WO2018094962A1

WO2018094962A1 - Method, apparatus and system for migrating file permission

Info

Publication number: WO2018094962A1
Application number: PCT/CN2017/081337
Authority: WO
Inventors: 李学锋; 沈序建; 刘元兵
Original assignee: 华为技术有限公司
Priority date: 2016-11-25
Filing date: 2017-04-21
Publication date: 2018-05-31
Also published as: CN106649600A; CN106649600B

Abstract

A method, apparatus and system for migrating a file permission. The method comprises: a migration server reading first permission information about a file from a source device according to a first protocol (401); sending the first permission information to a target device according to the first protocol (402); the target device storing the first permission information (403); the migration server sending an instruction for locking permission switch to the target device (404); the migration server reading second permission information about the file from the source device according to a second protocol (405); sending the second permission information to the target device according to the second protocol (406); and the target device storing the second permission information, and keeping the first permission information unchanged according to the instruction for locking permission switch (407). The method solves the problem that permission information after file migration is inconsistent with permission information before file migration.

Description

Method, device and system for migrating file permissions

Technical field

The present invention relates to the field of computer technologies, and in particular, to a method, an apparatus, and a system for migrating file rights.

Background technique

The permission information of a file in the file system represents the operation authority of different users on the file. Some file systems support two or more protocols. Different protocols support different types of file permissions, so files in the file system can have two or more types of permissions.

When migrating files from a source device to a target device, you need to migrate the file's permission information to the target device. The migration of the rights information needs to be performed by the protocol supporting the rights information. When the file has the first rights information and the second rights information, the first rights information of the file needs to be migrated to the target device by using the first protocol that supports the first rights information. And migrating the second rights information to the target device by the second protocol supporting the second rights information.

The different types of rights information of the file are migrated to the target device. After obtaining the permission information of the device to be migrated to the target device later, the target device will perform the rights information migrated to the target device earlier based on the rights information migrated to the target device later. Update. For example, the target device converts the second permission information that is later migrated to the target device according to the inter-privilege conversion rule, obtains the converted first permission information, and replaces the first migration to the target device with the converted first permission information. Permission information.

However, different types of permission information of a file may contain different amounts of information, and rules for permission conversion between different vendors may be different, resulting in permission information that is migrated to the target device earlier according to the permission information that is later migrated to the target device. When the update is performed, the updated permission information is inconsistent with the permission information that was migrated to the target device earlier, and the permission information after the file migration is inconsistent with the permission information before the file migration.

Summary of the invention

The embodiment of the invention provides a method, a device and a system for migrating file rights, which are used to solve the problem that the rights information after file migration is inconsistent with the rights information before file migration.

In a first aspect, the embodiment of the present invention provides a method for migrating file permissions, where the migration server migrates the first permission information and the second permission information of the file in the source device to the target device, and the migration server can respectively pass the first The first protocol information includes the file rights supported by the first protocol, and the second rights information includes the file rights supported by the second protocol. The method includes the following steps: first, the migration server reads the first permission information of the file from the source device by using the first protocol, and sends the first permission information to the target device by using the first protocol; and, the migration server The target device sends an instruction for locking permission conversion, where the instruction for locking the right conversion is used to instruct the target device to keep the first permission information unchanged when receiving the second permission information of the file, where the The second rights information includes file rights supported by the second protocol; then, the migration server reads the second rights information of the file from the source device by using the second protocol, and The second authority information is sent to the target device; after receiving the second rights information, the target device keeps the first rights information unchanged according to the instruction of the lock permission conversion. The instruction that the migration server sends the lock permission conversion to the target device needs to send the second permission information earlier than the target device, and may send the first permission information earlier than the target device, or may send the first permission to the target device later. information.

In this implementation manner, the migration server respectively uses the first protocol and the second protocol to And the second privilege information is migrated from the source device to the target device, and before the second privilege information migrated to the target device is sent, the migration server sends an instruction for locking privilege conversion to the target device, indicating that the target device migrates after receiving the privilege In the second privilege information, the first privilege information that is migrated first is kept unchanged, and the privilege information of the file in the target device 300 caused by the target device retrieving the first privileged first privilege information according to the second privilege information migrated later is prevented. The problem that the permissions information of the files in the source device is inconsistent is consistent.

In an optional implementation manner, after receiving the second rights information, the target device saves the second rights information, and sends a rights migration success response to the migration server; the migration server receives the rights After the migration succeeds, the instruction for releasing the permission conversion lock is sent to the target device, where the instruction for releasing the permission conversion lock is used to instruct the target device to receive the second permission information of the file according to the The second authority information updates the first authority information of the file. In this implementation manner, after the migration server determines that the first permission information of the file and the second permission information are successfully migrated from the source device to the target device, the migration server sends an instruction for releasing the permission conversion lock to the target device, so that the user can file the file in the target device. After the second privilege information is updated, the target device can update the first privilege information of the saved file according to the updated second privilege information, and ensure that the first privilege information and the second privilege information of the file in the target device are represented. User permissions remain synchronized.

