CN113935053A

CN113935053A - Dual-authority control method and system based on management system

Info

Publication number: CN113935053A
Application number: CN202111195796.7A
Authority: CN
Inventors: 黄文迪; 段海波; 汤德昆
Original assignee: Bairong Yunchuang Technology Co ltd
Current assignee: Bairong Yunchuang Technology Co ltd
Priority date: 2021-10-14
Filing date: 2021-10-14
Publication date: 2022-01-14

Abstract

The invention discloses a dual authority control method and a system based on a management system, wherein the method comprises the following steps: acquiring a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to acquire a first sorting result; generating a first authority management module according to the first sorting result; role hierarchy information of a first user is obtained; based on the first authority management module, carrying out authority configuration according to the role hierarchy information to obtain a first configuration result; and managing the system based on the first configuration result. The technical problems that in the prior art, the authority cannot be controlled in time, expansion is not easy to occur, and personalized operation of a user cannot be met are solved.

Description

Dual-authority control method and system based on management system

Technical Field

The invention relates to the technical field of authority management, in particular to a dual-authority control method and system based on a management system.

Background

With the gradual development and growth of companies and the increase of business requirements, the digital management of the interior and the business of the companies is urgent, and a management system is generated. The control of rights and security in a management system are very important, and it can be said that core functions must be considered and built at the beginning of a project. However, the problems that developers have more repeated work, cannot control the authority in time, and the user operation authority has no pertinence exist. Therefore, it is necessary to design an authority control method based on a management system to ensure the security of system data.

In the process of implementing the technical scheme of the invention in the embodiment of the present application, the inventor of the present application finds that the above-mentioned technology has at least the following technical problems:

in the prior art, the authority cannot be controlled in time, the expansion is not easy, and the technical problem of user personalized operation cannot be met.

Disclosure of Invention

The embodiment of the application provides a dual authority control method and system based on a management system, and solves the technical problems that the authority cannot be controlled in time, the expansion is not easy, and the personalized operation of a user cannot be met in the prior art. The dual authority control based on the management system is achieved, the authority control is simplified, the superior user can set the authority of the subordinate user, the authority module can be packaged into a public module plug-in, the system is convenient to expand, the current login user can only see the content with the authority, and the safety of the system is enhanced.

In view of the foregoing problems, embodiments of the present application provide a dual authority control method and system based on a management system.

In a first aspect, the present application provides a dual authority control method based on a management system, where the method includes: acquiring a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to acquire a first sorting result; generating a first authority management module according to the first sorting result; role hierarchy information of a first user is obtained; based on the first authority management module, carrying out authority configuration according to the role hierarchy information to obtain a first configuration result; and managing the system based on the first configuration result.

On the other hand, the application also provides a dual authority control system based on the management system, wherein the system comprises: the first obtaining unit is used for obtaining a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to obtain a first sorting result; the first execution unit is used for generating a first authority management module according to the first sorting result; a second obtaining unit configured to obtain role hierarchy information of the first user; a third obtaining unit, configured to perform permission configuration according to the role hierarchy information based on the first permission management module, and obtain a first configuration result; and the second execution unit is used for managing the system based on the first configuration result.

On the other hand, an embodiment of the present application further provides a dual-authority control method and system based on a management system, including a memory, a processor, and a computer program stored on the memory and executable on the processor, where the processor implements the steps of the method according to the first aspect when executing the program.

One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

the embodiment of the application provides a dual authority control method and a dual authority control system based on a management system, wherein a first sorting instruction is obtained, and authority control related information is sorted according to the first sorting instruction to obtain a first sorting result; generating a first authority management module according to the first sorting result; role hierarchy information of a first user is obtained; based on the first authority management module, carrying out authority configuration according to the role hierarchy information to obtain a first configuration result; and managing the system based on the first configuration result. The technical problems that in the prior art, the authority cannot be controlled in time, expansion is not easy to occur, and personalized operation of a user cannot be met are solved. The dual authority control based on the management system is achieved, the authority control is simplified, the superior user can set the authority of the subordinate user, the authority module can be packaged into a public module plug-in, the system is convenient to expand, the current login user can only see the content with the authority, and the safety of the system is enhanced.

The foregoing is a summary of the present disclosure, and embodiments of the present disclosure are described below to make the technical means of the present disclosure more clearly understood.

