Method for managing user purview and judging user operation validity

Abstract

The invention provides a method for managing user authorizations and determining the validity of user operations, wherein, the method of managing user authorizations comprises the following steps: defining the authorization as roles of object authorization plus operation authorization, and user authorizations as the sum of authorization of each role thereof, and building corresponding relations between user authorizations and the roles thereof. The method for determining the validity of user operations includes: a system searches for a user's role from the corresponding relations after user authorizations are defined according to the above method and when the user executes an operation and determines whether the user is authorized for the operation according to role rights; if the user is authorized for the operation, the system permits the user to execute the operation; if the user is not authorized for the operation, the system does not permit the user to execute the operation. The invention has the advantages that the invention is much more convenient for the user to operate, simply realizes the fractionizing of user authorizations and easily determines whether a certain operation is valid when the user executes the operation.

Description

technical field [0001] The invention relates to safety management in the field of telecommunication network management, in particular to a method for effectively managing user rights and judging the legality of user operations. Background technique [0002] The International Telecommunication Union-Telecommunications Standards Sector (ITU-T) defined the TMN (Telecommunications Management Network) framework in 1988. The TMN framework is a reference model for telecommunication management methods. It organizes the network structure; abstracts the operation of each network element object; defines the CMIS protocol (common management protocol) for network management. [0003] According to this agreement, there are 7 types of operations (0peration) on network elements: Create (create), Delete (delete), Get (query), Set (modify), Cancel-Get (cancel query), Action (action), EventReport (event reporting). [0004] The network elements are organized according to the tree structure, ...

AI Technical Summary

Problems solved by technology

[0011] For another example, user A's object authority is BSC1, and then he has the operation authority of "Delete (ObjectClass) BTS", then A can delete all BTS permissions under BSC1, but cannot delete permissions under BSC2, because user A at this time BSC2 is not included in the object authority

[0012] Then the problem arises again: if user A needs to be able to modify the BTS under BSC2, then user A's object permissions must include BSC2, so user A's object list will have "BSC1; BSC2", because user A has "delete BTS" operation authority, so that user A can delete all BTS under BSC2, but maybe user A is not allowed to have the authority to delete BTS under BSC2, that is, user A is granted the operation that user A should not have.

Images