阅读说明：本技术 系统权限管控方法、数据中心、管控装置和存储介质 (System authority control method, data center, control device and storage medium ) 是由 徐莹 郑悦文 于 2021-07-16 设计创作，主要内容包括：本申请涉及一种系统权限管控方法、数据中心、管控装置和存储介质。系统权限管控方法,包括：获取人员变动信息,人员变动信息包括变动人员的人员信息以及变动人员的职位变动方式信息；根据人员信息,获取变动人员当前具有的权限接口；根据权限接口,判断变动人员是否具有当前对象系统的操作权限；如果变动人员具有当前对象系统的操作权限,则判断变动人员的职位变动方式是否为调职；如果变动人员的职位变动方式为调职,则发送通知信息,通知信息用于通知变动人员重新申请对当前对象系统的操作权限；如果变动人员未重新申请当前对象系统的操作权限,则根据变动人员的人员信息,删除当前对象系统的权限接口。该方法能够及时更改变动人员系统权限。(The application relates to a system authority control method, a data center, a control device and a storage medium. The system authority control method comprises the following steps: acquiring personnel change information, wherein the personnel change information comprises personnel information of changed personnel and position change mode information of the changed personnel; acquiring a current authority interface of a changed person according to the person information; judging whether the change personnel has the operation authority of the current object system or not according to the authority interface; if the change personnel has the operation authority of the current object system, judging whether the job position change mode of the change personnel is job adjustment; if the job change mode of the change personnel is job allocation, sending notification information, wherein the notification information is used for notifying the change personnel to reapply the operation authority of the current object system; and if the change personnel do not reapply the operation authority of the current object system, deleting the authority interface of the current object system according to the personnel information of the change personnel. The method can change the system authority of the changed personnel in time.)

1. A system authority control method is characterized by comprising the following steps:

acquiring personnel change information, wherein the personnel change information comprises personnel information of changed personnel and position change mode information of the changed personnel;

acquiring an authority interface currently possessed by the changed personnel according to the personnel information;

judging whether the change personnel has the operation authority of the current object system or not according to the authority interface;

if the change personnel has the operation authority of the current object system, judging whether the job position change mode of the change personnel is job adjustment;

if the job position change mode of the change personnel is job allocation, sending notification information, wherein the notification information is used for notifying the change personnel to reapply the operation authority of the current object system;

and if the change personnel do not reapply the operation authority of the current object system, deleting the authority interface of the current object system according to the personnel information of the change personnel.

2. The system privilege management and control method according to claim 1, wherein if the fluctuating person does not have the operation privilege of the current object system, the system privilege management and control is ended.

3. The system authority management and control method according to claim 1, wherein the staff change information further includes a job-adjusting mode, and if the job-adjusting mode of the staff change is job adjustment, sending notification information includes:

if the job change mode of the change personnel is job allocation, judging whether the job allocation mode is the in-base-level department transfer;

and if the job-scheduling mode is not scheduled in the basic department, sending the notification information.

4. The method according to claim 3, wherein if the role-transferring manner is intra-base department transfer, the system authority management is terminated.

5. The method as claimed in claim 3, wherein the sending the notification information if the job-scheduling mode is not scheduled in the base level department includes:

if the job-transferring mode is not the transfer in the basic department, judging whether the setting time of the transfer department is less than a first preset time;

and if the setting time of the calling-in department is not less than the first preset time, sending the notification information.

6. The method according to claim 5, wherein if the set time of the call-in department is less than a first preset time, the system permission management is ended.

7. The method according to claim 1, wherein if the job change mode of the changed staff is job allocation, after sending the notification information, the method further includes:

judging whether the notification information is processed or not;

and if the notification information is processed, ending the system authority management and control.

8. The system privilege management method of claim 7, wherein,

if the notification information is not processed, judging whether the acquisition time of the personnel change information exceeds a second preset time;

and if the acquisition time of the personnel change information exceeds second preset time, deleting the authority interface of the current object system according to the personnel information of the changed personnel.