Drawings

Fig. 1 is a schematic flowchart illustrating a dual-authority control method based on a management system according to an embodiment of the present application;

fig. 2 is a schematic flowchart illustrating a process of generating a first rights management module in a dual rights control method based on a management system according to an embodiment of the present application;

fig. 3 is a schematic flowchart illustrating a process of obtaining the first configuration result of a role corresponding to the role hierarchy information in a dual authority control method based on a management system according to an embodiment of the present application;

fig. 4 is a schematic flowchart illustrating content display for a user in a dual-authority control method based on a management system according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a dual-authority control system based on a management system according to an embodiment of the present application;

fig. 6 is a schematic structural diagram of an exemplary electronic device according to an embodiment of the present application.

Description of reference numerals: the device comprises a first obtaining unit 11, a first executing unit 12, a second obtaining unit 13, a third obtaining unit 14, a second executing unit 15, an electronic device 300, a memory 301, a processor 302, a communication interface 303 and a bus architecture 304.

Detailed Description

Hereinafter, example embodiments of the present application will be described in detail with reference to the accompanying drawings, and it is apparent that the described embodiments are only some embodiments of the present application and not all embodiments of the present application, and it is to be understood that the present application is not limited by the example embodiments described herein.

Summary of the application

In view of the above technical problems, the technical solution provided by the present application has the following general idea:

the application provides a dual authority control method based on a management system, wherein the method comprises the following steps: acquiring a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to acquire a first sorting result; generating a first authority management module according to the first sorting result; role hierarchy information of a first user is obtained; based on the first authority management module, carrying out authority configuration according to the role hierarchy information to obtain a first configuration result; and managing the system based on the first configuration result.

Having thus described the general principles of the present application, various non-limiting embodiments thereof will now be described in detail with reference to the accompanying drawings.

Example one

As shown in fig. 1, an embodiment of the present application provides a dual authority control method based on a management system, where the method includes:

step S100: acquiring a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to acquire a first sorting result;

specifically, the management system is used for controlling the use permission of different users, so as to ensure that different user roles can possess targeted permission. The related information of the authority control refers to a route and an operation button which need the authority control. The method comprises the steps that when a front end develops a project function, a file is generated, the file comprises a route needing to set a right in the project, an operation button and an interface address related to the operation, the interface address capable of being called is bound on a menu name or the button and is not displayed on a page, and when the menu name or the operation button is clicked, the related interface can be called; and the authority setting is carried out on the route, so that some private data can be ensured not to be revealed. And the related information of the authority control is arranged so that the system can manage the users with different authorities.

Step S200: generating a first authority management module according to the first sorting result;

step S300: role hierarchy information of a first user is obtained;

specifically, the first authority management module is used for performing module management according to the required authorities owned by different roles, a page module for authority management is added at the front end, a drop-down frame is arranged in a page, selection can be performed according to different user attributes in the drop-down frame, and the name of a menu and an operation button in the current menu are displayed below the drop-down frame. The role hierarchy information of the first user refers to that the users are layered according to the available authority, such as a manager hierarchy, a group leader hierarchy, a service staff hierarchy and the like. And the user role hierarchy is different, and the use authority is different. The role hierarchy in user management is clear, so that subsequent management of roles in each hierarchy and setting of authority are facilitated, and in an authority management module of the system, the authority of lower-level personnel can be configured by the role hierarchy in the upper level. For example, the manager level can set the authority of the group leader and the business personnel level, the business personnel cannot set the authority of the manager or the group leader, and the system has double authority control, so that each user can only access the page with the authority and the api interface, and the system safety is improved.

Step S400: based on the first authority management module, carrying out authority configuration according to the role hierarchy information to obtain a first configuration result;

step S500: and managing the system based on the first configuration result.

Specifically, the first configuration result is obtained by matching different role hierarchies with the authority management hierarchy to obtain corresponding authority management modules, so that the system is managed by the corresponding authority management modules. After the user logs in, the front end carries out dynamic route generation and limitation of page operation buttons according to the returned authority, only displays menus and operation buttons accessible by the user, and the rear end provides a downward role list interface for acquiring the current role and a storage interface of an authority configuration file to carry out authority control on the subordinate role. In a management system with a permission control requirement, a permission management module can be added and can be packaged into a public module plug-in for each similar system, only the configuration file needs to be modified according to the current project function, and the configuration is carried out on a permission management page of the current system, so that the usability of the permission configuration of the system is enhanced.

Further, as shown in fig. 2, step S600 in the embodiment of the present application includes:

step S610: acquiring first system requirement information;

step S620: judging whether the system has the authority management requirement or not according to the first system requirement information;

step S630: and when the system has the authority management requirement, generating a first authority management module according to the first sorting result.

