CN110147657A - A kind of user right configuration method and device - Google Patents

Abstract

Embodiments of the present invention provide a user authority configuration method and device. The present invention relates to the field of artificial intelligence technology. The method includes: responding to an authority application request, obtaining position information of a user to be assigned authority; extracting keywords in the position information, And obtain the user's department and position according to the keyword matching; obtain the matching permission package according to the user's department, the permission package includes the permission set of at least one position, and the application logic of multiple permissions in the permission set is the same; according to the user The position to which the user belongs obtains the permission set matching the position from the permission package; triggers the permission approval process according to the application logic of the permission set matching the position and the permission application request, and configures the user's permissions based on the permission approval process. The technical solutions provided by the embodiments of the present invention can solve the problem of low efficiency of authority configuration in the prior art.

Description

Method and device for configuring user rights

【Technical field】

The present invention relates to the technical field of artificial intelligence, in particular to a method and device for configuring user rights.

【Background technique】

At present, with the continuous complexity of the company's organizational structure, many new employees join the company every day, and some leave. The authority management personnel manually complete the authority configuration, and the approval personnel also need to approve the configuration of various authority. The workload is huge and errors are prone to occur. , so how to improve the efficiency of authority configuration has become an urgent problem to be solved.

【Content of invention】

In view of this, the embodiments of the present invention provide a user authority configuration method and device, which are used to solve the problem of low efficiency of authority configuration in the prior art.

In order to achieve the above object, according to one aspect of the present invention, a method for configuring user rights is provided, the method comprising:

In response to the authority application request, obtain the position information of the user to be assigned authority; extract keywords in the position information, and match the keywords to obtain the user's department and position; according to the user's affiliation The department obtains a matching permission package, the permission package includes a permission set of at least one position, wherein the application logic of multiple permissions in the permission set is the same; obtain the position matching from the permission package according to the position to which the user belongs The permission set; according to the application logic of the permission set matched with the position and the permission application request, the permission approval process is triggered, and the user's permission is configured based on the permission approval process.

Further, before obtaining the matching authority package according to the department to which the user belongs, the method further includes:

Obtain multiple authority application records; extract the keywords in each authority application record, and obtain the applicant's department, position and authority; set the applicant's position to the same position and the logic of the authority application storing each of the permissions in a preset permission set, wherein the preset permission set uses the position as a first-level classification label; and deduplicating a plurality of the permissions in the preset permission set; The multiple deduplicated preset permission sets that belong to the same department are combined into a preset permission package, and the preset permission package uses the department as a secondary classification label.

Further, the deduplication of multiple permissions in the preset permission set includes: performing word segmentation on each of the permissions through a natural language processing method to obtain multiple words; representing the model through a preset word vector Obtaining the vector representation of each of the words; calculating the vector similarity of multiple permissions by using a cosine similarity formula; and reserving one permission from the multiple permissions whose vector similarity is greater than a preset threshold.

Further, after extracting the keywords in each authority application record, obtaining the applicant's department, position and authority, and making the applicant's position the same and the authority application logic Before the multiple identical permissions are stored in a preset permission set, the method further includes: judging whether the number of posts with the same permission is greater than the first preset value; if so, confirming the same permission as General authority: storing the general authority in a preset general authority package, wherein the general authority in the general authority package is applicable to all newly added users.

Further, the application logic of the permission set matched with the position and the permission application request trigger a permission approval process, and after configuring the user's permission based on the permission approval process, the method further includes: obtaining all The user’s permission increase request, wherein the permission increase request carries the permission to be increased; judge whether there is the permission to be increased in the permission package matching the user’s position; The authority to be added is assigned to the user; if it does not exist, a new authority is created based on the request to increase the authority, and the new authority approval process is triggered according to the application logic of the new authority.

Further, after creating a new permission based on the permission increase request and triggering the new permission approval process according to the application logic of the new permission, the method further includes: counting the permission applications of the same position with respect to the new permission Recording times; judging whether the number of authority application records for the new authority is greater than a second preset value; if yes, merging the new authority into the authority set matching the same position.

