Device and method for defining data access right and behavior right

Abstract

The invention provides a device for defining a data access right and a behavior right. The device comprises a data binding module, a right processing module and a data processing module, wherein the data binding module is used for linking a data object with a right data object through a binding channel established based on metadata of the data object; the right processing module is used for managing a right set and providing right creating, updating and verifying methods according to the link; and the data processing module is used for establishing a logic link for the data object and a right manager through an event handling or plug-in mechanism or service calling. The invention further provides a method for defining the data access right and the behavior right. According to the technical scheme, definitions of dynamic data access right and behavior right can be finished by sufficiently using static data access right and behavior right on the basis of a conventional defining mode of the data access right and the behavior right, and a general and unified defining thought which the dynamic data access right and behavior right participate in and faces control and dynamic extended data access right and behavior right is established.

Description

technical field [0001] The present invention relates to the technical field of data processing, in particular to a device for defining data access rights and behavior rights and a method for defining data access rights and behavior rights. Background technique [0002] In the case of rapid changes in data processing processes and functions and continuous improvement, users expect to support richer and more flexible permission control logic implementations while keeping data objects unchanged. The current general implementations have the following common characteristics: [0003] ⑴Use the management and control mode to describe the visible range of data in the design state; ⑵specify the control mode to which it belongs when defining the data, and determine the visible range of the data; ⑶Define the type of entrustment relationship between supported behavior organizations in the design state, use the entrustment relationship Define and implement the definition of behavior empo...

AI Technical Summary

Problems solved by technology

[0007] (1) When defining a data object, its visibility range needs to be determined, and the control mode is a predefined system parameter, which cannot support the differentiated requirements of the visibility range of different data

The reality is that the entrustment relationship between behavioral organizations is generally used for relatively stable business behaviors. For many temporary business behaviors, it needs to be temporarily specified according to specific data, which cannot be determined when defining data.

[0009] (3) In enterprise management software, there are often different visibility scopes and business behavior delegation rela...

Images