In an optional implementation manner, when the migration server sends the first permission information to the target device by using the first protocol, the data of the file is given to the target device. The implementation method can simultaneously implement the data of the file and the permission information of the file from the source device to the target device, thereby improving the efficiency of file migration.

In an optional implementation manner, when the migration server reads the first permission information from the source device by using the first protocol, sending, by the source device, a state lock instruction to the source device, The state locked instruction is used to instruct the source device to reject an update operation on data of the file, the first rights information of the file, and the second rights information of the file. The implementation manner can prevent the data of the file in the source device, the first permission information of the file, and the second permission information from being changed after the migration server reads the first permission information of the file from the source device, so as to avoid the data of the file in the migration server. Or the permission information of the file is migrated from the source device to the target device. The data of the file or the permission information of the file in the source device is changed, and the data of the file or the file in the target device is inconsistent with the permission information of the file. situation.

In an optional implementation manner, after the sending, by the second server, the second right information to the target device, the migration server sends an instruction to release the state lock to the source device, where The instruction to release the state lock is used to instruct the source device to accept an update operation on the file, the first rights information of the file, and the second rights information of the file. In this implementation manner, after the rights information of the file is migrated to the target device, the state locking of the file and the permission information of the file in the source device is released, so that the user can update the data of the file or the permission information of the file.

In an optional implementation manner, when the migration server reads the second rights information from the source device by using the second protocol, the data of the file is read from the source device; When the migration server sends the second permission information to the target device by using the second protocol, and the data of the file is sent to the target device; the target device receives the file, and determines whether The file is stored, and if so, the file is not saved, otherwise the file is saved. In this implementation manner, the migration server can migrate the data of the changed file to the target device after the data of the file in the source device is changed, and ensure that the data of the file in the target device and the permission information of the file are consistent with the source device.

In an optional implementation manner, the first protocol may be a Server Message Block (SMB). Protocol, the first permission information is an Access Control List (ACL) information supported by the SMB protocol; the second protocol may be a Network File System (NFS) protocol, and the second permission information is used for permission control. Mode information. Alternatively, the first protocol is an NFS protocol, the first permission information is Mode information used for rights control, the second protocol is SMB protocol, and the second rights information is ACL information.

In a second aspect, the embodiments of the present invention provide an apparatus for migrating file permissions, and the apparatus is used to implement the functions of the migration server in the first aspect or any possible implementation of the first aspect. In particular, the apparatus comprises means for performing the steps performed by the migration server in the method of any of the first aspect or any of the possible implementations of the first aspect described above.

In a third aspect, an embodiment of the present invention provides an apparatus for migrating file permissions, and the apparatus is used to implement the functions of the migration server in the first aspect or any possible implementation of the first aspect. In particular, the apparatus comprises means for performing the steps performed by the target device in the method of any of the first aspect or the first aspect of the first aspect described above.

In a fourth aspect, the embodiment of the present invention provides a migration server, which is used to implement the function of the migration server in the first aspect or any possible implementation of the first aspect. Specifically, the migration server includes a first communication interface, a second communication interface, and a processor; the first communication interface is configured to communicate with the source device and the target device by using a first protocol; and the second communication interface is configured to The source device and the target device communicate with the second protocol; the processor is configured to: perform, by using the first communication interface and the second communication interface, the migration method by using the first aspect or any of the possible implementations of the first aspect Steps.

In a fifth aspect, an embodiment of the present invention provides a computing device, which is used to implement the functions of the target device in any possible implementation of the first aspect or the first aspect. Specifically, the computing device includes a processor, a memory, and a third communication interface, a fourth communication interface, where the third communication interface is configured to communicate with the migration server by using a first protocol, and the fourth communication interface is used for The migration server communicates with the second protocol; the processor is configured to: perform, by using the third communication interface and the fourth communication interface, the method in any of the foregoing first aspect or any possible implementation of the first aspect The target device performs the steps.

In a sixth aspect, the embodiment of the present invention provides a system for migrating file permissions, where the system includes a migration server, a source device, and a target device, where the source device is configured to store first permission information of the file and second permission information of the file; The migration server is configured to perform the steps of the first aspect or any of the possible implementations of the first aspect, wherein the target device is configured to perform the method of any of the first aspect or the first aspect of the first aspect. The step performed by the target device, thereby implementing the migration of the first permission information and the second permission information of the file in the source device to the target device.

In a seventh aspect, an embodiment of the present invention provides a computer readable medium for storing a computer program, the computer program comprising instructions for performing the method of the first aspect or any possible implementation of the first aspect.

Further on the basis of the implementations provided by the above aspects, the invention may be further combined to provide further implementation.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below.

