Authorization processing method and device

Abstract

Disclosed are an authorization processing method and apparatus. The method comprises: organizing resource nodes to be authorized into a tree structure or a hierarchical structure; performing appointed authorization on an operation set selected from the resource nodes to be authorized; and subordinate nodes of the resource nodes subjected to appointed authorization in the tree structure or the hierarchical structure inheriting the operation set of the authorized resource nodes. By the means of the present invention, at least one of the following problems, such as an inflexible authorization method, non-visual authority displaying and a large authority quantity during role authorization in the relevant art is solved, so that the effects of providing a flexible authorization method, visual authority displaying and better authority storage method are achieved.

Description

technical field [0001] The present invention relates to the communication field, in particular to an authorization processing method and device. Background technique [0002] In the telecommunications network management system, access control for users generally adopts role-based access control (RBAC for short), that is, permissions are assigned to roles, and users have the permissions of the role by associating with a role. . When a user logs in to the system, since the user is associated with a certain role, only the resources restricted by the role can be allowed to operate, so as to achieve the purpose of access control. The process of creating roles and associating roles to users is called authorization. The RBAC model provides the flexibility of permission control. Permissions are abstracted to roles, and users are no longer directly granted permissions, but are granted permissions through roles. Users and roles form a many-to-many mapping relationship. For the grant...

AI Technical Summary

Problems solved by technology

[0008] Through the above steps, the role authorization method in the related technology solves the problem of massive resources and operation authorization by establishing an operation set and a resource set, but there are also some problems in the above method, for example, 1. When the resource changes, it cannot automatically Obtain or cancel operation permissions, for example: when resources are added, the added resources cannot automatically obtain permissions, and the resource set must be manually modified to add new resources to the resource set; when resources are deleted, the deleted resources cannot automatically cancel permissions, The resource set must be manually modified to delete resources from the resource set; 2. It is impossible to visually display the permissions granted by each resource on the resource tree

Because the operation set is granted to the resource set instead of a single resource, it is impossible to visually display the operation set granted to each resource on the resource tree; 3. When the number of resources is huge, such as when the number of resources reaches 100,000, Each resource set needs to persist a large amount of data

Once the number of resource sets is large, the entire data volume becomes very large, basically unable to cache in memory, and must be read through the database, resulting in low authentication efficiency

[0009] Therefore, in related technologies, at least one of the following problems exists when performing role authorization: the authorization method is not flexible, the permission display is not intuitive, and the problem of a huge number of permissions

Images