CN115033920A

CN115033920A - Object access method, device, electronic equipment, storage medium and program product

Info

Publication number: CN115033920A
Application number: CN202210722985.3A
Authority: CN
Inventors: 高杨逸乔; 方树煜
Original assignee: Beijing Zitiao Network Technology Co Ltd
Current assignee: Beijing Zitiao Network Technology Co Ltd
Priority date: 2022-06-21
Filing date: 2022-06-21
Publication date: 2022-09-09
Also published as: WO2023246723A1

Abstract

The present disclosure provides an object access method, including: in response to an event that a document link is presented to a user, determining attribute information of the user; determining a target authority level of the user requester for performing access preview on the target object document link according to the attribute information of the requester user and the authority record information corresponding to the target object document link; the target permission level is one of a plurality of levels in the permission record information, and the plurality of levels comprise reference levels of different degrees to the target object under the condition of having the access permission; and displaying the preview content corresponding to the document link according to the target authority level. Based on the object access method, the disclosure also provides an object access device, an electronic device, a storage medium and a program product.

Description

Object access method, device, electronic equipment, storage medium and program product

Technical Field

The present disclosure relates to the field of computer vision technologies, and in particular, to an object access method, an object access apparatus, an electronic device, a storage medium, and a program product.

Background

Different computer users can transmit information to each other through a network, and can share file information at the same time.

The method can realize the access of a plurality of users to the internal files through an enterprise internal communication tool. However, the files inside the enterprise often have certain confidentiality and are not suitable for being opened for all users who can access the communication tools inside the enterprise.

Disclosure of Invention

In view of this, embodiments of the present disclosure provide an object access method, which can better adapt to a change of a routing rule.

According to some embodiments of the present disclosure, there is provided an object access method including:

receiving an object access request sent by a requester;

in response to an event for showing a document link to a user, determining attribute information of the user;

determining a target authority level for previewing the document link by the user according to the attribute information of the user and the authority information corresponding to the document link; the target authority level is one of a plurality of levels in the authority information, and the plurality of levels comprise reference levels of different degrees to the target object under the condition of having the access authority;

and displaying the preview content corresponding to the document link according to the target authority level.

An embodiment of the present disclosure further provides an object access apparatus, including:

the attribute information determining module is used for responding to an event for showing the document link to the user and determining the attribute information of the user;

the permission level determining module is used for determining a target permission level for the user to preview the document link according to the attribute information of the user and the permission information corresponding to the document link; the target authority level is one of a plurality of levels in the authority information, and the plurality of levels comprise reference levels of different degrees to the target object under the condition of having the access authority;

and the preview content display module is used for displaying the preview content corresponding to the document link according to the target authority level.

In addition, an embodiment of the present disclosure further provides an electronic device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the method when executing the program.

Embodiments of the present disclosure also provide a non-transitory computer-readable storage medium storing computer instructions for causing a computer to perform the above-described method.

Embodiments of the present disclosure also provide a computer program product comprising computer program instructions which, when run on a computer, cause the computer to perform the above method.

It can be seen from the above contents that, when an event that a document link is displayed to a user is detected, preview content corresponding to the document link can be displayed according to an access permission level corresponding to attribute information of the user, and permission of the user for viewing the document link is controlled by a permission level with a finer granularity, so that accurate control over the level of viewing the document link by the user is realized.

Drawings

In order to more clearly illustrate the technical solutions in the present disclosure or related technologies, the drawings needed to be used in the description of the embodiments or related technologies are briefly introduced below, and it is obvious that the drawings in the following description are only embodiments of the present disclosure, and for those skilled in the art, other drawings can be obtained according to these drawings without creative efforts.

Fig. 1 is a schematic view of an application scenario of an object access method provided in an embodiment of the present disclosure;

fig. 2 shows a flow of implementing the object access method according to an embodiment of the present disclosure;

FIG. 3A is a schematic diagram of an application scenario of an object access method according to another embodiment of the present disclosure;

FIG. 3B is a schematic diagram illustrating an application scenario of the object access method according to still another embodiment of the present disclosure;

FIG. 4 shows a flow chart of implementing the object access method according to another embodiment of the present disclosure;

FIG. 5 is a diagram illustrating an embodiment of a permission setting interface;

FIG. 6A shows a schematic diagram of a target web page visit in accordance with an embodiment of the present disclosure;

FIG. 6B is a schematic diagram illustrating an authorized application process triggering according to the present disclosure;

FIG. 6C is a diagram illustrating access to an internal document within an external document, according to one embodiment of the present disclosure;

fig. 7 is a schematic diagram illustrating an internal structure of an object access apparatus according to another embodiment of the present disclosure;

fig. 8 is a schematic diagram illustrating an internal structure of an object access apparatus according to still another embodiment of the present disclosure;

fig. 9 is a schematic diagram illustrating an internal structure of an object access apparatus according to still another embodiment of the present disclosure;

fig. 10 shows a more specific hardware structure diagram of the electronic device provided in this embodiment.

Detailed Description

For the purpose of promoting a better understanding of the objects, aspects and advantages of the present disclosure, reference is made to the following detailed description taken in conjunction with the accompanying drawings.