1 is a schematic diagram of a file migration system according to an embodiment of the present invention;

2 is a schematic structural diagram of a migration server according to an embodiment of the present invention;

3 is a schematic structural diagram of a target device according to an embodiment of the present invention;

4 is a schematic flowchart of a method for migrating file permissions according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a further refinement process of a method for migrating file permissions according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic structural diagram of an apparatus 500 according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of a device 600 according to an embodiment of the present invention.

detailed description

Generally, the source device and the target device are devices of different vendors. It is difficult to directly transfer files and file permission information between devices of different vendors. The third-party migration server needs to implement the source device through a standard protocol supported by the source device and the target device. Migration of files and file permission information between target devices. Specifically, the migration server reads the file and the permission information of the file from the source device, and then writes the read file and the permission information of the file to the target device.

In the prior art, the migration of file permission information is usually performed as follows:

Mode 1, when the file system supports the first permission information and the second permission information of different types, the migration server migrates the first permission information from the source device to the target device by using the first protocol supporting the first permission information, and then the source device The first authority information obtained by the migration is converted to obtain the second authority information.

In the mode 2, the migration server first migrates the first rights information from the source device to the target device by using the first protocol that supports the first rights information, and then migrates the second rights information from the source device to the second device by using the second protocol that supports the second rights information. The target device, however, after obtaining the second permission information migrated, the target device updates the first rights information that is migrated first according to the second permission information, because the target device may default according to a type of the received file. The permission information updates the other types of permission information of the file, so that the user operation rights represented by the various types of permission information of the file are consistent. Therefore, the mode 2 is substantially the same as the mode 1, and the rights migration is implemented according to the rights information of the post migration.

However, the amount of information contained in the different types of rights information of the file may be different, and the rules for the rights conversion between different vendors are different. As a result, the rights information after the migration is inconsistent with the rights information before the migration.

For example, the first privilege information of the file is A1, the second privilege information of the file is B, and the second privilege information B is composed of B1 and B2, wherein, according to the conversion rule between the first privilege information and the second privilege information, A1 may Converted to B1, B1 can be converted to A1, so the amount of information of the first privilege is smaller than the amount of information of the second privilege. The migration server migrates the first privilege information A1 from the source device to the target device, and the target device converts the first privilege information A1 according to the privilege conversion rule to generate the second privilege information B1, and uses the generated second privilege information B1 as the target device. File permission information saved in . It can be seen that the second right information B1 saved by the target device is lost compared to the second right information B saved in the source device.

For example, when the conversion rule between the first authority information and the second authority information in the source device and the target device is different, the user updates the second authority information of the file in the source device to form the rights information B, and the source device is configured according to the The conversion rule 1 between the rights information and the second rights information converts the rights information B, generates the rights information A1, and uses the rights information A1 as the new first rights information. Then, the migration server migrates the rights information B to the target device, and the target device converts the rights information B according to the conversion rule 2 between the first rights information and the second rights information, generates the rights information A2, and uses the rights information A2 as a new The first permission information. It can be seen that the permission information in the target device is inconsistent with the permission information in the source device.

In order to solve the problem that the rights information after the file migration in the prior art is inconsistent with the rights information before the file migration, the embodiment of the present invention provides a method, an apparatus, and a system for file rights migration. The technical solutions of the embodiments of the present invention are described in detail below with reference to the accompanying drawings and specific embodiments.

1 is a schematic diagram of a file migration system according to an embodiment of the present invention. The system includes a migration server 100, a source device 200, and a target device 300. The migration server 100, the source device 200, and the target device 300 can each be a computing device of various types. Such as computers, tablets, smartphones, etc. The migration server 100, the source device 200, and the target device 300 jointly support at least two communication protocols. For convenience of description, in the embodiment of the present invention, the first protocol and the second protocol are jointly supported by the three as an example to explain the method for migrating file permissions. The first protocol supports the first permission information of the transfer file, and the second protocol supports the second permission information of the transfer file.

The source device 200 is configured to store first rights information of the file and second rights information of the file, where the first rights information includes file rights supported by the first protocol, and the second rights information includes file rights supported by the second protocol;

The migration server 100 is configured to: read the first permission information of the file from the source device by using the first protocol, and send the first permission information to the target device by using the first protocol;

The target device 300 is configured to: receive, by using the first protocol, the first rights information sent by the migration server 100, and save the first rights information;

The migration server 100 is further configured to: send an instruction for locking permission conversion to the target device 300, where the instruction for locking the rights conversion is used to indicate that the target device 300 keeps the first permission information unchanged when receiving the second permission information of the file;

The target device 300 is further configured to: receive an instruction for the lock permission conversion;

The migration server 100 is further configured to: read the second permission information of the file from the source device 200 by using the second protocol, and send the second permission information to the target device 300 by using the second protocol;

The target device 300 is further configured to: receive the second permission information, and keep the first permission information unchanged according to the instruction of the locked permission conversion.