Specifically, the first system requirement information is requirement information that the system adjusts the authority control content based on the requirement of the system user on the system. If the system has the authority management requirement, the system indicates that the system has additional functional modules or user roles, developers are required to process all roles with authority of the modules, the contents of the newly-added functional modules or user roles are sorted and are respectively placed into a folder, and the contents of the newly-added functional modules or user roles are modified in the development process according to the sorting result.

Further, step S700 in the embodiment of the present application includes:

step S710: and when the system does not have the authority management requirement, the first authority management module is not generated.

Specifically, if the system has the requirement of authority management, the system is indicated to have added functional modules or user roles, the contents of the added functional modules or user roles are sorted, and the configuration files of the contents of the added functional modules or user roles are modified in the system according to the sorting result; if the system does not have the authority management requirement, a new module or a new user role is not needed to be added to the system, no new content is generated, the system is enabled to configure the authority management module according to the original arrangement result, the usability of the system authority configuration is enhanced, and the system can respond to the requirement.

Further, in the above, where the permission configuration is performed according to the role hierarchy information based on the first permission management module to obtain a first configuration result, step S400 in this embodiment of the present application includes:

step S410: judging whether the role hierarchy information has the authority of authority management;

step S420: and when the role hierarchy information has the authority management authority, performing authority configuration according to the role hierarchy information based on the first authority management module to obtain a first configuration result.

Specifically, if permission configuration is performed according to the role hierarchy information based on the first permission management module, and a first configuration result is obtained, permission management needs to be performed on the role hierarchy. If the role hierarchy information has the authority for authority management, the role hierarchy information is matched according to the authority information owned by the role hierarchy, so that a corresponding authority configuration result is obtained, the safety of the system is enhanced, and the current login user can only see the content with the authority.

Further, as shown in fig. 3, step S800 in the embodiment of the present application includes:

step S810: obtaining sub-level role information of the role hierarchy;

step S820: acquiring sub-hierarchy configuration authority according to the sub-hierarchy role information;

step S830: and obtaining the first configuration result of the role corresponding to the role hierarchy information according to the sub-hierarchy configuration authority.

Specifically, the sub-level role information refers to information of all different roles, including manager level, group leader level, business personnel level, and the like. The user management has clear roles, and different sub-levels have different authorities, so that the authorities are configured corresponding to the different sub-levels. The manager level has more system management authorities than the group leader level and the service personnel level, and the authorities of the group leader and the service personnel level can be set, so that leaders of all levels can conveniently carry out authority configuration on all modules of subordinate, the operation is simple and convenient, and the operation is carried out in the authority management module of the current system, so that the authority management module can take effect in time.

Further, as shown in fig. 4, step S900 in the embodiment of the present application further includes:

step S910: obtaining login information of a first login user;

step S920: acquiring authority information of the first login user according to the login information;

step S930: and displaying the content of the user according to the authority information.

Specifically, the login information of the first login user includes a user name, a role, current routing information, and the like. The method comprises the steps that a token is returned by a server after logging in, a page module for authority management appears at the front end of a system, a settable role drop-down box is arranged in a page, all personnel under the role can be displayed by selecting the role, the name of a menu and an operation button in the current menu are displayed at the lower part, a user selects the role grade of the user according to the authority of the user, the front end obtains user information through the token, the user information comprises basic user information and the routing authority of the page, the menu accessible to the current user is generated by the front end through the obtained dynamic use authority of the user, the format of a configuration file of the menu is fixed, but the page style can be displayed in a diversified mode according to the user requirements, and further the user experience is improved.

Further, step S100 in the embodiment of the present application includes:

step S100 a: the information related to the authority control includes a route and an operation button which require the authority control.

Specifically, for system development, there is usually a problem of restriction of accessing pages with different rights, and people with different identities can see different menus and enter different routing pages after entering the system. The routing needing authority control can be controlled by the steps that after login succeeds, the system obtains the role of the current user, dynamic analysis is carried out in routing configuration, routing matching which can be accessed by the current user is established, user information such as name, role and the currently used routing is stored in vuex, a menu is further generated, and the fact that the user routing has authority is guaranteed to be controlled. The operation buttons are set entries of each module in the page, each operation button has meaning, and the modules can be managed according to the text description on the button. The routing and operation buttons which need to be controlled by the authority can improve the safety of the system and can also enable the system to manage users with different authorities.