9. The system authority management and control method according to claim 8, wherein if the acquisition time of the personnel change information does not exceed a second preset time, the notification information is sent again.

10. The system authority management and control method according to claim 1, wherein if the job change mode of the changed person is not job adjustment, all authority interfaces of the changed person are deleted according to the person information of the changed person.

11. The system authority management and control method according to claim 1, wherein if the job change mode of the changed staff is not job adjustment, when the acquisition time of the staff change information exceeds a third preset time, all authority interfaces of the changed staff are deleted according to the staff information of the changed staff.

12. A data center comprising a memory and a processor, the memory storing a computer program, wherein the processor when executing the computer program implements the steps of the method of any one of claims 1 to 11.

13. A management device, comprising:

a data center comprising a memory and a processor, the memory storing a computer program, characterized in that the processor, when executing the computer program, implements the steps of the method of any one of claims 1 to 11;

and the data acquisition system is electrically connected with the data center and is used for acquiring and sending the related information of the personnel change information to the data center.

14. The management and control device according to claim 13, wherein the data center includes a webserver or webapi, and the data collection system includes a personnel system.

15. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 11.

Technical Field

The present application relates to the field of rights management and control technologies, and in particular, to a system rights management and control method, a data center, a management and control device, and a storage medium.

Background

With the development of computer technology, various management systems related to company management have appeared. Various management systems generally set system permissions so that only users with the relevant permissions can access the management systems, thereby ensuring the security and other performances of the management systems.

Meanwhile, most companies are often faced with various personnel changes such as job adjustment and job leaving. At this time, if the system authority of the changed person cannot be changed in time, the confidentiality and misoperation of the company are greatly affected.

Disclosure of Invention

In view of the foregoing, it is desirable to provide a system authority management and control method, a data center, a management and control device, and a storage medium, which can change system authority of a changed person in time.

A system authority control method comprises the following steps:

acquiring personnel change information, wherein the personnel change information comprises personnel information of changed personnel and position change mode information of the changed personnel;

acquiring an authority interface currently possessed by the changed personnel according to the personnel information;

judging whether the change personnel has the operation authority of the current object system or not according to the authority interface;

if the change personnel has the operation authority of the current object system, judging whether the job position change mode of the change personnel is job adjustment;

if the job position change mode of the change personnel is job allocation, sending notification information, wherein the notification information is used for notifying the change personnel to reapply the operation authority of the current object system;

and if the change personnel do not reapply the operation authority of the current object system, deleting the authority interface of the current object system according to the personnel information of the change personnel.

In one embodiment, if the change staff does not have the operation authority of the current object system, the system authority management is ended.

In one embodiment, the staff change information further includes a job-adjusting mode, and if the job-adjusting mode of the changed staff is job adjustment, sending notification information includes:

if the job change mode of the change personnel is job allocation, judging whether the job allocation mode is the in-base-level department transfer;

and if the job-scheduling mode is not scheduled in the basic department, sending the notification information.

In one embodiment, if the job-adjusting mode is the intra-base-level department movement, the system authority control is ended.

In one embodiment, the sending the notification message if the job-scheduling mode is not scheduled in the base-level department includes:

if the job-transferring mode is not the transfer in the basic department, judging whether the setting time of the transfer department is less than a first preset time;

and if the setting time of the calling-in department is not less than the first preset time, sending the notification information.

In one embodiment, if the set time of the call-in department is less than a first preset time, the system authority management and control are ended.

In one embodiment, after sending the notification information if the job change mode of the changed staff is job allocation, the method further includes:

judging whether the notification information is processed or not;

and if the notification information is processed, ending the system authority management and control.

In one of the embodiments, the first and second electrodes are,

if the notification information is not processed, judging whether the acquisition time of the personnel change information exceeds a second preset time;

and if the acquisition time of the personnel change information exceeds second preset time, deleting the authority interface of the current object system according to the personnel information of the changed personnel.

