Resource access control method and device

A computing device that provides a plurality of cloud services, each of the cloud services including cloud service resources, the computing device comprising:

• one or more processors;
• memory coupled to the one or more processors;
• and
• a plurality of programs stored in the memory that, when executed by the one or more processors, cause the computing device to perform a plurality of operations including:
• pre-storing (i) association relationships between respective tag information and group resources and (ii) association relationships between the respective tag information and access permissions, wherein:
• each tag information identifies a respective category of resources and a corresponding plurality of users authorized to access the respective category of resources;
• each category of resources includes a plurality of group resources;
• and
• a respective access permission indicates user accessibility of a group resource and one or more operations that are performed on the group resource;
• receiving a group resource access instruction from a user, the group resource access instruction indicating a first group resource to which the user requests access;
• in response to the group resource access instruction, obtaining tag information that is associated with the first group resource;
• determining, based on the tag information that is associated with the first group resource, that the first group resource belongs to a first category of resources and belongs to a second category of resources;
• obtaining tag information granted to the user from the tag information associated with the first group resource;
• obtaining access permission associated with the tag information based on the tag information granted to the user;
• and
• comparing the access permission with resource permission of the first group resource;
• and
• based on the comparison, granting access of the first group resource to the user, including operations in the first category of resources and in the second category of resources to which the first group resource belongs.

A non-transitory computer readable storage medium storing a plurality of instructions in connection with a computing device that provides a plurality of cloud services, each of the cloud services including cloud service resources, the computing device having one or more processors, wherein the plurality of instructions, when executed by the one or more processors, cause the computing device to perform a plurality of operations including:

• pre-storing (i) association relationships between respective tag information and group resources and (ii) association relationships between the respective tag information and access permissions, wherein:
• each tag information identifies a respective category of resources and a corresponding plurality of users authorized to access the respective category of resources;
• each category of resources includes a plurality of group resources;
• and
• a respective access permission indicates user accessibility of a group resource and one or more operations that are performed on the group resource;
• receiving a group resource access instruction from a user, the group resource access instruction indicating a first group resource to which the user requests access;
• in response to the group resource access instruction, obtaining tag information that is associated with the first group resource;
• determining, based on the tag information that is associated with the first group resource, that the first group resource belongs to a first category of resources and belongs to a second category of resources;
• obtaining tag information granted to the user from the tag information associated with the first group resource;
• obtaining access permission associated with the tag information based on the tag information granted to the user;
• and
• comparing the access permission with resource permission of the first group resource, and
• based on the comparison, granting access of the first group resource to the user, including operations in the first category of resources and in the second category of resources to which the first group resource belongs.