User access permission control method and device, electronic equipment and storage medium

Abstract

The invention relates to a user access permission control method and device, electronic equipment and a storage medium. The method comprises the steps of: receiving a query request of the access permission of a current user sent by a business management system, the query request comprising the identity of the current user; determining a target organization list which can be accessed by the current user according to the identity of the current user; and sending the target organization list to the business management system, so as to enable the business management system to screen out target data corresponding to the target organization list. The problems of data leakage and low data security of the business management system caused by the fact that a user randomly modifies the target organization list or maliciously modifies the target organization list by adopting other malicious tools are avoided.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a method, device, electronic equipment and storage medium for controlling user access rights. Background technique [0002] With the development of computer technology, more and more data needs to be viewed through the business management system. For a company's business management system, different users have different identities, and users with different identities have different access rights. For example, a regional manager in the business management system can see all branches or The sales situation of the branch, and a store manager in a certain region can only know the sales situation of the store. [0003] At present, when a user logs in to the business management system, an explicit parameter passing method is adopted, that is, the user selects the organization list with access rights on the front-end page, and then the back-end displays the corresponding data...

AI Technical Summary

Problems solved by technology

[0003] At present, when a user logs in to the business management system, an explicit parameter passing method is adopted, that is, the user selects the organization list with access rights on the front-end page, and then the back-end displays the corresponding data according to the organization list However, in this method, users may arbitrarily select the organization list to access data on the front-end page, or even select organization data that they do not have access to through other tools, resulting in unauthorized access, thereby reducing the data security of the business management system

Images