In one embodiment, if the acquisition time of the personnel variation information does not exceed a second preset time, the notification information is sent again.

In one embodiment, if the job changing mode of the changed personnel is not job adjustment, all the authority interfaces of the changed personnel are deleted according to the personnel information of the changed personnel.

In one embodiment, if the job changing mode of the changed personnel is not job adjustment, when the acquisition time of the personnel change information exceeds a third preset time, all authority interfaces of the changed personnel are deleted according to the personnel information of the changed personnel.

A data center comprising a memory and a processor, the memory storing a computer program, wherein the processor implements the steps of any of the methods described above when executing the computer program.

A management device, comprising:

a data center comprising a memory and a processor, the memory storing a computer program, wherein the processor implements the steps of any of the methods described above when executing the computer program;

and the data acquisition system is electrically connected with the data center and is used for acquiring and sending the related information of the personnel change information to the data center.

In one embodiment, the data center comprises a webserver or webapi and the data acquisition system comprises a personnel system.

A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the method of any of the above.

According to the system authority control method, the data center, the control device and the storage medium, the system authority of the staff is effectively controlled, so that the staff reapplies the authority of the corresponding system after performing position movement, and the authority interface of the corresponding system is deleted when the staff does not reapply the operation authority of the current object system. Therefore, the embodiment can effectively ensure that the authority of each management system is only opened to required personnel, thereby effectively preventing misoperation risks and effectively ensuring the confidential security of companies.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments or the conventional technologies of the present application, the drawings used in the descriptions of the embodiments or the conventional technologies will be briefly introduced below, it is obvious that the drawings in the following descriptions are only some embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 to fig. 5 are schematic flowcharts of a system privilege management and control method in different embodiments;

FIG. 6 is a block diagram of a control device according to an embodiment.

Description of reference numerals:

description of reference numerals: 100-data center, 200-data acquisition system

Detailed Description

To facilitate an understanding of the present application, the present application will now be described more fully with reference to the accompanying drawings. Embodiments of the present application are set forth in the accompanying drawings. This application may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete.

Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein in the description of the present application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application.

It will be understood that the terms "first," "second," and the like as used herein may be used herein to describe various preset times, but these preset times are not limited by these terms. These terms are only used to distinguish a first preset time from another preset time.

It will be understood that when an element is referred to as being "connected" to another element, it can be directly connected to the other element or be connected to the other element through intervening elements. Further, "connection" in the following embodiments is understood to mean "electrical connection", "communication connection", or the like, if there is a transfer of electrical signals or data between the connected objects.

As used herein, the singular forms "a", "an" and "the" may include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms "comprises/comprising," "includes" or "including," etc., specify the presence of stated features, integers, steps, operations, components, parts, or combinations thereof, but do not preclude the presence or addition of one or more other features, integers, steps, operations, components, parts, or combinations thereof. Also, as used in this specification, the term "and/or" includes any and all combinations of the associated listed items.

In an embodiment, please refer to fig. 1, which provides a system privilege management method, including:

step S100, acquiring personnel change information, wherein the personnel change information comprises personnel information of changed personnel and position change mode information of the changed personnel;

step S200, acquiring an authority interface currently owned by a changed person according to the person information;

step S300, judging whether the change personnel has the operation authority of the current object system according to the authority interface;

step S400, if the change staff has the operation authority of the current object system, judging whether the job changing mode of the change staff is job-adjusting;

step S500, if the job changing mode of the changing personnel is job allocation, sending notification information, wherein the notification information is used for notifying the changing personnel to reapply the operation authority of the current object system;

and step S600, if the change personnel do not apply for the operation authority of the current object system again, deleting the authority interface of the current object system according to the personnel information of the change personnel.