It is to be noted that technical terms or scientific terms used in the embodiments of the present disclosure should have a general meaning as understood by those having ordinary skill in the art to which the present disclosure belongs, unless otherwise defined. The use of "first," "second," and similar terms in the embodiments of the disclosure is not intended to indicate any order, quantity, or importance, but rather to distinguish one element from another. The word "comprising" or "comprises", and the like, means that the element or item listed before the word covers the element or item listed after the word and its equivalents, but does not exclude other elements or items. The terms "connected" or "coupled" and the like are not restricted to physical or mechanical connections, but may include electrical connections, whether direct or indirect. "upper", "lower", "left", "right", and the like are used merely to indicate relative positional relationships, and when the absolute position of the object being described is changed, the relative positional relationships may also be changed accordingly.

References to "a", "a" or "at least one" in embodiments of the present disclosure are intended to be illustrative rather than limiting, and those skilled in the art will appreciate that "one or more" is intended unless the context clearly indicates otherwise.

As described above, generally, the information provider provides the user with information that is randomly determined and the recommended content may not be the content that the user currently desires to see or be interested in, which may result in a failure in recommendation.

To this end, some embodiments of the present disclosure provide a recommendation method. Referring to fig. 1, it is a schematic view of an application scenario of a method provided in an embodiment of the present disclosure. The application scenario includes: a terminal device 101 and a server 102 providing an object access service.

In the embodiment of the present disclosure, the terminal device 101 may run an APP (Application) having functions of sharing, communicating, and the like, the server 102 may provide operation support such as data storage, instruction response, and the like for the running of the APP, and the server may also provide basic data for an object access function of the APP, where fig. 1 only gives an example of an Application scenario. The APP with the object access function can realize the access of a user to a target object.

In the embodiment of the present disclosure, the terminal device 101 includes, but is not limited to, a desktop computer, a mobile phone, a mobile computer, a tablet computer, a media player, a smart wearable device, a Personal Digital Assistant (PDA), or other electronic devices capable of implementing the above functions. The terminal device 101 may provide data and file support for the user through data and functions provided by the server 102, so that the user can implement an object access function.

Based on the above application scenario and other possible application scenarios, as shown in fig. 2, some embodiments of the present disclosure provide an object access method, including:

step 201: in response to an event for showing a document link to a user, determining attribute information of the user;

step 202: determining a target authority level of the user requester for performing access preview on the document link according to the attribute information of the requester user and the authority record information corresponding to the document link; the target authority level is one of a plurality of levels in the authority information, and the plurality of levels comprise reference levels of different degrees to the target object under the condition of having the access authority;

step 203: and displaying the preview content corresponding to the document link according to the target authority level.

In some embodiments of the present disclosure, the event that the document link is presented to the user may be an event that the document link is presented to the user in a chat log interface. For example, in a social chat interface, a user receives a document access link, a document transmission link, and the like sent by a person chatting with the user, so that information of the document link is presented on the chat interface on the user side. The document link may be used to indicate an address where the document is located, or may be used to indicate the document, for example, when the document link is a chat, the document is directly transmitted through a chat tool.

In some embodiments of the present disclosure, document links may be used to access and open files of any format, such as text documents, form documents, drawing documents, videos, audio, images, emails, web pages, and the like. Document links may also be used to access carriers that hold files, such as folders, download links, and the like.

In some embodiments of the present disclosure, the attribute information of the user may include information for representing the identity of the user. Information indicating document links, presentation manners, presentation times, and the like, which are related to the access rights of the user, may also be included. The user's rights to the document link may include operational rights for review, preview, search, forwarding, and so on.

In some embodiments of the present disclosure, the authority information corresponding to the document includes a record that the document link defines the authority of the accessing user, and is used for performing authority differentiation on different categories and individual visitors.

In some embodiments of the present disclosure, the permission information corresponding to the document link may also include information found in other permission records that are uniformly set, where the permission records are used to distinguish permissions of viewing, previewing, and the like for users with different types and different IDs of the document link.

In some embodiments of the present disclosure, the displaying of the preview content corresponding to the document link may include, according to the target permission level, determining whether the requestor can access the document link, and further displaying content related to the document.

In some embodiments of the present disclosure, in a case that the user has an authority to access the document link, the authority record is used to determine a specific authority level that the user has, that is, the authority information is used to record whether the user has an authority to view corresponding content of the document link, and is also used to distinguish user authorities of different contents, so that the authority of the user is distinguished and managed at a finer granularity, and different confidentiality requirements of documents such as internal files and data of an enterprise for different consultants are met.

Therefore, in one possible implementation, the authority information distinguishes forwarding, reference of the base content, reference and modification of the preview content, reference authority of different parts of the content of the document link, and the like, which are further possessed by different users under the condition of having access authority.

In some embodiments of the present disclosure, the multiple levels include operation levels with different degrees of access rights to the document link, specifically, multiple different levels are included in the rights information, such as a first rights level to an nth rights level, the content of each rights level is different, and the different rights levels may be used to perform different operations on the document (or other files) corresponding to the document link or to refer to different parts of the document (or other files). For example, in the first permission level to the nth permission level, the higher the number of levels is, the more the permission content is, and the first permission level only has the preview permission, the preview content displayed to the user is the brief content of the document; the second permission level has the reference permission of the non-confidential content of the document on the basis of the first permission level, and the preview content displayed to the user comprises the non-confidential content; the third permission level has all content consulting permission of the document on the basis of the second permission level, and the preview content displayed to the user comprises document content; the fourth permission level has editing permissions based on the third permission level, and the preview content presented to the user includes document content and editing tools, and so on.

