Data filtering method and system based on user permission

Abstract

The invention discloses a data filtering method and system based on user permission, and the method comprises the steps: creating a permission organization table which is used for mapping the architecture of business organization nodes with different permissions in a business system; adding a permission attribution dimension column aiming at the business data table to describe a corresponding business organization node in a permission organization table to which the permission of each row of data belongs; when a current user executes data query or modification, generating an SQL statement according to a query or modification instruction; and according to the business organization node of the current user, adding a filtering condition aiming at the permission attribution dimension column in the SQL statement, and according to the filtering condition, limiting the data to be queried or modified to be the data owned by the current user to be the data owned by the data permission, and executing the modified query or modification instruction. Through the technical scheme of the invention, the memory occupation is reduced, the fine granularity and higher flexibility of authority control are maintained, the strong coupling of authority processing and business logic is reduced, and interference is avoided.

Description

technical field [0001] The invention relates to the technical field of databases, in particular to a data filtering method based on user authority and a data filtering system based on user authority. Background technique [0002] At present, the commonly used relational databases on the market provide a user authority management mechanism to isolate the data of database users with different authority at the storage level, or to isolate the data pairs of different tenants in the same database through the tenant function. Usually, when an enterprise develops its own business system, any system that needs to store user status, such as user registration and login, must implement the logical authority of the user in the system based on its own business, through the design of the authority system. Allow data within the permissions of users with different permissions. The scheme of the present invention is based on the level of database authority control, and realizes a more fine-...

AI Technical Summary

Problems solved by technology

[0003] Only through the user authority control mechanism provided by the database software, it cannot meet the business requirements to control the access to each piece of data in each data table, and the tenant function is not flexible enough, because the user authority changes dynamically when the system is running. Loading all the data that users can access into the memory and then filtering the data through logical judgment can achieve the goal, but it also causes waste of memory. The risk of unnecessary memory occupation is proportional to the size of the data. Serious will directly lead to memory overflow and cause the service to stop

Images