In order to achieve the above object, according to one aspect of the present invention, a user rights configuration device is provided, the device includes:

The first acquiring unit, in response to the authority application request, acquires the position information of the user to be assigned the authority; the matching unit is used to extract keywords in the position information, and obtain the department to which the user belongs according to the keyword matching , the position to which the user belongs; a second acquisition unit, configured to acquire a matching authority package according to the department to which the user belongs, the authority package including an authority set of at least one position, wherein the application logic of multiple authorities in the authority set is the same ; The third acquisition unit is used to obtain the permission set matching the position from the permission package according to the position of the user; the configuration unit is used to apply logic and the permission application request according to the permission set matching the position A permission approval process is triggered, and the user's permission is configured based on the permission approval process.

Further, the device also includes:

The fourth obtaining unit is used to obtain multiple permission application records; the extraction unit is used to extract keywords in each permission application record to obtain the applicant's department, position and permission; the processing unit is used to Multiple permissions with the same position to which the applicant belongs and the same permission application logic are stored in a preset permission set, wherein the preset permission set uses the position as a first-level classification label; The duplicate unit is used to deduplicate a plurality of the authority sets in the preset authority set; the merging unit is used to merge the multiple deduplicated preset authority sets belonging to the same department into one preset authority set. A preset permission package, the preset permission package uses the department as a secondary classification label.

In order to achieve the above object, according to one aspect of the present invention, a computer non-volatile storage medium is provided, the storage medium includes a stored program, and when the program is running, the device where the storage medium is located is controlled to execute the above user Permission configuration method.

In order to achieve the above object, according to one aspect of the present invention, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and operable on the processor, and the processor executes the Steps for implementing the above-mentioned user authority configuration method when describing a computer program.

In this solution, by obtaining the user's position information, use the position information to obtain the permission package that matches the position information, and automatically trigger the approval process according to the application logic in the permission, and configure multiple permissions in the permission package at one time For users, there is no need to repeatedly sign and apply, which improves the efficiency of permission allocation.

【Description of drawings】

In order to illustrate the technical solutions of the embodiments of the present invention more clearly, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. Those of ordinary skill in the art can also obtain other drawings based on these drawings without paying creative labor.

FIG. 1 is a flow chart of an optional user rights configuration method provided by an embodiment of the present invention;

Fig. 2 is a schematic diagram of an optional user authority configuration device provided by an embodiment of the present invention;

Fig. 3 is a schematic diagram of an optional computer device provided by an embodiment of the present invention.

【Detailed ways】

In order to better understand the technical solutions of the present invention, the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

It should be clear that the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

Terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. As used in the embodiments of the present invention and the appended claims, the singular forms "a", "said" and "the" are also intended to include the plural forms unless the context clearly indicates otherwise.

It should be understood that the term "and/or" used herein is only an association relationship describing associated objects, which means that there may be three relationships, for example, A and/or B, which may mean that A exists alone, and A and B exist simultaneously. B, there are three situations of B alone. In addition, the character "/" in this article generally indicates that the contextual objects are an "or" relationship.

It should be understood that although terms such as first, second, and third may be used to describe terminals in this embodiment of the present invention, these terminals should not be limited to these terms. These terms are only used to distinguish one terminal from another. For example, without departing from the scope of the embodiments of the present invention, a first terminal may also be called a second terminal, and similarly, a second terminal may also be called a first terminal.

Depending on the context, the word "if" as used herein may be interpreted as "at" or "when" or "in response to determining" or "in response to detecting". Similarly, depending on the context, the phrases "if determined" or "if detected (the stated condition or event)" could be interpreted as "when determined" or "in response to the determination" or "when detected (the stated condition or event) )" or "in response to detection of (a stated condition or event)".

Fig. 1 is a flow chart of a method for configuring user rights according to an embodiment of the present invention. As shown in Fig. 1, the method includes:

Step S101, in response to a permission application request, acquire position information of users to be assigned permissions.

Step S102, extract keywords in the position information, and obtain the user's department and position according to the keyword matching.