In some embodiments of the present disclosure, when an event that a document link is displayed to a user is detected, preview content corresponding to the document link can be displayed according to an access permission level corresponding to attribute information of the user, and a permission of the user for viewing the document link is controlled by a permission level with a finer granularity, so that accurate control of a level of the user for viewing the document link is realized.

In an embodiment, the displaying the preview content corresponding to the document link according to the target permission level includes:

determining the validity of the target authority level according to the network address of the requester;

and under the condition that the target authority level is effective, displaying the preview content corresponding to the document link according to the target authority level.

In this embodiment, the network address of the user is used to determine whether the location where the user is located and the internet access environment are reliable, and may be an IP address of the user, a base station location address of the user, or the like.

In some embodiments of the present disclosure, determining the validity of the target permission level may be determining whether to process an event presenting a document link to a user according to the target permission level.

In one embodiment, whether the user is in an intranet range or not is determined according to the network address of the user, if the user is not in the intranet range, the risk of content leakage of the document link is higher, whether the target authority level is effective or not can be determined according to the setting, and if the network address of the user is higher, the target authority level can be invalid, so that the document link cannot be consulted, previewed and the like.

In one implementation, in the event that the target permission level is not valid, display of document content corresponding to the document link is denied.

In a possible implementation manner, determining the validity of the target permission level according to the network address of the user may include: and determining the risk level of the user according to the network address of the user, and determining the degree of performing invalidation processing on the target permission level according to the risk level of the user to obtain the residual effective permission content in the target permission level.

In some embodiments of the present disclosure, the target permission level includes A, B two permissions (specifically, for example, refer to and edit permissions), if the risk level of the requestor is general, some more important permissions may be invalidated according to a preset target permission level invalidation rule, and if a is the more important permission, the permission a may be invalidated.

In this embodiment, according to the network address of the user, the validity of at least some important rights can be excluded when the requester is outside the intranet set by the enterprise and there may be a high risk, so as to further ensure the security requirement of the data and content corresponding to the document link.

In one embodiment, when the target permission level is valid and the document link corresponds to a target folder, the displaying the preview content corresponding to the document link according to the target permission level includes:

under the condition that the access authority is the first authority, hiding and displaying the document in the target folder corresponding to the document link; or,

under the condition that the access authority is the second authority, displaying a document title and first preview content of a document in a target folder corresponding to the document link; the first preview content is a preset content used for replacing the preview content of the document; or,

under the condition that the access authority is a third authority, displaying second preview content of the document in the target folder; the second preview content is a preview content of the document.

In some embodiments of the present disclosure, the first right may be used to indicate that the user does not have access right to the document corresponding to the document link, or to indicate that the user does not have access right to the folder corresponding to the document link. In the hidden display state, the user cannot see the file icons in the target folder, that is, cannot know the existence of the document in the target folder.

In some embodiments of the present disclosure, the second permission may be used to indicate that the user has only a simple preview permission for the document corresponding to the document link. The first preview content may be a thumbnail icon generated from thumbnail content of a document.

In some embodiments of the present disclosure, the third right may be used to indicate that the user has a full reading right for the document corresponding to the document link, so that the second preview content is the preview content generated according to the full reading right.

In the embodiment, the target authority of the document link can be further defined in a distinguishing manner, so that the accessed state of the document link can be finely managed, and the setting of the target authority can meet the safety and confidentiality requirements under different states.

In one embodiment, when the target permission level is valid and the document link corresponds to a target file, the displaying the preview content corresponding to the document link according to the access permission includes:

under the condition that the access authority is the second authority, displaying the no-authority consultation prompt information; or,

and displaying the content of the target file when the target access authority is a third authority.

And under the condition that the target access authority is the second authority, the user can execute simple reference operation on the document link, and the preview content corresponding to the document link can be displayed by further subdivision authority of basic preview according to the target authority so as to view the content of the target file.

In some embodiments of the present disclosure, the third permission may be an operation permission such as further viewing based on the second permission. The third right may include a reading right for the entire content of the document corresponding to the document link, or the right may include a reading right for content having a lower security requirement for the document corresponding to the document link.

In some embodiments of the present disclosure, for example, the document corresponding to the document link includes parts a, b, and c, where part a records content with higher security requirement, parts b and c record content with lower security requirement, and the reading right level of the third right is lower, then the contents of parts b and c can be displayed, and part a is hidden.

In a specific example, the presentation scene of the document link may include presentation on a (group chat) chat interface, and chat personnel can share the document link on the chat interface by sending a file or a link. After a publisher of the document corresponding to the document link publishes the document, operation authorities of different users for previewing, reading and the like are set, the document link can be normally displayed on a chat interface of the publisher, and the user is allowed to perform previewing operation corresponding to the authority of the document link. For users who do not have any authority, prompt information which cannot be previewed can be displayed on an information display interface of the users, as shown in fig. 3A. If the publisher of the document publishes the document access path on the chat interface, the requester can firstly access the target folder of the document through the target file access path, namely the document links the corresponding document and the target folder in the scene, and the user can firstly access the target folder and then access the document through the target folder. The display status of the target folder corresponds to the target authority of the user. If the user does not have the preview authority of the document, the exception icon 301 of the target folder can be displayed in the upper folder of the target folder, and as shown in fig. 3B, the document in the target folder can be hidden and displayed in the target folder opening interface. If a plurality of documents exist in the target folder, and the user has the authority for previewing or reading and the like on part of the documents, the icons of the documents of which the user has the authority can be correspondingly displayed in the target folder.