In the above file migration system, the migration server 100 migrates the first permission information and the second permission information of the file from the source device 200 to the target device 300 through the first protocol and the second protocol, respectively, and the second rights information to be migrated later Before being sent to the target device 300, the migration server 100 sends an instruction to lock the rights conversion to the target device 300, indicating that the target device 300 keeps the first rights information that is migrated first after receiving the second rights information that is migrated later, and avoids the target. After the device 300 updates the first rights information that is migrated first, the device 300 does not match the rights information of the files in the source device 200 and the file information in the source device 200, and implements the files before and after the migration. Permission information remains the same.

Optionally, in the file migration system, the target device 300 is further configured to: save the second permission information, and send a permission migration success response to the migration server 100;

The migration server 100 is further configured to: receive the permission migration success response, and send an instruction for releasing the rights conversion lock to the target device 300, where the instruction for releasing the rights conversion lock is used to indicate that the target device 300 is receiving the second rights information of the file. And updating the first permission information of the file according to the second permission information.

After the migration server determines that the first permission information of the file and the second permission information are successfully migrated from the source device to the target device, the migration device sends an instruction to release the permission conversion lock to the second permission information of the file in the target device. After the update, the target device can update the first permission information of the saved file according to the updated second permission information, and ensure that the first permission information of the file in the target device is synchronized with the user authority represented by the second permission information. .

Referring to FIGS. 1 and 2, the migration server 100 includes a processor 110, a memory 120, a first communication interface 130, and a second communication interface 140.

The first communication interface 130 is configured to communicate with the source device 200 and the target device 300 based on the first protocol; The second communication interface 140 is configured to communicate with the source device and the target device based on the second protocol. Specifically, the first communication interface 130 communicates with the fifth communication interface 230 in the source device 200 based on the first protocol, and communicates with the third communication interface 330 in the target device 300 based on the first protocol; the second communication interface 140 and the source The sixth communication interface 240 in the device 200 communicates based on the second protocol and communicates with the fourth communication interface 340 in the target device 300 based on the first protocol.

The memory 120 is configured to store data of the file, file permission information, and instructions; the processor 110 is configured to execute instructions in the memory 120 to perform the following steps when executing the instructions:

Reading the first authority information of the file from the source device 200 through the first communication interface 130 in the first protocol, and transmitting the first rights information of the file to the target device 300 in the first protocol through the first communication interface 130; Reading the second right information of the file from the source device 200 in the second protocol through the second communication interface 140, and transmitting the second right information of the file to the target device 300 in the second protocol through the second communication interface 140; Before transmitting the second right information of the file to the target device 300 through the second communication interface 140 in the second protocol, the instruction for locking the right conversion is transmitted to the target device 300 through the first communication interface 130 or the second communication interface 140, the locking The privilege conversion instruction is used to indicate that the target device 300 keeps the first privilege information of the file unchanged when receiving the second privilege information of the file.

Optionally, any one of the first communication interface 130 and the second communication interface 140 is further configured to: receive a rights migration success response sent by the target device 300, where the rights migration success response is performed by the processor 310 of the target device 300 at the target device 300. After the second permission information is saved, it is generated;

The processor 110 is further configured to: generate an instruction for releasing the privilege conversion lock, and the instruction for releasing the privilege conversion lock is used to indicate that the target device updates the first privilege information of the file according to the second privilege information when receiving the second privilege information of the file; And transmitting, by the first communication interface 130 or the second communication interface 140, the instruction to release the rights conversion lock to the target device 300.

Optionally, the processor 110 is further configured to: generate a state locked instruction, where the state locked instruction is used to instruct the source device to reject the data of the file, the first permission information of the file, and the update operation of the second permission information of the file; The state locked command is transmitted to the source device 200 through the first communication interface 130 or the second communication interface 140. The instruction that the migration server 100 sends the status lock to the source device 200 may be earlier than the first authority information read from the source device 200, or sent to the source device 200 when the request for reading the first rights information is sent. State locked instruction.

Optionally, the processor 110 is further configured to: after the second communication interface 140 sends the second permission information to the target device 300 by using the second protocol, generate an instruction for releasing the state lock, and the instruction for releasing the state lock is used to indicate the source device. An update operation of the first permission information of the file, the file, and the second authority information of the file is accepted; and the instruction to release the state lock is transmitted to the source device 200 through the first communication interface 130 or the second communication interface 140.

Referring to FIG. 1 and FIG. 3, the target device 300 includes a processor 310, a memory 320, a third communication interface 330, and a fourth communication interface 340.

The third communication interface 330 is configured to communicate with the migration server 100 based on the first protocol; the fourth communication interface 340 is configured to communicate with the migration server 100 based on the second protocol.

The memory 320 is configured to store data of the file, file authority information, and instructions; the processor 310 is configured to execute instructions in the memory 320 to first register the third communication interface 330 from the migration server 100 when the executed instruction is executed. The information is stored in the memory 320; and the second authority information of the file received by the fourth communication interface 340 from the migration server 100 is stored in the memory 320; and, in response to the third communication interface 330 or the fourth communication interface 340 The instruction of the lock authority conversion received by the migration server 100 keeps the first authority information of the file unchanged when the second authority information of the file is saved in the memory 320, and the instruction for the lock authority conversion is changed by the migration server. The processor 110 of 100 generates and the target device 300 receives the instruction to lock the rights conversion before receiving the second rights information.