In step S100, the staff change information may be matched based on the staff information and the department information of the staff system in the same company. The staff change information includes staff information of the staff who changes and job change mode information of the staff who changes. The shift personnel may include staff members, and departure personnel, among others. The personnel information may include personnel name information, personnel job number information, personnel certificate number information, and the like. The job change pattern information may include a job assignment or a job leaving, and the like.

In step S200, the management systems that set up the rights are generally independent of each other. The url address, interface name, interface mode, etc. of each management system may be different. Thus, an interface configuration page can be made in advance. And configuring access links, interfaces and the like of each management system into a data center such as a webserver or webapi. At this time, the authority of each independent management system can be managed and controlled in a centralized manner.

Then, the interface of each management system can be dynamically called according to the configuration information of the configuration page, and whether the changing person has the authority of the called interface or not is automatically read according to the person information of the changing person, so that the authority interface of which management system the changing person currently has, that is, the system authority of which management system the changing person currently has, is obtained.

It can be understood that when a new management system is added, the access link and the interface of the system can be added and configured into the data center in time, so that the system authority management and control can be performed comprehensively.

In step S300, the current subject system, i.e., the system currently being processed and operated among the respective management systems.

Since step S200 obtains the authority interface of which management systems the change person currently has. Therefore, whether the change personnel has the operation authority of the current object system can be judged by judging whether the current object system belongs to the management systems.

For example, a company has five management systems, i.e., a first management system, a second management system, a third management system, a fourth management system, and a fifth management system. Step S200 obtains the authority interfaces of the change staff currently having the first management system, the second management system, and the third management system.

In this case, if the current target system is the first management system, the second management system, or the third management system, it may be determined that the change person has the operation authority of the current target system. If the current object system is the fourth management system or the fifth management system, it may be determined that the change person does not have the operation authority of the current object system.

In step S400, when the job change mode of the change staff is job assignment, the change staff does not leave the company but changes the job position. Specifically, the job assignment may be job changes of different levels, or job changes of the same level, which may be job changes between different departments, or job changes between the same parts, and the present application does not exist for this purpose.

In step S500, when the job change mode of the change staff is job allocation, the change staff is job allocation staff.

At this time, the notification information may be sent by a mail, a short message, or a WeChat, so as to notify the change staff to reapply the operation authority of the current object system.

In addition, as an example, the notification information may be sent to the administrator of each management system while sending the change person, so that the administrator of each management system can effectively manage and control each management system.

Moreover, as an example, the notification information may notify the change staff of other related information of the system authority while notifying the change staff of reapplying the operation authority of the current target system, for example, notify the change staff of which system authority the change staff currently has, and/or how to apply for the related system authority, and so on.

In step S600, if the change staff does not reapply the operation authority of the current target system, it indicates that the new job no longer requires the operation authority of the current target system.

At the moment, the authority interface of the current object system is deleted, so that the situation that the staff who already undertake the work content of the non-original position still has the operation authority of the original position work to cause misoperation or know the original position confidentiality can be effectively prevented. Therefore, the risk of major errors in work can be effectively reduced, and the confidential security of each department of the company can be ensured.

In this embodiment, the system authority of the staff is effectively controlled, so that the staff reapplies the authority of the corresponding system after performing job transfer, and the authority interface of the corresponding system is deleted when the staff does not reapply the operation authority of the current object system. Therefore, the embodiment can effectively ensure that the authority of each management system is only opened to required personnel, thereby effectively preventing misoperation risks and effectively ensuring the confidential security of companies.

Meanwhile, by adopting the system authority management and control method, the redundant authority of each management system can be regularly cleared by deleting the authority interface of the staff member system.

In an embodiment, referring to fig. 2, after step S300, if the modified person does not have the operation right of the current object system, the system right management is ended.

At this time, the current object system can be replaced until all management systems are judged to be finished.

In one embodiment, referring to fig. 2, the staff change information further includes job-adjusting mode. The mode of job adjustment is a specific mode of job adjustment.