In step S103, a matching authority package is acquired according to the department to which the user belongs. The authority package includes an authority set of at least one position, wherein the application logic of multiple authorities in the authority set is the same.

Step S104 , according to the user's position, the permission set matching the position is obtained from the permission package.

Step S105 , triggering the authority approval process according to the application logic of the authority set matched with the position and the authority application request, and configuring the user's authority based on the authority approval process.

In this solution, by obtaining the user's position information, the position information is used to obtain the permission package that matches the position information, and the approval process is automatically triggered according to the application logic in the permission, and multiple permissions in the permission package are configured at one time. Users do not need to sign and apply repeatedly, which improves the efficiency of authority management.

Among them, the permission application logic is, for example, "supervisor approval-manager approval-HR manager filing", then all the permissions in this permission package are directly pushed to the supervisor in the form of a list, triggering the approval process and speeding up the approval process.

Optionally, before acquiring the matching permission package according to the department the user belongs to, the method further includes:

Obtain multiple authority application records; extract the keywords in each authority application record, and obtain the applicant's department, position and authority; store multiple authorities with the same position and the same authority application logic as the applicant in a preset The preset permission set, in which, the preset permission set uses the position as the first-level classification label; multiple permissions in the preset permission set are deduplicated; the preset permission set after multiple deduplication of the same department belongs And it is a default permission package, and the default permission package uses the department as the secondary classification label.

Among them, permission application records can be in various forms such as documents, electronic files, and emails. For example, the permission package of the product development department includes the permission set of the test engineer, the permission set of the development engineer, and the permission set of the application engineer. The authority is clustered according to the position and department of the applicable employee, and the first-level label and the second-level label are used to manage, which makes the one-time configuration of authority possible and improves the efficiency of authority allocation.

Specifically, first classify the different permissions of the same position into a preset permission set, and use the position as a classification label to manage the permission set, so that in the process of assigning permissions to new employees, the corresponding permission configuration can be obtained through position matching , which improves the efficiency of permission configuration. In other implementation manners, the permission set can be further divided into multiple permission subsets according to the subdivision of positions (eg, test engineers are subdivided into ISO software test engineers, WEB software test engineers, etc.). This makes the permission configuration more precise.

Optionally, obtain the position information of the user to be assigned permissions, including:

Obtain the position information of newly recruited employees pushed by the human resources management system;

Or, query the user's position information in the human resources file center according to the user's employee number. You can also query the user's position information by logging into the company's website or a position-related website (OPC, bastion host). For example, a team of test engineers. Specifically, the human resource management system may be regularly polled every day to find out whether there are new recruits.

Optionally, deduplication of multiple permissions in the preset permission set includes: segmenting each permission into words through a natural language processing method to obtain multiple words; obtaining the value of each word through a preset word vector representation model Vector representation; the cosine similarity formula is used to calculate the vector similarity of multiple permissions; one permission is reserved from multiple permissions whose vector similarity is greater than a preset threshold.

Among them, the cosine similarity calculation formula is cos(θ) represents the similarity, i represents the number of words, its value is a positive integer from 1 to n, A represents the first authority, B represents the second authority, Ai represents a keyword in the first authority, Bi represents the second A keyword in permissions. The word vector representation model can be, for example, a neural network model such as WORD2VEC.

Optionally, after extracting the keywords in each authority application record, obtaining the applicant's department, position and authority, and storing multiple authorities with the same position and the same authority application logic as the applicant in one Before the preset permission set, the method also includes: judging whether the number of posts with the same permission is greater than the first preset value; if so, confirming the same permission as a general permission; storing the general permission to the preset general permission package, Among them, the general permissions in the general permission package are applicable to all new users.

For example: Permission 1 is "Mail Outgoing Permission", and the positions of Permission 1 include test engineer, development engineer, application engineer, technical support engineer, etc., when the number of positions matched by the same permission in the permission application record exceeds the preset value ( If there are more than 10 positions), confirm permission 1 as a general permission, so that when a new user applies for permission, all the permissions in the general permission package will be allocated to the new user.

