Data authority control method and data authority control system based on RBAC (role-based access control) model extension

Abstract

The invention provides a data authority control method and a data authority control system based on RBAC (role-based access control) model extension and relates to the technical field of computers. The method includes: configuring corresponding relation of user objects and attributes and corresponding relation of the attributes with resource classes; and configuring corresponding relation of the resource classes with aspect classes. Based on the configurations, a data authority control process includes: when a user object of a login system sends an access request for requesting access to a resource class, intercepting the access request through the aspect class corresponding to the resource class; extracting attribute information of the user object to be assigned to a first object of the resource class by the aspect class according to the required attribute information corresponding to the resource class; and acquiring a data result set from a database by the resource class according to the attribute information of the first object. The method and the system aim at that service logic of resources is completely separated from data authority, flexibility of the system aiming at data authority control is improved, and the method and the system are high in expansibility, low in code redundancy and space-saving.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a data authority control method and system based on RBAC model extension. Background technique [0002] The construction of enterprise application systems involves authority management: one is function operation authority, and the other is data operation authority. Among them, functional authority can be understood as: what can be done, such as adding sales orders. Data permissions can be understood as: where and what can be done, such as checking the sales order of Zhang San of the Haidian Sales Department of the Beijing Branch. [0003] For authority control, the authority control system is basically built based on the RBAC (ROLE-BASED ACCESSCONTROL, role-based access control) model. refer to figure 1 , which is the core model of RBAC. In RBAC, permissions are associated with roles, and users gain the permissions of those roles by becoming members of the appropriate roles...

AI Technical Summary

Problems solved by technology

[0006] The technical problem to be solved by the present invention is to provide a data authority control method and system based on RBAC model expansion, which solves the problem of large code redundancy and inflexible data authority control when changing data authority under the original system architecture in the prior art , the system limitations are relatively large, and it cannot flexibly adapt to various changing business needs

Images