Web application-oriented method and system for preventing longitudinal unauthorized

The invention discloses a method and a system for preventing longitudinal unauthorized authority for Web application, and belongs to the technical field of computer Web application, and the method comprises the following steps: defining authority function items; the accounts are empowered, function items are directly distributed to each account, or role information is set for the accounts after the function items are distributed according to roles; after login verification succeeds, account permission is processed, and an account and permission information contained in the account are stored in a redis cache; when a foreground page displays a menu structure and a button, a background interface is called for obtaining; when the foreground calls a background request, the background obtains information from the redis cache to judge whether the current account contains the permission of accessing the request, and if yes, the service method is continuously executed; and if not, returning an unauthorized prompt. Ac