Data permission management method and device, computer equipment and readable storage medium

Abstract

The invention provides a data permission management method, a data permission management device, computer equipment and readable storage medium. The data permission management method comprises the steps of determining a plurality of pre-stored data permission items corresponding to business object types and operating types according to the business object types and the operating types; calling a single permission string corresponding to each data permission item needing data permission in a plurality of data permission items, and generating a comprehensive permission string; returning the comprehensive permission string to a calling object, so as to call business object data corresponding to the plurality of data permission items. According to the technical scheme of the method and the device provided by the invention, the plurality of data permission items are objectified to the business object, so that the comprehensive permission string of the plurality of data permission items of the business object is acquired at a time, program resources are saved, concentrated management on the data permission is achieved, implementation of programming is facilitated without depending on thespecific function, modification and extension of the data permission are facilitated, and the strong flexibility is achieved.

Description

Technical field [0001] The present invention relates to the technical field of data management, in particular to a data authority management method, a data authority management device, a computer device and a computer-readable storage medium. Background technique [0002] In related technologies, the management of data permissions is relatively scattered. For example, the data permission control for document loading is written in the relevant module of the document, and the data permission control of the document list is written in the relevant module of the document list. All kinds of files must control the data read and write permissions, the report data processing must control the data permissions, and the data permissions must be controlled by referring to the production orders and batch production orders. Some control the read permission, and some control the write permission. As long as one record does not have permission to load the document, the entire document is not vis...

AI Technical Summary

Problems solved by technology

Some control the read permission, and some control the write permission. When loading a document, as long as there is a record without permission, the entire document is invisible. The document list only looks at the row records with permission. The control rules are different. The data on each document The items are not all the same. Some documents have this item, some documents do not have this item, some items are required on the document, and some items can be empty on the document. Different processing is required for authority control. Also, because of the different data sources, different prefixes should be added before the fields. The code processing is very complicated, and there will be many conditional branches. When modifying the code, you must be very careful and add a data permission control. The code needs to be modified in many places, and the data The modification and extension of permissions are less flexible, which affects development efficiency

[0003] ERP products have a large number of users. Some users control multiple data permissions at the same time. Some users have a large amount of data. Multiple data permissions are superimposed. In addition to the large amount of data, only a single data permission item is called sequentially, and the data call efficiency is improved. It is very low, and it is difficult to meet the needs of users. In addition, some permission strings use coded enumeration, some use subquery, and some use temporary tables. There are many branches of the code, and there are also risks when modifying the code. Not sure if it will affect other documents or other types of data access control, which is cumbersome

Images