At this time, step S500 includes:

step S510, if the job change mode of the change personnel is the job adjustment, judging whether the job adjustment mode is the in-base-level department movement;

and step S520, if the job-adjusting mode is not adjusted in the basic department, sending notification information.

In step S510, as an example, a company may be provided with a first-level department, a second-level department may be provided below the first-level department, and a third-level department may be provided below the second-level department. At this time, if the staff (i.e., the variable staff) moves under the same three-level door, the staff can be regarded as moving in the base-level door. In this case, the same management system is required before and after the job assignment.

In step S520, when the job-scheduling mode is not scheduled in the basic department, notification information is sent, so that the job-scheduling staff can selectively reapply or no longer apply for the current object system according to the new job situation.

In this embodiment, the notification information can be selectively sent according to different job-scheduling modes, so that the effectiveness of the notification information can be improved.

Further, this embodiment may further include: and if the job-transferring mode is the transfer in the basic department, ending the system authority management and control.

Of course, if the job-scheduling mode is the intra-base department scheduling, the authority interface of the current object system may be added again after the authority interface of the current object system is deleted, which is not limited by the present application.

In one embodiment, referring to fig. 3, step S520 includes:

step S521, if the job-transferring mode is not the transfer in the basic department, judging whether the setting time of the transfer department is less than a first preset time;

in step S522, if the set time of the calling-in department is not less than the first preset time, the notification information is sent.

In step S521, the first preset time may be set according to actual requirements, for example, may be set to one month (30 days).

In step S522, when the setting time of the calling department is not less than the first preset time, the notification information is sent, thereby further improving the validity of the notification information.

Further, this embodiment may further include: and if the setting time of the calling department is less than the first preset time, ending the system authority control.

Specifically, when one department a needs to perform a change operation such as a name change or an organization hierarchy change, one department B may be newly created. Then, the personnel of the department A are moved into the department B in a large batch. At this time, the department B is a department whose name has been changed or whose organization level has been changed by the department a. Therefore, although the persons in the department a are moved from the department a to the department B without being mobilized in the basic department, the persons in the department a need not change the system authority because the department B is a newly built department replacing the department a.

At this time, it is possible to determine whether the calling department is a department such as the above-described department B by the judgment of the first preset time.

If the setting time of the calling department is not less than the first preset time, the calling department is not the department such as the department B shown above. At this time, the job-allocating personnel is a normal job-allocating personnel, and the management system required to be used after the job-allocating personnel is allocated may be different from the previous management system, so that notification information needs to be sent so that the job-allocating personnel can selectively apply for the authority of the current object system.

If the setting time of the calling department is less than the first preset time, the calling department is the department such as the department B shown above. At this time, the department of staff dispatching changes, but the system authority does not need to be changed, so that the system authority management and control can be directly finished, and the system authority of the staff dispatching is reserved.

In this case, when a department performs a change or an organization upgrade, it is possible to prevent system permissions of a large number of persons from being mistakenly deleted due to a change or an organization upgrade of the whole department.

In an embodiment, after step S500, referring to fig. 4, the method further includes:

in step S610, it is determined whether the notification information has been processed.

Specifically, the notification information is processed, which may be that the staff submits a user permission request form after receiving the notification information, applies for changing the permission interface of the corresponding management system, or applies for maintaining the permission interface of the original management system (i.e., maintains the original permission unchanged). After the relevant processing is performed according to the application of the job scheduling personnel, whether the notification information is processed or not is fed back through a processing job scheduling personnel interface of the data center.

If the notification information has been processed, the system authority management is ended, at which time the notification information is not sent any more.

In this embodiment, the management and control state can be changed effectively in time by obtaining the feedback information of the processed condition of the notification information.

In one embodiment, after step S610, the method further includes:

step S630, if the notification information is not processed, judging whether the acquisition time of the personnel variation information exceeds a second preset time;

and step S640, if the acquisition time of the personnel change information exceeds second preset time, deleting the authority interface of the current object system according to the personnel information of the changed personnel.