In this embodiment, when the target access permission indicates that the requestor can refer to or visually access the target file, a manner of simply displaying an icon of the target file to allow the requestor to visually check the existence of the file and a manner of further performing permission subdivision after the target file is opened are adopted to perform further permission distinction, so that the access permission of the object can be further finely managed.

In one embodiment, as shown in fig. 4, before determining the attribute information of the user in response to the event of presenting the document link to the user, the method includes:

step 401: receiving a file search box starting instruction;

step 402: generating a pull-down menu under the file search box, wherein the pull-down menu comprises recently browsed documents of the user;

step 403: and when detecting the hovering instruction above the recently browsed document, generating a preview of the recently browsed document at a set position around the hovering instruction.

In some embodiments of the present disclosure, the file search box starting instruction may be generated by clicking the file search box by a user. The pull-down menu may also be referred to as a search list, and when a user without access hovers a cursor over the search file list, the thumbnail is replaced with a "preview-impossible schematic".

In the embodiment, after the pull-down menu of the file search box is generated, the hovering instruction is generated according to the hovering operation of the cursor on the document menu browsed recently, so that the preview image of the document is generated near the hovering instruction, a user can preview each document object before the user accesses the sending object through operations such as clicking, and convenience is provided for the user to select the document.

In one embodiment, in a case that the target permission level is valid and the document link corresponds to a document space containing a document set, the displaying the preview content corresponding to the document link according to the access permission includes:

under the condition that the access authority is a second authority, opening the document space according to the object access request; showing the document catalog of the document space;

and under the condition that the access authority is the third authority, displaying the document set contained in the document space according to the object access request.

In some embodiments of the present disclosure, the document space may be a cloud document space, and a user may access documents in the cloud document space through document links.

In some embodiments of the present disclosure, if the user has only a simple viewing right (second right) to the cloud document space, the user may be allowed to view the document directory of the cloud document space, and at the same time, the user is denied to further view the document corresponding to the document directory.

Generally, the security control of each online collaboration product on the cloud document is mainly realized through reading rights, and the specific expression is as follows: when the user has the reading right of the cloud document, the user can see all the contents and the attached information of the cloud document, wherein the attached information comprises but is not limited to an author, creation time and the like; when the user does not have the reading right of the cloud document, the user can only see the title and the link of the cloud document at most; the reading permission coverage defined by the existing cloud document products on the market is wide, and the possibility that a document manager can further subdivide and control is limited. In some embodiments of the present disclosure, different user permission levels are set for visitors to a cloud document space, and contents in the document space are displayed to users according to the different user permission levels, so that user permissions are subdivided in a cloud document space scene.

In an embodiment of the present disclosure, the event for presenting the document link to the user includes: the document link is included in the target document accessed by the user;

the displaying the preview content corresponding to the document link according to the target permission level includes:

responding to the focus at the document link, and displaying preview content corresponding to the document link according to the target authority level; or responding to a view switching instruction of the document link, and displaying the preview content corresponding to the document link according to the target authority level.

In the embodiment, when the focus of a mouse and the like is placed at the document link, the preview content corresponding to the document link can be displayed according to the subdivided authority level, so that when the preview operation is executed on the document corresponding to the document link in the modes of moving the focus of the mouse and the like, the preview content can be displayed to a user according to the consultable content corresponding to the authority.

In an embodiment of the present disclosure, the event for presenting the document link to the user includes: the document link is included in the target document shared in the conference interface;

and responding to the triggering operation of the document link, and displaying the preview content corresponding to the document link according to the target authority level.

In this embodiment, the trigger operation may be a click operation. The target folder or the file corresponding to the document link can be displayed according to the triggering operation, and the permission subdivision under the condition that the user triggers the document link is realized.

In an embodiment of the present disclosure, the event for presenting the document link to the user includes: receiving a chat message containing the document link in a session of an instant messaging client;

and displaying preview content corresponding to the document link matched with the target authority level of each user to the user according to the target authority level of each user in the session.

In some embodiments of the present disclosure, the target permission levels of the users in the session may include target permission levels of the participants in a group chat, a conference, and the like. In the conference, the document sharing can be carried out by a sharing interface mode, and in this case, each participating user can check the preview content corresponding to the own authority direction.

In some embodiments of the present disclosure, the reading right control range of a document is very wide, and basically controls all operations that a user can perform on the document, including but not limited to: editing, downloading, exporting and sharing are not beneficial to enterprise managers to carry out more detailed safety control.

Therefore, in the present disclosure example, the subdivision setting may be performed for any one of the rights of the document corresponding to the document link. For example, as shown in fig. 5, a setting may be made separately for the preview authority, and the main rule shown in fig. 5, namely, a prohibition, indicating that the preview of the document is prohibited unless specifically set, may be set. The supplementary rule shown in fig. 5 may also be set, that is, a supplementary list may be set, where information such as a user name of the requester and/or an IP (Internet Protocol) address of the requester may be configured in the list, and the information indicates that the requester in the supplementary list may preview the document, that is, a user corresponding to the information in the list has a preview right.

