The invention relates to a method and a
system for managing authority. The method includes steps of creating tree structures for defining all authority bodies and resource access authority information corresponding to each authority body; displaying all the authority bodies stored in the tree structures and the resource access authority information corresponding to each authority body in a user authority
list mode; caching
user information in login requests when the login request transmitted by users are received; searching user authority lists according to the cached
user information after the users successfully log in, and acquiring the resource access authority information corresponding to the users; judging whether the optional user has the authority to access requested resources or not according to resource access authority of the user when requests for accessing an optional resource from the user are detected, allowing the user to access the resources if the uses has the access authority, or completing
processing procedures if the user does not have the access authority. The method and the
system have the advantages that
resource management and
authority control can be improved, operation behavior of the users can be regulated, and the performance of the
system can be greatly improved.