To sum up, the dual authority control method based on the management system provided by the embodiment of the application has the following technical effects:

the application provides a dual authority control method based on a management system, wherein the method comprises the following steps: acquiring a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to acquire a first sorting result; generating a first authority management module according to the first sorting result; role hierarchy information of a first user is obtained; based on the first authority management module, carrying out authority configuration according to the role hierarchy information to obtain a first configuration result; and managing the system based on the first configuration result. The technical problems that in the prior art, the authority cannot be controlled in time, expansion is not easy to occur, and personalized operation of a user cannot be met are solved. The dual authority control based on the management system is achieved, the authority control is simplified, the superior user can set the authority of the subordinate user, the authority module can be packaged into a public module plug-in, the system is convenient to expand, the current login user can only see the content with the authority, and the safety of the system is enhanced.

Example two

Based on the same inventive concept as the dual authority control method based on the management system in the foregoing embodiment, the present invention further provides a dual authority control system based on the management system, as shown in fig. 5, the system includes:

a first obtaining unit 11, where the first obtaining unit 11 is configured to obtain a first sorting instruction, and sort the permission control related information according to the first sorting instruction to obtain a first sorting result;

a first execution unit 12, where the first execution unit 12 is configured to generate a first authority management module according to the first sorting result;

a second obtaining unit 13, where the second obtaining unit 13 is configured to obtain role hierarchy information of the first user;

a third obtaining unit 14, where the third obtaining unit 14 is configured to perform, based on the first authority management module, authority configuration according to the role hierarchy information, to obtain a first configuration result;

a second executing unit 15, where the second executing unit 15 is configured to perform system management based on the first configuration result.

Further, the system further comprises:

a fourth obtaining unit, configured to obtain the first system requirement information;

the first judging unit is used for judging whether the system has the authority management requirement according to the first system requirement information;

and the third execution unit is used for generating a first authority management module according to the first sorting result when the system has the authority management requirement.

Further, the system further comprises:

a fourth execution unit, configured to not generate the first rights management module when the system does not have a rights management requirement.

Further, the system further comprises:

a second judging unit, configured to judge whether the role-level information has an authority for authority management;

a fifth obtaining unit, configured to, when the role hierarchy information has a right for right management, perform right configuration according to the role hierarchy information based on the first right management module, and obtain a first configuration result.

Further, the system further comprises:

a sixth obtaining unit, configured to obtain sub-level role information of the role hierarchy;

a seventh obtaining unit, configured to obtain a sub-level configuration permission according to the sub-level role information;

an eighth obtaining unit, configured to obtain the first configuration result of the role corresponding to the role hierarchy information according to the sub-hierarchy configuration authority.

Further, the system further comprises:

a ninth obtaining unit configured to obtain login information of a first login user;

a tenth obtaining unit, configured to obtain permission information of the first login user according to the login information;

and the fifth execution unit is used for displaying the content of the user according to the authority information.

Further, the system further comprises:

and the first containing unit is used for the authority control related information to comprise a route and an operation button needing authority control.

Exemplary electronic device

The electronic apparatus of the embodiment of the present application is described below with reference to fig. 6.

Based on the same inventive concept as the management system-based dual authority control method in the foregoing embodiment, the present application further provides a management system-based dual authority control system, including: a processor coupled to a memory, the memory for storing a program that, when executed by the processor, causes a system to perform the method of any of the first aspects.

The electronic device 300 includes: processor 302, communication interface 303, memory 301. Optionally, the electronic device 300 may also include a bus architecture 304. Wherein, the communication interface 303, the processor 302 and the memory 301 may be connected to each other through a bus architecture 304; the bus architecture 304 may be a peripheral component interconnect standard bus or an extended industry standard architecture bus, or the like. The bus architecture 304 may be divided into an address bus, a data bus, a control bus, and the like. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.

Processor 302 may be a CPU, microprocessor, ASIC, or one or more integrated circuits for controlling the execution of programs in accordance with the teachings of the present application. Communication interface 303, using any transceiver or the like, is used for communicating with other devices or communication networks, such as ethernet, wireless access networks, wireless local area networks, wired access networks, and the like. The memory 301 may be, but is not limited to, a ROM or other type of static storage device that can store static information and instructions, a RAM or other type of dynamic storage device that can store information and instructions, an electrically erasable programmable read only memory, a read only optical disk or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer. The memory may be self-contained and coupled to the processor through a bus architecture 304. The memory may also be integral to the processor.

The memory 301 is used for storing computer-executable instructions for executing the present application, and is controlled by the processor 302 to execute. The processor 302 is configured to execute the computer-executable instructions stored in the memory 301, so as to implement a dual-authority control method based on a management system provided by the above-mentioned embodiment of the present application.

Optionally, the computer-executable instructions in the embodiments of the present application may also be referred to as application program codes, which are not specifically limited in the embodiments of the present application.