In some embodiments of the present disclosure, or under the main rule of object access right setting, the user can access the document. In a supplemental rule, the enterprise administrator may set a blacklisted user for which access to the company document content is prohibited.

In a specific example, the original "reading" permission point can be split into three permission points of "document visible" (equivalent to the aforementioned second permission or first permission)/"content preview" (equivalent to the aforementioned second permission)/"content viewing" (equivalent to the aforementioned third permission).

In some embodiments of the present disclosure, document visibility (Perceive) rights may include whether the title, link, author, creation time of the document can be seen. Content Preview (Preview) rights may include whether a document body-related profile, such as a thumbnail or a body Preview, can be seen. Content View (View) permissions may include whether all the body content of a document can be seen and the document's collateral information (comments, praise, etc.).

In some embodiments of the present disclosure, from the perspective of the user, the document rights still retain the "reader" role.

In some embodiments of the present disclosure, when a user is granted the role "read", three permissions of "content visible"/"content preview"/"content view" are possessed simultaneously;

when the user is withdrawn from the role of reading, the three rights of content visibility/content preview/content viewing are simultaneously lost;

the 'reading' permission (i.e. the new 'content viewing' permission) is also finely controlled by Admin, and if the user is controlled by Admin to 'document preview and viewing', the permission cannot be obtained.

In some embodiments of the present disclosure, when the requester accesses the target object through the external network, part of operations on the target object may be disabled, and actions related to the content of the target object are hidden, such as document content search, replacement, translation, web interface viewing comments, web interface viewing history comments, current document notification, and the like. Content-independent operations may allow for use, such as creating copies of target objects, adding target objects to folders, moving, adding shortcuts, favorites, focusing, printing, wide-screen mode, sharing, authorization, deletion, saving as templates.

In some embodiments of the present disclosure, when the user is prohibited from accessing the target document, if the user accesses the cloud document list page where the target document is located on the external network, the preview image is shown as an "unauthorized access diagram"; after the user opens the document detail page, the page may show "no access to the extranet".

In some embodiments of the present disclosure, when the user is prohibited from accessing the target webpage, if the user is on the external network and the target webpage is an encyclopedia webpage, the page representation form (knowledge base) is normally displayed in the directory tree, and the page details are not displayed. As shown in fig. 6A.

In some embodiments of the present disclosure, within a document @ a user, then IP restrictions do not affect the "mention" functionality interaction: when the mentioned user has the reading right, the name of the person is blue; when the mentioned user has no 'reading right', the name of the person is gray, and an authorization process is triggered. As shown in fig. 6B.

In some embodiments of the present disclosure, the referenced internal document is previewed in an external document, presenting a "no access" view or hint information, as shown in FIG. 6C.

In an example of the present disclosure, the target object is a target file, and the access scenario may be a file list. The file list can be reached through a folder or a path, including: the access paths of the ' cloud document home page > quick access ' and the ' most recent access ' reach the file list, the access paths of the ' my space > owned by me ' reach the file list, the file list (including personal folders and shared folders) in the access folder, the path of the ' shared space > shared with me reaches the file list, the ' favorite ' file list, the ' recycle bin ' file list and the like. When a requester accesses a file list where a target file is located, for a user without viewing permission, a file thumbnail of the list view is changed into a general file ICON (ICON), and a viewing image in a grid view is changed into a schematic view of 'no permission to view'.

In some embodiments of the present disclosure, when the target object is a template, access may be made through a "template" list. The extranet user can not view the contents of the in-company template and the personal template through the preview image (can view the universal template), the 'preview' button of the template preview image is grayed out, and the mouse hover prompts the user: "company documents cannot be previewed due to administrator security settings".

In some embodiments of the present disclosure, in a sharing scenario, a user without a viewing right cannot view a target file in a target document in a smart sharing scenario.

In some embodiments of the present disclosure, in a scene where a target object is shared through cloud file link, at a view angle of a sharer: the content cannot be previewed, but an authorization operation can still be performed; from the sharee perspective: displaying a link preview card, and displaying an unauthorized schematic diagram by abbreviating and drawing; the hover link also shows a managed schematic.

In some embodiments of the present disclosure, the rich text information is obtained through an openAPI (Application Programming Interface), and in a case of accessing the API through an external network, a "no-permission-to-access" text is directly returned for a requestor without viewing permission. A requestor without any authority presents inaccessible details when directly opening a cloud document in a Feed message. In a group chat document sharing scene, a team document tag can be opened in the group chat, and a user can be prompted to be unable to view the document tag.

In some embodiments of the present disclosure, after the preview authority is disabled, the user cannot see the thumbnail information of the content. Meanwhile, the disclosed example splits the existing "reading" right into three subdivision rights of "document visible", "content preview" and "content view", and realizes the fine management of the access right of the target object (e.g. document).

In the embodiment, the information related to the user, which is acquired, stored and used, conforms to the regulations of related laws and regulations, and does not violate the good customs of the public order.

It should be noted that the method of the embodiments of the present disclosure may be executed by a single device, such as a computer or a server. The method of the embodiment can also be applied to a distributed scene and completed by the mutual cooperation of a plurality of devices. In such a distributed scenario, one of the devices may only perform one or more steps of the method of the embodiments of the present disclosure, and the devices interact with each other to complete the method.

