Resource allocation method and device, computer equipment and storage medium

Abstract

The invention provides a resource allocation method and device, computer equipment and a storage medium, and the method comprises the steps of obtaining a plurality of preset roles; determining a hierarchical relationship among a plurality of preset roles according to the role feature information of the preset roles; and based on the hierarchical relationship, allocating resource permissions to each preset role, the resource permissions of any two preset roles having the membership hierarchical relationship being included in the resource permissions of the preset roles having the high hierarchy, and the resource permissions of the preset roles having the low hierarchy. According to the embodiment of the invention, the authority management of the user is simplified and the system overhead is reduced by presetting a plurality of roles; when the user role is changed, other roles having a membership hierarchical relationship with the role do not need to be modified, so that the replicability of the operation is reduced; besides, when the resources corresponding to the roles are changed, only the resources of the preset roles with low hierarchies need to be adjusted, and the resources of the preset roles with high hierarchies do not need to be modified, so that the operation replicability is reduced, the resource management and control efficiency is improved, and the refined management and control of the resource permission is met.

Description

technical field [0001] The present disclosure relates to the field of computer technology, and in particular, to a resource allocation method, device, computer equipment and storage medium. Background technique [0002] In the process of project development, as the project progresses, different requirements are often put forward for resource permissions. The existing data model includes access control list (Access Control List, ACL) and role-based access control (RoleBase Access Control, RBAC) , however, the ACL model directly assigns resource permissions to each user. Therefore, every time a new user is created, it is necessary to assign permission operations, which makes the operation process complicated; in the RBAC model, roles are independent of each other. When permissions change At the same time, the corresponding resource permissions need to be changed repeatedly for roles with subordinate hierarchical relationships, which increases the duplication of operations; in ...

AI Technical Summary

Problems solved by technology

[0002] In the process of project development, as the project progresses, different requirements are often put forward for resource permissions. The existing data model includes access control list (Access Control List, ACL) and role-based access control (RoleBase Access Control, RBAC) However, the ACL model directly assigns resource permissions to each user. Therefore, every time a new user is created, it is necessary to assign permission operations, resulting in a complicated operation process; in the RBAC model, roles are independent of each other. When permissions change At the same time, it is necessary to repeatedly change the corresponding resource permissions for roles with subordinate hierarchical relationships, which increases the duplication of operations; in addition, for the complex relationship between multi-dimensional resources with subordinate relationships, the RBAC model cannot meet the fine-grained management and control of resources , such as assigning report information to users, but cannot accurately assign resource permissions corresponding to certain columns of information in the report to users. Therefore, only coarse-grained resource permission control effects can be achieved.

Images