Optionally, after triggering the permission approval process according to the application logic of the permission set matched with the position and the permission application request, and configuring the user's permission based on the permission approval process, the method further includes: obtaining the user's permission increase request, wherein the permission increase request carries Permissions to be added; determine whether there are permissions to be added in the permission package that matches the user's position; if yes, assign the permissions to be added to the user; if not, create a new permission based on the permission increase request, And trigger the approval process of adding permissions according to the application logic of new permissions. Wherein, the permission increase request is a request for an additional permission increase based on the user's own needs after the permission configuration is performed according to the user's position information.

Optionally, after creating a new permission based on the permission increase request, and triggering the new permission approval process according to the application logic of the new permission, the method further includes: counting the number of permission application records for the new permission of the same position; judging the permission application of the new permission Whether the number of records is greater than the second preset value; if yes, the new authority is merged into the authority set matching the same position.

For example: test engineer 1 applies for permission 2, and test engineer 2 applies for permission 2. When the number of applications for permission 2 of the position of test engineer is more than 10, permission 2 will be automatically included in the permission set corresponding to the position of test engineer. Automatically assign new permissions to all users in the same position or in the same department, that is, all test engineers will automatically enable permissions 2.

An embodiment of the present invention provides a user authority configuration device, which is used to execute the above user authority configuration method. As shown in FIG. 2 , the device includes: a first acquisition unit 10, a matching unit 20, a second acquisition unit 30, The third acquisition unit 40 and the configuration unit 50 .

The first acquiring unit 10, in response to the authority application request, acquires the position information of the user whose authority is to be assigned;

The matching unit 20 is used to extract keywords in the position information, and obtain the user's department and position according to the keyword matching;

The second acquiring unit 30 is configured to acquire a matching authority package according to the department to which the user belongs, the authority package including an authority set of at least one position, wherein the application logic of multiple authorities in the authority set is the same;

The third obtaining unit 40 is configured to obtain a permission set matching a position from the permission package according to the user's position;

The configuration unit 50 is configured to trigger a permission approval process according to the application logic of the permission set matched with the position and the permission application request, and configure user permissions based on the permission approval process.

In this solution, by obtaining the user's position information, the position information is used to obtain the permission package that matches the position information, and the approval process is automatically triggered according to the application logic in the permission, and multiple permissions in the permission package are configured at one time. Users do not need to sign and apply repeatedly, which improves the efficiency of authority management.

Among them, the permission application logic is, for example, "supervisor approval-manager approval-HR manager filing", then all the permissions in this permission package are directly pushed to the supervisor in the form of a list, triggering the approval process and speeding up the approval process.

Optionally, the device further includes a fourth acquiring unit, an extracting unit, a processing unit, a deduplication unit, and a merging unit.

The fourth obtaining unit is used to obtain multiple permission application records; the extraction unit is used to extract keywords in each permission application record, and obtains the applicant's department, position and permission; the processing unit is used to extract the applicant's Multiple permissions with the same position and the same permission application logic are stored in a preset permission set, where the preset permission set uses the position as the first-level classification label; the deduplication unit is used to store the Multiple permissions are deduplicated; the merging unit is used to merge multiple deduplicated preset permission sets belonging to the same department into a preset permission package, and the preset permission package uses the department as a secondary classification label.

Among them, permission application records can be in various forms such as documents, electronic files, and emails. For example, the permission package of the product development department includes the permission set of the test engineer, the permission set of the development engineer, and the permission set of the application engineer. The authority is clustered according to the position and department of the applicable employee, and the first-level label and the second-level label are used to manage, which makes the one-time configuration of authority possible and improves the efficiency of authority allocation.

Specifically, first classify the different permissions of the same position into a preset permission set, and use the position as a classification label to manage the permission set, so that in the process of assigning permissions to new employees, the corresponding permission configuration can be obtained through position matching , which improves the efficiency of permission configuration. In other implementation manners, the permission set can be further divided into multiple permission subsets according to the subdivision of positions (eg, test engineers are subdivided into ISO software test engineers, WEB software test engineers, etc.). This makes the permission configuration more precise.