Optionally, the processor 310 is further configured to: after the second privilege information of the file is saved in the memory 320, generate a privilege migration success response; and send the privilege migration success response through the third communication interface 330 or the fourth communication interface 340. To the migration server 100;

Any one of the third communication interface 330 or the fourth communication interface 340 is further configured to: receive an instruction to release the rights conversion lock from the migration server 100, the instruction to release the rights conversion lock is generated by the processor 110 of the migration server 100, for indicating The processor 310 updates the first rights information of the file according to the second rights information when the target device 300 receives the second rights information of the file.

Referring to FIG. 1 , in an embodiment of the present invention, the source device 200 includes a processor 210 , a memory 220 , a fifth communication interface 230 , and a sixth communication interface 240 . The implementation manner of the source device 200 can be determined according to the implementation manner of the foregoing target device 300. To avoid repetition, the implementation manner of the source device 200 will not be described in detail herein.

It should be noted that the processor 110, the processor 210, and the processor 310 may be one processing element or a collective name of multiple processing elements. The processor may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention, for example, : One or more microprocessors (Digital Singnal Processors, DSPs), or one or more Field Programmable Gate Arrays (FPGAs).

The memory 120, the memory 220, and the memory 320 may be one storage element or a collective name of a plurality of storage elements. The above memory may include a random access memory (RAM), and may also include a non-volatile memory (NVM), such as a disk memory, a flash memory, or the like.

The first communication interface 130 and the second communication interface 140 may be integrated into the same communication unit, or may belong to two independent communication units. Similarly, the fifth communication interface 230 and the sixth communication interface 240 may be integrated in the same communication unit, or may belong to two independent communication units. The third communication interface 330 and the fourth communication interface 340 may be integrated in the same communication unit, or may belong to two independent communication units.

The embodiment of the present invention further provides a method for migrating file permissions. The implementation of the migration server, the source device, and the target device in this embodiment may refer to FIG. 1 to FIG. 3. FIG. 4 is a schematic flowchart of the migration file permission method, and the method includes the following steps:

Step 401: The migration server reads the first permission information of the file from the source device by using the first protocol, where the first permission information includes file permissions supported by the first protocol.

Step 402: The migration server sends the first permission information to the target device by using the first protocol.

Step 403: The target device saves the first authority information.

Step 404: The migration server sends an instruction for locking permission conversion to the target device, where the instruction for locking the permission conversion is used to indicate that the target device keeps the first permission information when receiving the second permission information of the file, and the second permission includes the second protocol. Supported file permissions.

The migration server may send an instruction for locking permission conversion to the target device by using the first protocol, or may send an instruction for locking permission conversion to the target device by using the second protocol, or the migration server passes the first protocol and the second protocol. Other protocols send an instruction to lock the rights transfer to the target device.

Step 405: The migration server reads the second permission information of the file from the source device by using the second protocol.

Step 406: The migration server sends the second permission information to the target device by using the second protocol.

Step 407: The target device saves the second rights information, and keeps the first rights information unchanged according to the instruction of locking the rights conversion.

It should be noted that step 404 is performed before step 406, but the sequence between step 401, step 402, step 403 and step 405 is not limited. Step 404 may be step 401, step 402, step 403, step Executing before any of steps 405 and 406 may also be performed after any of steps 401, 402, 403, and 405 and before step 406. In addition, the file in the embodiment of the present invention is not limited to one file, and may be two or more files.

In the technical solution of the foregoing steps 401 to 407, the migration server first migrates the first permission information of the file from the source device to the target device by using the first protocol, and then migrates the second permission information of the file from the source device to the second device through the second protocol. Target device. Since the migration server migrates the second permission information of the file from the source device to the target device by using the second protocol, and sends an instruction for locking the rights conversion to the target device, the target device does not according to the second when receiving the second permission information. The permission information updates the first permission information of the saved file, so that the first permission information of the file in the target device is consistent with the first permission information of the file in the source device, and the second permission information and source of the file in the target device The second permission information of the file in the device is consistent, and the permission information of the file before and after the migration is consistent.

Optionally, in the embodiment of the present invention, the first protocol may be a server information block (SMB) protocol, and the first permission information is an access control list (ACL) information supported by the SMB protocol; The second protocol may be a Network File System (NFS) protocol, and the second permission information is Mode information for permission control. Alternatively, the first protocol is an NFS protocol, the first permission information is Mode information used for rights control, the second protocol is SMB protocol, and the second rights information is ACL information.

