Designing Data Permissions in the Enterprise Application Environment

With the continuous improvement of social informationization, the digitalization of corporate construction is also developing comprehensively. Data, as a crucial source for creating wealth and competitive advantage, is undoubtedly the most significant asset for all enterprises. However, many companies face the dilemma of insufficient data granularity and configuration flexibility, which undermines the security and availability of their data assets. Therefore, this paper proposes an Api-based data permission control model (ADPC) based on the theoretical foundation of RBAC in the background of data application in the enterprise environment. Firstly, the model maps data objects to different levels of environmental variables in the corporate department structure, then flexibly authorizes and controls permissions through API configuration, and finally verifies its security with SQL AST. The ADPC model was implemented using the Spring Boot, Spring Security and MyBatis framework and was applied in a real enterprise environment. Through this approach, the ADPC model effectively addresses the limitations of traditional data permission control mechanisms in the enterprise application environment.