In step S630, if the notification information is not processed, the change person does not reapply the operation right of the current target system.

The second preset time may also be set according to actual conditions, and may be set to 7 days, for example. The embodiment can judge whether the time for the staff to change the position exceeds the second preset time according to whether the acquisition time of the staff change information exceeds the second preset time.

In step S640, if the time for acquiring the staff change information exceeds the second preset time, it indicates that the time for the staff to perform job change exceeds the second preset time (for example, 7 days), and at this time, the authority interface of the staff to the current target system is deleted, so that the staff no longer has the system authority of the current target system.

In this embodiment, if the change staff does not re-apply for the operation permission of the current object system, after the time for performing the job change exceeds the second preset time, the permission interface of the current object system is deleted, so that sufficient time can be provided for the change staff to perform related application for the permission requirement (required or no longer required) of the current object system, and the change staff can timely acquire the permission of the required system.

Further, after step S630, the method further includes: and if the acquisition time of the personnel variation information does not exceed the second preset time, sending the notification information again.

At the moment, the change staff can be effectively reminded to carry out related applications in time in a mode of multiple notifications, and the change staff is prevented from forgetting authority processing of related systems due to certain uncertain factors.

In one embodiment, after step S400, the method further includes: and if the job change mode of the changed personnel is not the job allocation mode, deleting all the authority interfaces of the changed personnel according to the personnel information of the changed personnel.

When the job change mode of the change staff is not for job allocation, the job change mode can be specifically for leaving or retirement, and the like. At this time, all authority interfaces of the changed personnel can be deleted according to the personnel information of the changed personnel, so that the security of the company secret can be effectively protected, and the situation that the company secret is stolen and leaked by utilizing the authority by the retired personnel and the like can be prevented.

In one embodiment, after step S400, the method comprises: and if the job changing mode of the changed personnel is not job adjustment, deleting all authority interfaces of the changed personnel according to the personnel information of the changed personnel when the acquisition time of the personnel changing information exceeds a third preset time.

The third preset time may be set according to actual conditions, for example, may be set to one day.

The acquiring time of the staff change information exceeds the third preset time, which may be used to indicate that the time for leaving the job of the staff changes exceeds the third preset time.

In this case, the staff who is not in the job-change mode and is not in the job-adjustment mode can have a period of time to deal with the related work.

For example, an enterprise has a head office C and a branch office D. If a person who is going to work from head office C to branch office D is a member of the enterprise that is a member of the leave office for head office C. At this time, the system authority of the third preset time is reserved for the system, so that the system can normally perform related work.

Or, as another example, for a retired person, at a third preset time, he may use the time to hand over the relevant work with another person.

In an embodiment, referring to fig. 5, the method for managing system permissions includes:

step S100, acquiring personnel change information, wherein the personnel change information comprises personnel information of changed personnel and position change mode information of the changed personnel;

step S200, acquiring an authority interface currently owned by a changed person according to the person information;

step S300, judging whether the change personnel has the operation authority of the current object system according to the authority interface;

step S400, if the change staff has the operation authority of the current object system, judging whether the job changing mode of the change staff is job-adjusting;

step S510, if the job change mode of the change personnel is the job adjustment, judging whether the job adjustment mode is the in-base-level department movement;

step S521, if the job-transferring mode is not the transfer in the basic department, judging whether the setting time of the transfer department is less than a first preset time;

step S522, if the setting time of the calling department is not less than the first preset time, sending a notification message;

step S610, judging whether the notification information is processed;

step S630, if the notification information is not processed, judging whether the acquisition time of the personnel variation information exceeds a second preset time;

step 640, if the acquisition time of the personnel change information exceeds a second preset time, deleting the authority interface of the current object system according to the personnel information of the changed personnel;

after step S400, if the job change mode of the changed staff is not job allocation, deleting all the authority interfaces of the changed staff according to the staff information of the changed staff;

after step S510, if the job-scheduling mode is scheduled in the base-level department, the system authority management and control are ended.

