Multi-tenant permission system based on BRAC model

Abstract

The invention discloses a multi-tenant permission system based on a BRAC model, which associates tenants with permissions, and can set the maximum permissions owned by all users under the tenants by default in batches by directly allocating permissions to the tenants. The tenants are associated with the roles, and the permissions are allocated to the roles of the tenants, so that the permissions can be allocated to all users under the tenants in a personalized and batched manner. The data is related to the tenants, so that the data accessed by the user is the data under the tenants, the data under other tenant spaces cannot be accessed, and the data isolation effect is achieved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a multi-tenant authority system based on the BRAC model. Background technique [0002] Multi-tenancy is a software architecture technology that shares the same system or components in the case of multiple users and ensures the isolation of data between users. A system that supports multi-tenancy needs to design virtual partitions for data, so that each tenant of the system can use a separate system instance, and each tenant can personalize the tenant's system instance according to its needs. [0003] Currently commonly used permission management systems usually adopt the role-based permission control model (BRAC), which has the advantage of being able to manage user permissions in batches, but cannot achieve personalized distribution of permissions; there is also a purely user-based permission control , although the authority of a certain user can be specified individually, a ...

AI Technical Summary

Problems solved by technology

[0003] Currently commonly used permission management systems usually adopt the role-based permission control model (BRAC), which has the advantage of being able to manage user permissions in batches, but cannot achieve personalized distribution of permissions; there is also a purely user-based permission control , although the authority of a certain user can be specified individually, a complete authorization process can only solve the authority allocation of one user. In the case of a huge number of users, authority allocation will become a disaster

No matter which of the above methods is adopted, different users can only see different menus, but it cannot be achieved that different users can see data from different sources under the same menu, and the isolation of data between users cannot be guaranteed.

Images