Optionally, the first acquisition unit 10 includes a first acquisition subunit and a second acquisition subunit.

The first acquisition subunit is used to acquire the position information of the newly recruited employees pushed by the human resource management system;

The second obtaining subunit is used to query the position information of the user in the human resources file center according to the employee number of the user. You can also query the user's position information by logging into the company's website or a position-related website (OPC, bastion host). For example, a team of test engineers. Specifically, the human resource management system may be regularly polled every day to find out whether there are new recruits.

Optionally, the deduplication unit includes a word segmentation subunit, a third acquisition subunit, a calculation subunit, and a processing subunit.

The word segmentation subunit is used to segment each permission through natural language processing methods to obtain multiple words; the third acquisition subunit is used to obtain the vector representation of each word through the preset word vector representation model; the calculation subunit is used to calculate the vector similarity of multiple permissions by adopting the cosine similarity formula; the processing subunit is used to reserve one permission from the multiple permissions whose vector similarity is greater than a preset threshold.

Among them, the cosine similarity calculation formula is cos(θ) represents the similarity, i represents the number of words, its value is a positive integer from 1 to n, A represents the first authority, B represents the second authority, Ai represents a keyword in the first authority, Bi represents the second A keyword in permissions. The word vector representation model can be, for example, a neural network model such as WORD2VEC.

Optionally, the device further includes a first judgment unit, a confirmation unit, and a storage unit.

The first judging unit is used to judge whether the number of positions belonging to the same authority is greater than the first preset value; the confirming unit is used to confirm the same authority as the general authority; the storage unit is used to store the general authority in the preset A general authority package is set, wherein the general authority in the general authority package is applicable to all newly added users.

For example: Permission 1 is "Mail Outgoing Permission", and the positions of Permission 1 include test engineer, development engineer, application engineer, technical support engineer, etc., when the number of positions matched by the same permission in the permission application record exceeds the preset value ( If there are more than 10 positions), confirm permission 1 as a general permission, so that when a new user applies for permission, all the permissions in the general permission package will be allocated to the new user.

Optionally, the device further includes a fifth acquiring unit, a second judging unit, an allocating unit, and a triggering unit.

The fifth obtaining unit is used to obtain the user's permission increase request, wherein the permission increase request carries the permission to be added; the second judging unit is used to judge whether there is a permission to be added in the permission package matching the user's position; The allocation unit is used to assign the permission to be added to the user if it exists; the trigger unit is used to create a new permission based on the permission increase request if it does not exist, and trigger the new permission approval process according to the application logic of the new permission . Wherein, the permission increase request is a request for an additional permission increase based on the user's own needs after the permission configuration is performed according to the user's position information.

Optionally, the device further includes a statistical unit, a third judging unit, and a second merging unit.

The statistical unit is used to count the number of times of permission application records of the same position about the new permission; the third judging unit is used to judge whether the number of times of the permission application records of the new permission is greater than the second preset value; the second merging unit is used for if so, then Merge the new permissions into the permission set that matches the same position.

For example: test engineer 1 applies for permission 2, and test engineer 2 applies for permission 2. When the number of applications for permission 2 of the position of test engineer is more than 10, permission 2 will be automatically included in the permission set corresponding to the position of test engineer. Automatically assign new permissions to all users in the same position or in the same department, that is, all test engineers will automatically enable permissions 2.

An embodiment of the present invention provides a computer non-volatile storage medium, the storage medium includes a stored program, wherein, when the program is running, the device where the storage medium is located is controlled to perform the following steps:

In response to the permission application request, obtain the position information of the user to be assigned permission; extract the keywords in the job information, and obtain the user's department and position according to the keyword matching; obtain the matching permission package according to the user's department, permission The package includes a permission set of at least one position, where the application logic of multiple permissions in the permission set is the same; obtain the matching permission set of the position from the permission package according to the user's position; the application logic and permission application of the matching permission set according to the position The request triggers the permission approval process, and configures the user's permissions based on the permission approval process.