It should be noted that the above describes some embodiments of the disclosure. Other embodiments are within the scope of the following claims. In some cases, the actions or steps recited in the claims may be performed in a different order than in the embodiments described above and still achieve desirable results. In addition, the processes depicted in the accompanying figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. In some embodiments, multitasking and parallel processing may also be possible or may be advantageous.

Fig. 7 shows an object access device according to the foregoing embodiment of the present disclosure, which includes:

an attribute information determining module 701, configured to determine attribute information of a user in response to an event that a document link is presented to the user;

an authority level determining module 702, configured to determine, according to the attribute information of the user and the authority information corresponding to the document link, a target authority level for the user to preview the document link; the target authority level is one of a plurality of levels in the authority information, and the plurality of levels comprise reference levels of different degrees to the target object under the condition of having the access authority;

and a preview content displaying module 703, configured to display preview content corresponding to the document link according to the target permission level.

In some embodiments of the disclosure, as shown in fig. 8, the preview content presentation module includes:

a validity unit 801, configured to determine validity of the target permission level according to the network address of the requester;

a content unit 802, configured to, in a case that the target permission level is valid, display preview content corresponding to the document link according to the target permission level.

In some embodiments of the disclosure, in a case that the target permission level is valid and the document link corresponds to a target folder, the preview content presentation module further includes:

the first display unit is used for hiding and displaying the document in the target folder corresponding to the document link under the condition that the access authority is the first authority; and/or the presence of a gas in the gas,

the second display unit is used for displaying the document title and the first preview content of the document in the target folder corresponding to the document link under the condition that the access authority is the second authority; the first preview content is preset content for replacing the preview content of the document; and/or the presence of a gas in the gas,

a third display unit, configured to display a second preview content of the document in the target folder when the access right is a third right; the second preview content is a preview content of the document.

In some embodiments of the disclosure, in a case that the target permission level is valid and the document link corresponds to a target file, the preview content display module further includes:

the fourth display module is used for displaying the prompt information which is not referred to under the condition that the access authority is the second authority; and/or the presence of a gas in the gas,

and the fifth display module is used for displaying the content of the target file under the condition that the target access authority is the third authority.

In some embodiments of the present disclosure, as shown in fig. 9, the object access apparatus further includes:

a starting instruction module 901, configured to receive a file search box starting instruction;

a pull-down menu module 902, configured to generate a pull-down menu below the file search box, where the pull-down menu includes recently viewed documents of the user;

a preview image module 903, configured to generate a preview image of the recently browsed document at a set position around the hover instruction when detecting the hover instruction over the recently browsed document.

In some embodiments of the disclosure, in a case that the target permission level is valid and the document link corresponds to a document space containing a document set, the preview content presentation module further includes:

the sixth display module is used for opening the document space according to the object access request under the condition that the access right is the second right; showing the document catalog of the document space;

and the seventh display module is used for displaying the document set contained in the document space according to the object access request under the condition that the access right is the third right.

In some embodiments of the present disclosure, the event of presenting the document link to the user includes: the document link is included in the target document accessed by the user;

the preview content display module includes:

the focus unit is used for responding to the focus positioned at the document link and displaying the preview content corresponding to the document link according to the target authority level; and/or the presence of a gas in the gas,

and the switching unit is used for responding to the view switching instruction of the document link and displaying the preview content corresponding to the document link according to the target authority level.

In some embodiments of the present disclosure, the event of presenting the document link to the user includes: the document link is included in the target document shared in the conference interface;

the preview content display module includes:

and the triggering unit is used for responding to the triggering operation of the document link and displaying the preview content corresponding to the document link according to the target authority level.

In some embodiments of the present disclosure, the event of presenting the document link to the user includes: receiving a chat message containing the document link in a session of an instant messaging client;

the preview content display module comprises:

and the conversation unit is used for showing preview contents corresponding to the document links matched with the target authority levels of the users to the users according to the target authority levels of the users in the conversation.

In some embodiments of the present disclosure, the event of presenting the document link to the user includes: receiving a notification message containing the document link in an information stream of an instant messaging client, wherein the notification message is triggered based on a preset operation in a document corresponding to the document link;

the preview content display module includes:

and the notification message unit is used for displaying the preview content corresponding to the document link in a notification message interface corresponding to the information flow according to the target authority level.

The specific implementation of the above modules can refer to the foregoing method and the accompanying drawings, and the description is not repeated here. For convenience of description, the above devices are described as being divided into various modules by functions, and are described separately. Of course, the functionality of the various modules may be implemented in the same one or more pieces of software and/or hardware in practicing the present disclosure.

The apparatus of the foregoing embodiment is used to implement the corresponding search method in any of the foregoing embodiments, and has the beneficial effects of the corresponding method embodiment, which are not described herein again.

Based on the same inventive concept, corresponding to any of the above embodiments, the present disclosure further provides an electronic device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and when the processor executes the program, the recommended method of any of the above embodiments is implemented.

Fig. 10 is a schematic diagram illustrating a more specific hardware structure of an electronic device according to this embodiment, where the electronic device may include: a processor 2010, a memory 2020, an input/output interface 2030, a communications interface 2040, and a bus 2050. Wherein the processor 2010, memory 2020, input/output interface 2030, and communication interface 2040 enable communication with each other within the device via bus 2050.