After step S521, if the setting time of the calling department is less than the first preset time, the system authority management and control are ended.

After step S610, if the notification information has been processed, the system authority management is ended.

After step S630, if the acquisition time of the person variation information does not exceed the second preset time, the notification information is sent again.

It should be understood that although the various steps in the flowcharts of fig. 1-5 are shown in order as indicated by the arrows, the steps are not necessarily performed in order as indicated by the arrows. The steps are not performed in the exact order shown and described, and may be performed in other orders, unless explicitly stated otherwise. Moreover, at least some of the steps in fig. 1-5 may include multiple steps or multiple stages, which are not necessarily performed at the same time, but may be performed at different times, which are not necessarily performed in sequence, but may be performed in turn or alternately with other steps or at least some of the other steps or stages.

In one embodiment, a data center is further provided, which includes a memory and a processor, the memory stores a computer program, and the processor implements the steps of the method of the above embodiment when executing the computer program.

In an embodiment, please refer to fig. 6, further providing a management and control apparatus, including: a data center 100 and a data acquisition system 200.

The data center 100 comprises a memory storing a computer program and a processor implementing the steps of the method of the above embodiments when executing the computer program. By way of example, the data center may be webserver or webapi, or the like.

The data collection system 200 is electrically connected to the data center 100, and is configured to collect and send the personnel change information to the data center. As an example, the data collection system 200 may be a personnel system that may send personnel information and department information within a company to the data center 100. Then, the data center 100 matches the personnel change information accordingly.

For specific limitations of the data center and the management and control device, reference may be made to the above limitations of the system authority management and control method, which is not described herein again. The modules in the management and control device apparatus may be wholly or partially implemented by software, hardware and a combination thereof. The modules can be embedded in a hardware form or independent from a processor in the computer device, and can also be stored in a memory in the computer device in a software form, so that the processor can call and execute operations corresponding to the modules. It should be noted that, in the embodiment of the present application, the division of the module is schematic, and is only one logic function division, and there may be another division manner in actual implementation.

In one embodiment, a computer-readable storage medium is provided, having a computer program stored thereon, which when executed by a processor, performs the steps of:

step S100, acquiring personnel change information, wherein the personnel change information comprises personnel information of changed personnel and position change mode information of the changed personnel;

step S200, acquiring an authority interface currently owned by a changed person according to the person information;

step S300, judging whether the change personnel has the operation authority of the current object system according to the authority interface;

step S400, if the change staff has the operation authority of the current object system, judging whether the job changing mode of the change staff is job-adjusting;

step S500, if the job changing mode of the changing personnel is job allocation, sending notification information, wherein the notification information is used for notifying the changing personnel to reapply the operation authority of the current object system;

and step S600, if the change personnel do not apply for the operation authority of the current object system again, deleting the authority interface of the current object system according to the personnel information of the change personnel.

It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by hardware instructions of a computer program, which can be stored in a non-volatile computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. Any reference to memory, storage, database or other medium used in the embodiments provided herein can include at least one of non-volatile and volatile memory. Non-volatile Memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash Memory, optical storage, or the like. Volatile Memory can include Random Access Memory (RAM) or external cache Memory. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM), among others.

In the description herein, references to the description of "one embodiment" or the like are intended to mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the invention. In this specification, a schematic description of the above terminology may not necessarily refer to the same embodiment or example.

The technical features of the above embodiments can be arbitrarily combined, and for the sake of brevity, all possible combinations of the technical features in the above embodiments are not described, but should be considered as the scope of the present specification as long as there is no contradiction between the combinations of the technical features.

The above-mentioned embodiments only express several embodiments of the present application, and the description thereof is more specific and detailed, but not construed as limiting the scope of the invention. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the concept of the present application, which falls within the scope of protection of the present application. Therefore, the protection scope of the present patent shall be subject to the appended claims.