The embodiment of the application solves the technical problems that in the prior art, the authority cannot be controlled in time, expansion is not easy, and personalized operation of a user cannot be met. The dual authority control based on the management system is achieved, the authority control is simplified, the superior user can set the authority of the subordinate user, the authority module can be packaged into a public module plug-in, the system is convenient to expand, the current login user can only see the content with the authority, and the safety of the system is enhanced.

Those of ordinary skill in the art will understand that: the various numbers of the first, second, etc. mentioned in this application are only used for the convenience of description and are not used to limit the scope of the embodiments of this application, nor to indicate the order of precedence. "and/or" describes the association relationship of the associated objects, meaning that there may be three relationships, e.g., a and/or B, which may mean: a exists alone, A and B exist simultaneously, and B exists alone. The character "/" generally indicates that the former and latter associated objects are in an "or" relationship. "at least one" means one or more. At least two means two or more. "at least one," "any," or similar expressions refer to any combination of these items, including any combination of singular or plural items. For example, at least one (one ) of a, b, or c, may represent: a, b, c, a-b, a-c, b-c, or a-b-c, wherein a, b, c may be single or multiple.

In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the application to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by wire or wirelessly. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device including one or more available media integrated servers, data centers, and the like. The usable medium may be a magnetic medium, an optical medium, a semiconductor medium, or the like.

The various illustrative logical units and circuits described in this application may be implemented or operated upon by design of a general purpose processor, a digital signal processor, an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof. A general-purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices, e.g., a digital signal processor and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a digital signal processor core, or any other similar configuration.

The steps of a method or algorithm described in the embodiments herein may be embodied directly in hardware, in a software element executed by a processor, or in a combination of the two. The software cells may be stored in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. For example, a storage medium may be coupled to the processor such the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium may be integral to the processor. The processor and the storage medium may reside in an ASIC, which may be disposed in a terminal. In the alternative, the processor and the storage medium may reside in different components within the terminal. These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

Although the present application has been described in conjunction with specific features and embodiments thereof, it will be evident that various modifications and combinations can be made thereto without departing from the spirit and scope of the application.

Accordingly, the specification and figures are merely exemplary of the present application as defined in the appended claims and are intended to cover any and all modifications, variations, combinations, or equivalents within the scope of the present application. It will be apparent to those skilled in the art that various changes and modifications may be made in the present application without departing from the scope of the application. Thus, if such modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is intended to include such modifications and variations.

Claims

1. A dual authority control method based on a management system, wherein the method comprises the following steps:

acquiring a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to acquire a first sorting result;

generating a first authority management module according to the first sorting result;

role hierarchy information of a first user is obtained;

based on the first authority management module, carrying out authority configuration according to the role hierarchy information to obtain a first configuration result;

and managing the system based on the first configuration result.

2. The method of claim 1, wherein the method further comprises:

acquiring first system requirement information;

judging whether the system has the authority management requirement or not according to the first system requirement information;

and when the system has the authority management requirement, generating a first authority management module according to the first sorting result.

3. The method of claim 2, wherein the method further comprises:

and when the system does not have the authority management requirement, the first authority management module is not generated.

4. The method of claim 1, wherein the performing the authority configuration based on the first authority management module according to the role hierarchy information to obtain a first configuration result further comprises:

judging whether the role hierarchy information has the authority of authority management;

and when the role hierarchy information has the authority management authority, performing authority configuration according to the role hierarchy information based on the first authority management module to obtain a first configuration result.

5. The method of claim 4, wherein the method further comprises:

obtaining sub-level role information of the role hierarchy;

acquiring sub-hierarchy configuration authority according to the sub-hierarchy role information;

and obtaining the first configuration result of the role corresponding to the role hierarchy information according to the sub-hierarchy configuration authority.

6. The method of claim 1, wherein the method further comprises:

obtaining login information of a first login user;

acquiring authority information of the first login user according to the login information;

and displaying the content of the user according to the authority information.

7. The method of claim 1, wherein the right control related information includes a route and an operation button requiring right control.

8. A dual authority control system based on a management system, wherein the system comprises:

the first obtaining unit is used for obtaining a first sorting instruction, and sorting the authority control related information according to the first sorting instruction to obtain a first sorting result;

the first execution unit is used for generating a first authority management module according to the first sorting result;

a second obtaining unit configured to obtain role hierarchy information of the first user;

a third obtaining unit, configured to perform permission configuration according to the role hierarchy information based on the first permission management module, and obtain a first configuration result;

and the second execution unit is used for managing the system based on the first configuration result.

9. A dual authority control system based on a management system, comprising: a processor coupled with a memory, the memory for storing a program that, when executed by the processor, causes a system to perform the method of any of claims 1-7.