The processor 2010 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an Application Specific Integrated Circuit (ASIC), or one or more Integrated circuits, and is configured to execute related programs to implement the technical solutions provided in the embodiments of the present disclosure.

The Memory 2020 may be implemented in the form of a ROM (Read Only Memory), a RAM (Random Access Memory), a static Memory device, a dynamic Memory device, or the like. The memory 2020 may store an operating system and other application programs, and when the technical solutions provided by the embodiments of the present specification are implemented by software or firmware, the relevant program codes are stored in the memory 2020 and called by the processor 2010 for execution.

The input/output interface 2030 is used for connecting an input/output module to input and output information. The i/o module may be configured as a component in a device (not shown) or may be external to the device to provide a corresponding function. The input devices may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output devices may include a display, a speaker, a vibrator, an indicator light, etc.

The communication interface 2040 is used for connecting a communication module (not shown in the figure) to implement communication interaction between the present apparatus and other apparatuses. The communication module can realize communication in a wired mode (such as USB, network cable and the like) and also can realize communication in a wireless mode (such as mobile network, WIFI, Bluetooth and the like).

The bus 2050 includes a path for communicating information between various components of the device, such as the processor 2010, the memory 2020, the input/output interface 2030, and the communication interface 2040.

It is to be appreciated that while the above-described device illustrates only the processor 2010, the memory 2020, the input/output interface 2030, the communication interface 2040, and the bus 2050, in an implementation, the device may include other components necessary for proper operation. In addition, those skilled in the art will appreciate that the above-described apparatus may also include only those components necessary to implement the embodiments of the present description, and not necessarily all of the components shown in the figures.

The electronic device of the above embodiment is used to implement the corresponding method in any of the foregoing embodiments, and has the beneficial effects of the corresponding method embodiment, which are not described herein again.

Based on the same inventive concept, the present disclosure also provides a non-transitory computer-readable storage medium storing computer instructions for causing the computer to perform the method according to any of the above embodiments, corresponding to any of the above embodiments.

Computer-readable media of the present embodiments, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device.

The computer instructions stored in the storage medium of the above embodiment are used to enable the above computer to execute the above method of any one of the above embodiments, and have the beneficial effects of the corresponding method embodiment, which are not described herein again.

Those of ordinary skill in the art will understand that: the discussion of any embodiment above is meant to be exemplary only, and is not intended to intimate that the scope of the disclosure, including the claims, is limited to these examples; within the idea of the present disclosure, features in the above embodiments or in different embodiments may also be combined, steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present disclosure as described above, which are not provided in detail for the sake of brevity.

In addition, well-known power/ground connections to Integrated Circuit (IC) chips and other components may or may not be shown in the provided figures for simplicity of illustration and discussion, and so as not to obscure the embodiments of the disclosure. Furthermore, devices may be shown in block diagram form in order to avoid obscuring embodiments of the present disclosure, and this also takes into account the fact that specifics with respect to implementation of such block diagram devices are highly dependent upon the platform within which the embodiments of the present disclosure are to be implemented (i.e., specifics should be well within purview of one skilled in the art). Where specific details (e.g., circuits) are set forth in order to describe example embodiments of the disclosure, it should be apparent to one skilled in the art that the embodiments of the disclosure can be practiced without, or with variation of, these specific details. Accordingly, the description is to be regarded as illustrative instead of restrictive.

While the present disclosure has been described in conjunction with specific embodiments thereof, many alternatives, modifications, and variations of these embodiments will be apparent to those of ordinary skill in the art in light of the foregoing description. For example, other memory architectures (e.g., dynamic ram (dram)) may use the embodiments discussed.

The disclosed embodiments are intended to embrace all such alternatives, modifications and variances which fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalents, improvements, and the like that may be made within the spirit and principles of the embodiments of the disclosure are intended to be included within the scope of the disclosure.

Claims

1. An object access method, comprising:

in response to an event that a document link is presented to a user, determining attribute information of the user;

determining a target authority level for previewing the document link by the user according to the attribute information of the user and the authority information corresponding to the document link; the target permission level is one of a plurality of levels in the permission information, and the plurality of levels comprise reference levels of different degrees for a target object under the condition of having access permission;

2. The method of claim 1, wherein the presenting the preview content corresponding to the document link according to the target permission level comprises:

determining the validity of the target permission level according to the network address of the requester;

and under the condition that the target authority level is effective, displaying preview content corresponding to the document link according to the target authority level.

3. The method of claim 2, wherein, in the case that the target permission level is valid and the document link corresponds to a target folder, the presenting the preview content corresponding to the document link according to the target permission level comprises:

under the condition that the access authority is a second authority, displaying a document title and first preview content of a document in a target folder corresponding to the document link; the first preview content is preset content used for replacing preview content of the document; or,

under the condition that the access authority is a third authority, displaying second preview content of the document in the target folder; the second preview content is preview content of the document.

4. The method of claim 2, wherein, in the case that the target permission level is valid and the document link corresponds to a target file, the presenting the preview content corresponding to the document link according to the access permission comprises:

under the condition that the access authority is a second authority, displaying the no-authority consultation prompt information; or,

and displaying the content of the target file under the condition that the target access authority is a third authority.