Optionally, when the program is running, control the device where the storage medium is located to perform the following steps: obtain multiple permission application records; extract keywords in each permission application record, and obtain the applicant's department, position and permission; Multiple permissions with the same position and the same permission application logic are stored in a preset permission set, where the preset permission set uses the position as the first-level classification label; multiple permissions in the preset permission set are deduplicated ;Merge multiple deduplicated preset permission sets belonging to the same department into a preset permission package, and the default permission package uses the department as the secondary classification label.

Optionally, when the program is running, control the device where the storage medium is located to perform the following steps: segment each permission into words through a natural language processing method to obtain multiple words; obtain a vector representation of each word through a preset word vector representation model; A cosine similarity formula is used to calculate the vector similarity of multiple permissions; and one permission is reserved from multiple permissions whose vector similarity is greater than a preset threshold.

Optionally, when the program is running, control the device where the storage medium is located to perform the following steps: determine whether the number of posts with the same authority is greater than the first preset value; if so, confirm the same authority as a general authority; store the general authority in the preset A general authority package is set, wherein the general authority in the general authority package is applicable to all newly added users.

Optionally, when the program is running, the device where the storage medium is located is controlled to perform the following steps: obtain the user's permission increase request, wherein the permission increase request carries the permission to be added; determine whether there is a permission package that matches the user's position. If it exists, assign the permission to be added to the user; if it does not exist, create a new permission based on the permission increase request, and trigger the new permission approval process according to the application logic of the new permission.

Fig. 3 is a schematic diagram of a computer device provided by an embodiment of the present invention. As shown in FIG. 3 , the computer device 100 of this embodiment includes: a processor 101, a memory 102, and a computer program 103 stored in the memory 102 and operable on the processor 101. When the computer program 103 is executed by the processor 101 To avoid repetition, the methods for configuring user rights in the embodiments are not described here. Alternatively, when the computer program is executed by the processor 101, the functions of each model/unit in the user authority configuration device in the embodiment are realized, and to avoid repetition, details are not repeated here.

The computer device 100 may be computing devices such as desktop computers, notebooks, palmtop computers, and cloud servers. A computer device may include, but not limited to, a processor 101 and a memory 102 . Those skilled in the art can understand that FIG. 3 is only an example of the computer device 100, and does not constitute a limitation to the computer device 100. It may include more or less components than those shown in the illustration, or combine certain components, or different components. , for example, a computer device may also include input and output devices, network access devices, buses, and so on.

The so-called processor 101 may be a central processing unit (Central Processing Unit, CPU), and may also be other general-purpose processors, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

The memory 102 may be an internal storage unit of the computer device 100 , such as a hard disk or a memory of the computer device 100 . The memory 102 can also be an external storage device of the computer device 100, such as a plug-in hard disk equipped on the computer device 100, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash memory card (Flash Card) and so on. Further, the storage 102 may also include both an internal storage unit of the computer device 100 and an external storage device. The memory 102 is used to store computer programs and other programs and data required by the computer equipment. The memory 102 can also be used to temporarily store data that has been output or will be output.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined Or it can be integrated into another system, or some features can be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware, or in the form of hardware plus software functional units.

The above-mentioned integrated units implemented in the form of software functional units may be stored in a computer-readable storage medium. The above-mentioned software functional units are stored in a storage medium, and include several instructions to make a computer device (which may be a personal computer, server, or network device, etc.) or a processor (Processor) execute the methods described in various embodiments of the present invention. partial steps. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other various media that can store program codes. .

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the present invention. within the scope of protection.