The manner in which the migration server reads the file and the file's permission information from the source device through the SMB protocol and the NFS protocol, and the file information of the file and the file to be sent to the target device through the SMB protocol and the NFS protocol, refer to the prior art. The technical means are not described in detail in the embodiments of the present invention.

Optionally, in the embodiment of the present invention, referring to FIG. 5, after step 407, the following steps are further included:

Step 408: The target device sends a permission migration success response to the migration server.

Step 409: The migration server receives the permission migration success response, and sends an instruction for releasing the permission conversion lock to the target device, and the instruction for releasing the permission conversion lock is used to indicate that the target device receives the second permission information of the file according to the second permission information. The first permission information is updated.

After receiving the permission response, the migration server determines that the permission of the file is successfully migrated, and sends an instruction to release the permission conversion lock to the target device, so that after the user updates the second permission information of the file in the target device, the target device can The updated second privilege information updates the first privilege information of the saved file to ensure that the first privilege information of the file in the target device is synchronized with the user privilege represented by the second privilege information.

Optionally, in the embodiment of the present invention, the instruction for locking the rights conversion is further used to indicate that the target device keeps the second permission information of the file when receiving the first permission information of the file; and the instruction for releasing the permission conversion lock is further And indicating, when the first device information of the file is received by the target device, updating the second rights information of the file according to the first rights information.

Optionally, in the embodiment of the present invention, when the migration server sends the first permission information to the target device by using the first protocol, the data of the file is sent to the target device. The migration server may read the data of the file from the source device when the first permission information is read from the source device by using the first protocol.

Or, when the migration server sends the second permission information to the target device by using the second protocol, the data of the file is given Target device. The migration server may read the data of the file from the source device when the second permission information is read from the source device by using the second protocol.

The implementation method can simultaneously implement the data of the file and the permission information of the file from the source device to the target device, thereby improving the efficiency of file migration.

Optionally, in the embodiment of the present invention, referring to FIG. 5, the method for migrating file permissions further includes the following steps:

Step 410: The migration server sends a state lock instruction to the source device, where the state lock instruction is used to instruct the source device to reject the update operation of the file, the first permission information of the file, and the second permission information of the file.

Step 410 may be performed before step 401. Or, in step 401, when the migration server sends a request for acquiring the first permission of the file to the source device by using the first protocol, the state lock command is sent to the source device.

The implementation manner can prevent the data of the file, the first permission information of the file, and the second permission information from being changed after the migration server reads the first permission information of the file from the source device, thereby avoiding the data or file of the file in the migration server. When the rights information is migrated from the source device to the target device, the data of the file or the permission information of the file in the source device is changed, and the data of the file or the file information of the file in the target device is inconsistent after the migration.

Optionally, in the embodiment of the present invention, in combination with the solution of step 410, after step 405, the method further includes the following steps:

Step 411: The migration server sends an instruction to release the state lock to the source device, and the instruction for releasing the state lock is used to instruct the source device to accept the update operation of the first permission information of the file, the file, and the second permission information of the file.

It should be noted that step 411 is limited to be executed after step 405, but the sequence between other steps performed after step 405 is not limited. Step 411 may be performed before step 406 or after step 409.

In this implementation manner, after the rights information of the file is migrated to the target device, the state locking of the file and the permission information of the file in the source device is released, so that the user can update the data of the file or the permission information of the file.

In another optional implementation manner of the embodiment of the present invention, after the migration server reads the first permission information of the file from the source device by using the first protocol, the user may perform an update operation on the file in the source device.

In step 405, when the migration server reads the second permission information from the source device by using the second protocol, the data of the file is read from the source device.

In step 406, when the migration server sends the second permission information to the target device by using the second protocol, the data of the file is sent to the target device;

After receiving the data of the file, the target device determines whether the data of the file has been saved, and if it has been saved, discards the data of the received file, and if not, saves the data of the file. The target device is to save the received data of the file, and includes two situations: first, the file is not saved in the target device; second, although the target device has saved the data of the file, the data of the saved file is The data of the received file is inconsistent.

In this implementation manner, the migration server can migrate the data of the changed file to the target device after the data of the file in the source device is changed, and ensure that the data of the file in the target device and the permission information of the file are consistent with the source device.

FIG. 6 is a schematic diagram of an apparatus 500 for migrating file rights according to an embodiment of the present invention. The apparatus 500 is used as a migration server, and is configured to migrate first rights information and second rights information of files in a source device to a target device. Apparatus 500 includes:

The first reading module 501 is configured to read the first permission information of the file from the source device by using the first protocol, where the first permission information includes file permissions supported by the first protocol;

The first sending module 502 is configured to send the first rights information to the target device by using the first protocol;

The second sending module 503 is configured to send an instruction for locking permission conversion to the target device, where the instruction for locking the rights conversion is used to indicate that the target device keeps the first permission information when receiving the second permission information of the file, and the second permission information Includes file permissions supported by the second protocol;

a second reading module 504, configured to read second permission information of the file from the source device by using the second protocol;

The third sending module 505 is configured to send the second rights information to the target device by using the second protocol.