5. The method of claim 4, wherein determining attribute information of a user in response to an event that presents a document link to the user is preceded by:

receiving a file search box starting instruction;

generating a pull-down menu under the file search box, wherein the pull-down menu comprises recently browsed documents of the user;

when a hovering instruction above the recently browsed document is detected, a preview of the recently browsed document is generated at a set position around the hovering instruction.

6. The method of claim 2, wherein, in the case that the target permission level is valid and the document link corresponds to a document space containing a document set, the presenting the preview content corresponding to the document link according to the access permission comprises:

under the condition that the access authority is a second authority, opening the document space according to an object access request; displaying a document directory of the document space;

and under the condition that the access right is the third right, displaying the document set contained in the document space according to the object access request.

7. The method of claim 1, the event presenting a document link to a user comprising: including the document link in a target document accessed by a user;

the displaying the preview content corresponding to the document link according to the target permission level comprises:

responding to the focus at the document link, and displaying preview content corresponding to the document link according to the target authority level; or responding to a view switching instruction of the document link, and displaying preview content corresponding to the document link according to the target permission level.

8. The method of claim 1, the event presenting a document link to a user comprising: including the document link in a target document shared in a conference interface;

9. The method of claim 1, wherein the event that presents a document link to a user comprises: receiving a chat message containing the document link in a session of an instant messaging client;

and displaying preview content corresponding to the document link matched with the target authority level of each user in the session to the user according to the target authority level of each user in the session.

10. The method of claim 1, wherein the event that presents a document link to a user comprises: receiving a notification message containing the document link in an information flow of an instant messaging client, wherein the notification message is triggered based on a preset operation in a document corresponding to the document link;

and displaying preview content corresponding to the document link in a notification message interface corresponding to the information flow according to the target permission level.

11. An object access device, comprising:

the attribute information determining module is used for responding to an event for showing the document link to a user and determining the attribute information of the user;

the permission level determining module is used for determining a target permission level for the user to preview the document link according to the attribute information of the user and the permission information corresponding to the document link; the target permission level is one of a plurality of levels in the permission information, and the plurality of levels comprise reference levels of different degrees for a target object under the condition of having access permission;

12. The apparatus of claim 1, wherein the preview content presentation module comprises:

the validity unit is used for determining the validity of the target permission level according to the network address of the requester;

and the content unit is used for displaying the preview content corresponding to the document link according to the target authority level under the condition that the target authority level is effective.

13. The apparatus of claim 12, wherein, in the event that the target permission level is valid and the document link corresponds to a target folder, the preview content presentation module further comprises:

the first display unit is used for hiding and displaying the document in the target folder corresponding to the document link under the condition that the access authority is the first authority; and/or the presence of a gas in the atmosphere,

the second display unit is used for displaying the document title and the first preview content of the document in the target folder corresponding to the document link under the condition that the access right is the second right; the first preview content is preset content used for replacing preview content of the document; and/or the presence of a gas in the gas,

the third display unit is used for displaying second preview content of the document in the target folder under the condition that the access right is a third right; the second preview content is preview content of the document.

14. The apparatus of claim 12, wherein, in the event that the target permission level is valid and the document link corresponds to a target file, the preview content presentation module further comprises:

the fourth display module is used for displaying the prompt information which is not referred to under the condition that the access authority is the second authority; and/or the presence of a gas in the atmosphere,

15. The apparatus of claim 14, wherein the apparatus further comprises:

the starting instruction module is used for receiving a starting instruction of the file searching box;

the pull-down menu module is used for generating a pull-down menu below the file search box, and the pull-down menu comprises recently browsed documents of the user;

and the preview image module is used for generating a preview image of the recently browsed document at a set position around the hovering instruction when the hovering instruction above the recently browsed document is detected.

16. The apparatus of claim 12, wherein, in the event that the target permission level is valid and the document link corresponds to a document space containing a collection of documents, the preview content presentation module further comprises:

the sixth display module is used for opening the document space according to the object access request under the condition that the access right is the second right; displaying a document directory of the document space;

17. The apparatus of claim 11, the event that presents a document link to a user comprising: including the document link in a target document accessed by a user;

the preview content presentation module comprises:

and the switching unit is used for responding to a view switching instruction of the document link and displaying the preview content corresponding to the document link according to the target authority level.

18. The apparatus of claim 11, the event that presents a document link to a user comprising: including the document link in a target document shared in a meeting interface;

the preview content presentation module comprises:

19. The apparatus of claim 11, wherein the event that presents a document link to a user comprises: receiving a chat message containing the document link in a session of an instant messaging client;

the preview content presentation module comprises:

and the session unit is used for displaying preview content corresponding to the document link matched with the target authority level of the user to the user according to the target authority level of each user in the session.

20. The apparatus of claim 12, wherein the event that presents a document link to a user comprises: receiving a notification message containing the document link in an information flow of an instant messaging client, wherein the notification message is triggered based on a preset operation in a document corresponding to the document link;

the preview content presentation module comprises:

21. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the method according to any one of claims 1-9 when executing the program.

22. A non-transitory computer-readable storage medium storing computer instructions for causing a computer to perform the method of any one of claims 1-9.

23. A computer program product comprising computer program instructions which, when run on a computer, cause the computer to perform the method of any one of claims 1-9.