Permissions configuration management system

Abstract

The invention relates to a permissions configuration management system, which belongs to the technical field of internet information technology. The system comprises a permissions definition module, a role definition module, a user definition module, a role and permissions relation maintaining module, a user and role relation maintaining module and an external interface module; the permissions definition module and the role definition module are connected through the role and permissions relation module; the data in the permissions definition module is stored in XML files; the data in the role definition module is stored in database; the data in the role and the permissions relation module is stored in the database; the role definition module and the user definition module are connected through the user and the role relation module; the data in the user definition module and the user and the role relation module are all stored in the database; and the external interface of the permissions system is connected with the database for transferring data of the database. The permissions configuration management system has a function of dynamically configuring permissions and is featured with simple configuration, strong extensibility and strong transferability.

Description

technical field [0001] The invention belongs to the field of Internet information technology, and in particular relates to a permission configuration system in enterprise-level applications. Background technique [0002] The permission configuration system is used to divide permissions into different roles one by one, just like assigning specific job responsibilities or content to a certain position in the real world, and then assigning specific positions to certain employees one by one. Before the subject performs an operation, first check whether the subject has the permission to perform the operation, that is, if there is an operation permission point, it will be executed if it has, otherwise it will not be executed. The authority point has multiple attributes, such as the authority point identifier (the unique identifier of the authority point), the authority point name, the affiliation relationship between each authority point, the authority point description, whether t...

AI Technical Summary

Problems solved by technology

However, this design pattern itself has certain limitations, namely:

[0004] 1. The maintenance of the permission table is cumbersome and not intuitive:

[0005] In the traditional application system, the definition of permissions requires the operator to maintain the data in the database table in the background (such as adding permissions, modifying permissions, deleting permissions, etc.), and the operation is cumbersome and not intuitive.

[0006] 2. The scalability is not strong:

[0007] In a traditional application system, when the table structure of the permission table needs to be modified or expanded, the corresponding system code needs to be rewritten and compiled, and the code on the application server needs to be updated, resulting in a large workload

[0008] 3. Portability is not strong:

[0009] In different systems, the requirements for permissions are different, so the table structure of the permission table is generally different. The problem brought about by this is that every time the system is developed, the code needs to be rewritten. The portability of the system is not strong, and the code cannot be reused.

Images