Optionally, in the embodiment of the present invention, the apparatus 500 further includes:

The first receiving module 506 is configured to receive a permission migration success response sent by the target device.

The fourth sending module 507 is configured to send an instruction for releasing the rights conversion lock to the target device, where the instruction for releasing the rights conversion lock is used to indicate that the target device receives the second right information of the file, and the first file is based on the second right information. The permission information is updated.

Optionally, in the embodiment of the present invention, the first sending module 502 is further configured to: send data of the file to the target device by using the first protocol.

The fifth sending module 508 is configured to: when the first reading module reads the first permission information from the source device by using the first protocol, send a state locking instruction to the source device, where the state locking instruction is used to indicate that the source device rejects the file The data, the first permission information of the file, and the update operation of the second permission information of the file.

The sixth sending module 509 is configured to: after the third sending module sends the second right information to the target device by using the second protocol, send an instruction to cancel the state locking to the source device, where the instruction for releasing the state locking is used to indicate that the source device accepts the pair The file, the first permission information of the file, and the update operation of the second permission information of the file.

For the implementation of each module in the above device 500, reference may be made to the implementation of the steps performed by the migration server in FIGS. 4 and 5.

FIG. 7 is a device 600 for migrating file rights according to an embodiment of the present invention. The device 600 is used as a target device, and is configured to receive first rights information and second rights information of a file migrated from a source device from a migration server. Apparatus 600 includes:

The first receiving module 601 is configured to receive, by using the first protocol, the first rights information of the file from the migration server, where the first rights information includes file rights supported by the first protocol;

The second receiving module 602 is configured to receive an instruction for the lock permission conversion sent by the migration server, where the instruction for locking the rights conversion is used to instruct the device to keep the first permission information unchanged when receiving the second permission information of the file, and the second permission information Includes file permissions supported by the second protocol;

The third receiving module 603 is configured to receive second permission information of the file from the migration server by using the second protocol;

The instruction response module 604 is configured to: after the third receiving module receives the second permission information, keep the first permission information unchanged according to the instruction of locking the right conversion.

Optionally, in the embodiment of the present invention, the apparatus 600 further includes:

The sending module 605 is configured to send a permission migration success response to the migration server after the third receiving module receives the second permission information.

The fourth receiving module 606 is configured to receive an instruction for releasing the rights conversion lock sent by the migration server, where the instruction for releasing the rights conversion lock is used to instruct the device to receive the first right information of the file according to the second rights information. The permission information is updated.

The implementation of each module in the above device 600 can refer to the steps performed by the target device in FIG. 4 and FIG. Method to realize.

The embodiment of the invention further provides a computer readable medium for storing a computer program, the computer program comprising instructions for executing the file permission migration method corresponding to FIG. 4 and FIG.

Those skilled in the art will appreciate that embodiments of the embodiments of the invention may be provided as a method, system, or computer program product. Thus, embodiments of the invention may be in the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, embodiments of the invention may take the form of a computer program product embodied on one or more computer usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

Embodiments of the invention are described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowcharts and/or block diagrams, and combinations of flows and/or blocks in the flowcharts and/or <RTIgt; The instructions of these computer programs can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine such that instructions are executed by a processor of a computer or other programmable data processing device Means for implementing the functions specified in one or more flows of the flowchart or in a block or blocks of the flowchart.

It is apparent that those skilled in the art can make various modifications and variations to the embodiments of the invention without departing from the spirit and scope of the embodiments of the invention. Therefore, it is intended that the present invention cover the modifications and variations of the embodiments of the present invention.

Claims

A method for migrating file permissions, the method comprising:

The migration server reads the first permission information of the file from the source device by using the first protocol, where the first permission information includes file permissions supported by the first protocol;

Transmitting, by the migration server, the first rights information to the target device by using the first protocol;

The migration server sends an instruction for locking permission conversion to the target device, where the instruction for locking the rights conversion is used to indicate that the target device keeps the first permission information when receiving the second permission information of the file Changing, the second rights information includes file rights supported by the second protocol;

The migration server reads the second permission information of the file from the source device by using the second protocol, and sends the second permission information to the target device by using the second protocol;

After receiving the second rights information, the target device keeps the first rights information unchanged according to the instruction of the lock rights conversion.
The method of claim 1 further comprising:

The target device saves the second rights information, and sends a rights migration success response to the migration server;

The migration server receives the permission migration success response, and sends an instruction to release the rights conversion lock to the target device, where the instruction for releasing the rights conversion lock is used to indicate that the target device is receiving the second file. And the first right authority information of the file is updated according to the second authority information.
The method according to claim 1 or 2, further comprising:

When the migration server sends the first permission information to the target device by using the first protocol, the data of the file is given to the target device.
The method of claim 3, further comprising:

