations. The processing component 802 may include one or more processors 820 to execute instructions to perform all or part of the steps of the methods described above. Further, the processing component 802 can include one or more modules that facilitate interactions between the processing component 802 and other components. For example, the processing component 802 can include a multimedia module to facilitate interaction between the multimedia component 808 and the processing component 802.

The memory 804 is configured to store various types of data to support operations at the electronic device 800. Examples of such data include instructions for any application or method operating on the electronic device 800, contact data, phonebook data, messages, pictures, videos, and so forth. The memory 804 may be implemented by any type or combination of volatile or nonvolatile memory devices such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disk.

The power supply component 806 provides power to the various components of the electronic device 800. The power components 806 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power for the electronic device 800.

The multimedia component 808 includes a screen between the electronic device 800 and the user that provides an output interface. In some embodiments, the screen may include a Liquid Crystal Display (LCD) and a Touch Panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from a user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensor may sense not only the boundary of a touch or slide action, but also the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front camera and/or a rear camera. When the electronic device 800 is in an operational mode, such as a shooting mode or a video mode, the front camera and/or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have focal length and optical zoom capabilities.

The audio component 810 is configured to output and/or input audio signals. For example, the audio component 810 includes a Microphone (MIC) configured to receive external audio signals when the electronic device 800 is in an operational mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signals may be further stored in the memory 804 or transmitted via the communication component 816. In some embodiments, audio component 810 further includes a speaker for outputting audio signals.

The I/O interface 812 provides an interface between the processing component 802 and peripheral interface modules, which may be a keyboard, click wheel, buttons, etc. These buttons may include, but are not limited to: homepage button, volume button, start button, and lock button.

The sensor assembly 814 includes one or more sensors for providing status assessment of various aspects of the electronic device 800. For example, the sensor assembly 814 may detect an on/off state of the electronic device 800, a relative positioning of the components, such as a display and keypad of the electronic device 800, the sensor assembly 814 may also detect a change in position of the electronic device 800 or a component of the electronic device 800, the presence or absence of a user's contact with the electronic device 800, an orientation or acceleration/deceleration of the electronic device 800, and a change in temperature of the electronic device 800. The sensor assembly 814 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 814 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an acceleration sensor, a gyroscopic sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

The communication component 816 is configured to facilitate communication between the electronic device 800 and other devices, either wired or wireless. The electronic device 800 may access a wireless network based on a communication standard, such as WiFi, an operator network (e.g., 2G, 3G, 4G, or 5G), or a combination thereof. In one exemplary embodiment, the communication component 816 receives broadcast signals or broadcast related information from an external broadcast management system via a broadcast channel. In one exemplary embodiment, the communication component 816 further includes a Near Field Communication (NFC) module to facilitate short range communications. For example, the NFC module may be implemented based on Radio Frequency Identification (RFID) technology, infrared data association (IrDA) technology, ultra Wideband (UWB) technology, bluetooth (BT) technology, and other technologies.

In an exemplary embodiment, the electronic device 800 may be implemented by one or more Application Specific Integrated Circuits (ASICs), digital Signal Processors (DSPs), digital Signal Processing Devices (DSPDs), programmable Logic Devices (PLDs), field Programmable Gate Arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic elements for performing the above-described rights management methods.

In an exemplary embodiment, a storage medium is also provided, such as memory 804 including instructions executable by processor 820 of electronic device 800 to perform the rights management method described above. Alternatively, the storage medium may be a non-transitory computer readable storage medium, which may be, for example, ROM, random Access Memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like.

In an exemplary embodiment, a computer program product is also provided, comprising a computer program or computer instructions executable by the processor 820 of the electronic device 800 to perform the rights management method described above. Alternatively, the program code may be stored in a storage medium of the electronic device 800, which may be a non-transitory computer readable storage medium, such as ROM, random Access Memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.

Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This application is intended to cover any adaptations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It is to be understood that the invention is not limited to the precise arrangements and instrumentalities shown in the drawings, which have been described above, and that various modifications and changes may be effected without departing from the scope thereof. The scope of the invention is limited only by the appended claims.

Claims

1. A rights management method, comprising:

2. The method of claim 1, wherein prior to receiving the rights authorization request for the first object group, comprising:

And managing the authority of the second object group.

3. The method according to claim 2, comprising, prior to said obtaining a set selection description of the second object group to be added:

4. A method according to claim 3, comprising, after said receiving a type selection operation of said second group of objects: receiving a tissue addition operation, the tissue addition operation comprising at least one tissue; the obtaining, according to the set selection logic, a set of objects associated with the first object content includes:

5. The method according to any one of claim 2 to 4, wherein,

the object type is a user object, and the set selection logic includes at least: any level or multiple levels of the user object belong to any level or multiple levels of the user object; or (b)

6. A rights management method, comprising:

receiving an addition determination instruction, and storing the association relation between the object type and the object group for the set selection description of the object content;

rights to the object group are managed.

7. The method of claim 6, further comprising, prior to said receiving the set selection description selected in the group addition interface:

receiving a type selection operation of the object group;

8. The method of claim 6, wherein the receiving the set selection description selected in the group addition interface comprises:

9. The method of claim 8, wherein receiving, via the set selection description acquisition interface, a selected set selection description comprises:

10. The method of claim 8, wherein obtaining object content corresponding to the object type through the object content obtaining interface comprises:

11. The method according to any of claims 6-10, wherein managing rights of the set of objects comprises:

12. The method according to any one of claims 6 to 10, wherein,

13. A rights management unit, comprising:

14. The apparatus of claim 13, wherein the apparatus further comprises:

15. The apparatus of claim 14, wherein the apparatus further comprises:

16. The apparatus of claim 15, wherein the apparatus further comprises: a tissue augmentation operation receiving module configured to perform a receiving tissue augmentation operation, the tissue augmentation operation comprising at least one tissue; the object set acquisition module is configured to perform:

17. The device according to any one of claims 14 to 16, wherein,

18. A rights management unit, comprising:

19. The apparatus of claim 18, wherein the apparatus further comprises:

20. The apparatus of claim 18, wherein the set description receiving module comprises:

The object content receiving module includes:

21. The apparatus according to claim 20, wherein the set description receiving unit is specifically configured to perform:

22. The apparatus according to claim 20, wherein the object content acquisition unit is specifically configured to perform:

23. The apparatus according to any of claims 18-22, wherein the rights management module is specifically configured to perform:

24. An electronic device, comprising:

a processor;

a memory for storing the processor-executable instructions;

wherein the processor is configured to execute the instructions to implement the rights management method of any one of claims 1 to 5 or to implement the rights management method of any one of claims 6 to 12.

25. A computer readable storage medium, which when executed by a processor of an electronic device, causes the electronic device to perform the rights management method of any one of claims 1 to 5 or the rights management method of any one of claims 6 to 12.

26. A computer program product comprising a computer program or computer instructions which, when executed by a processor, implements the rights management method of any of claims 1 to 5 or implements the rights management method of any of claims 6 to 12.