Claims (10)

1. A user rights configuration method, characterized in that the method comprises: In response to the permission application request, obtain the position information of the user whose permission is to be assigned; extracting the keywords in the position information, and matching the keywords to obtain the user's department and position; Acquiring a matching permission package according to the department to which the user belongs, the permission package including a permission set of at least one position, wherein the application logic of multiple permissions in the permission set is the same; Acquiring a permission set matching a position from the permission package according to the position of the user; According to the application logic of the permission set matched with the position and the permission application request, a permission approval process is triggered, and the user's permission is configured based on the permission approval process. 2. The method according to claim 1, wherein, before obtaining the matching authority package according to the department to which the user belongs, the method further comprises: Obtain multiple permission application records; Extract the keywords in each authority application record to obtain the applicant's department, position and authority; storing the plurality of permissions with the same position to which the applicant belongs and the same permission application logic into a preset permission set, wherein the preset permission set uses the position as a first-level classification label; Deduplicating multiple permissions in the preset permission set; The multiple deduplicated preset permission sets that belong to the same department are combined into a preset permission package, and the preset permission package uses the department as a secondary classification label. 3. The method according to claim 2, wherein the deduplication of multiple permissions in the preset permission set comprises: Segment each of the permissions through a natural language processing method to obtain multiple words; Obtaining the vector representation of each of the words through a preset word vector representation model; calculating the vector similarity of multiple permissions by using a cosine similarity formula; One of the permissions is reserved from the plurality of permissions whose vector similarity is greater than a preset threshold. 4. The method according to claim 2, characterized in that, after said extracting the keywords in each said authority application record, obtaining the department to which the applicant belongs, the position to which she belongs and the authority, and said adding said authority Before the applicants have the same position and the permission application logic is stored in a preset permission set, the method further includes: Judging whether the number of posts with the same authority is greater than the first preset value; If yes, confirm said same authority as general authority; The general authority is stored in a preset general authority package, wherein the general authority in the general authority package is applicable to all newly added users. 5. The method according to claim 1, wherein the application logic of the permission set matched with the position and the permission application request trigger a permission approval process, and configure the user based on the permission approval process After permissions, the method also includes: Obtaining a permission increase request of the user, wherein the permission increase request carries the permission to be increased; judging whether the authority to be added exists in the authority package matching the position of the user; If it exists, assign the authority to be increased to the user; If it does not exist, a new permission is created based on the permission addition request, and an approval process for adding a permission is triggered according to the application logic of the new permission. 6. The method according to claim 5, characterized in that, after creating a new permission based on the permission increase request and triggering the new permission approval process according to the application logic of the new permission, the method further comprises : Count the number of permission application records for the new permission in the same position; judging whether the number of permission application records for the new permission is greater than a second preset value; If yes, the new authority is merged into the authority set matching the same position. 7. A user authority configuration device, characterized in that the device comprises: The first acquiring unit, in response to the authority application request, acquires the position information of the user whose authority is to be assigned; A matching unit, configured to extract keywords in the job information, and obtain the user's department and job according to the keyword matching; The second acquiring unit is configured to acquire a matching permission package according to the department to which the user belongs, the permission package including a permission set of at least one position, wherein the application logic of multiple permissions in the permission set is the same; A third acquiring unit, configured to acquire a position-matching permission set from the permission package according to the position to which the user belongs; A configuration unit, configured to trigger a permission approval process according to the application logic of the permission set matched with the position and the permission application request, and configure the user's permission based on the permission approval process. 8. The device according to claim 7, further comprising: The fourth obtaining unit is used to obtain multiple authority application records; An extracting unit, configured to extract keywords in each authority application record, and obtain the applicant's department, position and authority; A processing unit, configured to store the plurality of permissions with the same job position of the applicant and the same permission application logic into a preset permission set, wherein the preset permission set uses the position as the first class label; a deduplication unit, configured to deduplicate a plurality of the permissions in the preset permission set; The merging unit is configured to merge multiple deduplicated preset permission sets belonging to the same department into a preset permission package, and the preset permission package uses the department as a secondary classification label. 9. A computer non-volatile storage medium, the storage medium includes a stored program, characterized in that, when the program is running, the device where the storage medium is located is controlled to execute the method described in any one of claims 1 to 6. User permission configuration method. 10. A computer device, comprising a memory, a processor, and a computer program stored in the memory and operable on the processor, when the processor executes the computer program, any one of claims 1 to 6 is realized Steps in the user rights configuration method described in the item.