And when the migration server reads the first rights information from the source device by using the first protocol, sending, by the source device, a state lock instruction, where the state lock command is used to indicate that the source device rejects An update operation on data of the file, the first authority information of the file, and the second authority information of the file.
The method of claim 4, further comprising:

After the second server transmits the second rights information to the target device by using the second protocol, the migration server sends an instruction to release the state lock to the source device, where the command to release the state lock is used to indicate the The source device accepts an update operation on the file, the first rights information of the file, and the second rights information of the file.
The method according to any one of claims 1 to 5, wherein the first protocol is one of a server information block SMB protocol, a network file system NFS protocol, and the second protocol is another; When the first protocol is the SMB protocol, and the second protocol is the NFS protocol, the first rights information is access control list ACL information, and the second rights information is mode mode information used for rights control; When the first protocol is the NFS protocol and the second protocol is the SMB protocol, the first privilege information is Mode information used for privilege control, and the second privilege information is ACL information.
An apparatus for migrating file permissions, comprising:

a first reading module, configured to read first permission information of the file from the source device by using the first protocol, where the first permission information includes file permissions supported by the first protocol;

a first sending module, configured to send the first right information to the target device by using the first protocol;

a second sending module, configured to send, to the target device, an instruction for locking permission conversion, where the locking authority is converted The instruction is used to indicate that the target device keeps the first rights information unchanged when receiving the second rights information of the file, where the second rights information includes file rights supported by the second protocol;

a second reading module, configured to read the second permission information of the file from the source device by using the second protocol;

And a third sending module, configured to send the second right information to the target device by using the second protocol.
The device according to claim 7, further comprising:

a first receiving module, configured to receive a permission migration success response sent by the target device;

a fourth sending module, configured to send, to the target device, an instruction to release the rights conversion lock, where the instruction for releasing the rights conversion lock is used to instruct the target device to receive the second rights information of the file according to the The second rights information is updated to the first rights information of the file.
Device according to claim 7 or 8, characterized in that

The first sending module is further configured to: send the data of the file to the target device by using the first protocol.
The device according to claim 9, further comprising:

a fifth sending module, configured to send a state locking instruction to the source device when the first reading module reads the first permission information from the source device by using the first protocol, where the state The locked instruction is used to instruct the source device to reject an update operation on data of the file, the first permission information of the file, and the second permission information of the file.
The device according to claim 10, further comprising:

a sixth sending module, configured to send, after the third sending module sends the second right information to the target device by using the second protocol, to send an instruction to release the state locking to the source device, where the releasing The state locked instruction is used to instruct the source device to accept an update operation on the file, the first rights information of the file, and the second rights information of the file.
An apparatus for migrating file permissions, comprising:

a first receiving module, configured to receive, by using a first protocol, first rights information of a file from a migration server, where the first rights information includes file rights supported by the first protocol;

a second receiving module, configured to receive an instruction for locking authority conversion sent by the migration server, where the instruction for locking the rights conversion is used to indicate that the device keeps the first when receiving the second rights information of the file The permission information is unchanged, and the second permission information includes file permissions supported by the second protocol;

a third receiving module, configured to receive, by using the second protocol, the second right information of the file from the migration server;

The instruction response module is configured to: after the third receiving module receives the second permission information, keep the first permission information unchanged according to the instruction of the locking authority conversion.
The device according to claim 12, further comprising:

a sending module, configured to send a rights migration success response to the migration server after the third receiving module receives the second rights information;

a fourth receiving module, configured to receive an instruction for releasing the rights conversion lock sent by the migration server, where the instruction for releasing the rights conversion lock is used to instruct the device to receive the second rights information of the file according to the The second rights information is updated to the first rights information of the file.
A system for migrating file permissions, comprising: a migration server, a source device, and a target device;

The source device is configured to store first rights information of the file and second rights information of the file, where the first rights information includes file rights supported by the first protocol, and the second rights information includes file permission;

The migration server is configured to: read the first permission information of the file from the source device by using the first protocol, and send the first permission information to the target device by using the first protocol;

The target device is configured to: receive, by using the first protocol, the first rights information sent by the migration server, and save the first rights information;

The migration server is further configured to: send an instruction for locking permission conversion to the target device, where the instruction for locking the permission conversion is used to indicate that the target device maintains the first information when receiving the second permission information of the file A permission information is unchanged;

The target device is further configured to: receive the instruction for locking the right conversion;

The migration server is further configured to: read, by the second protocol, the second rights information of the file from the source device, and send the second rights information to the Target device

The target device is further configured to: receive the second permission information, and keep the first permission information unchanged according to the instruction for locking the right conversion.
The system of claim 14 further comprising:

The target device is further configured to: save the second rights information, and send a rights migration success response to the migration server;

The migration server is further configured to: receive the permission migration success response, and send an instruction for releasing the rights conversion lock to the target device, where the instruction for releasing the rights conversion lock is used to indicate that the target device is receiving the file. And the second rights information is updated according to the second rights information to the first rights information of the file.