Method, system and terminal for access control in device management

A terminal, comprising:

• a receiving unit, adapted to receive a command that includes a node identifier of a target node from a server;
• a judging unit, adapted to judge whether the rights of the server meet preset rights and whether the server has access rights of the target node identified by the node identifier, and send the judgment result;
• and
• a running unit, adapted to run the command if the judgment result received from the judging unit is that the rights of the server meet the preset rights and the server has the access rights of the target node.

A method for access control in device management, comprising:

• configuring a device management account (DMAcc) management object (MO) that comprises a home group of a server;
• adding rights of the group to the access control lists of nodes of device management tree;
• receiving a command that includes a node identifier of a target node from the server;
• and
• judging whether the server or the home group of the server has access rights of the target node identified by the node identifier, if so, running the command.

A terminal, comprising a computer-readable storage medium including a computer program, wherein the computer program is adapted to control a process to perform a process and the process comprises:

• configuring a device management account (DMAcc) management object (MO) that comprises a home group of a server;
• adding rights of the group to the access control lists of nodes of device management tree;
• receiving a command that includes a node identifier of a target node from the server;
• and
• judging whether the server or the home group of the server has access rights of the target node identified by the node identifier, if so, running the command.