A method for access control, performed by a device for access control comprising: when a group of tasks are executed, controlling an access of a subject to an object according to operation permission corresponding to each of the tasks in the group of tasks (S104); wherein before the group of tasks are executed, the method further comprises: obtaining the operation permission corresponding to each of the tasks in the group of tasks according to a preset correspondence relationship between each of the tasks in the group of tasks and the operation permission (S102); wherein obtaining the operation permission corresponding to each of the tasks in the group of tasks according to the preset correspondence relationship between each of the tasks in the group of tasks and the operation permission comprises: obtaining a role corresponding to the subject executing each of the tasks according to a preset correspondence relationship between the subject and the role; obtaining a first operation permission corresponding to the role according to a preset correspondence relationship between the role and the operation permission; and taking an intersection of a second operation permission corresponding to the task in the preset correspondence relationship between each of the tasks in the group of tasks and the operation permission, and the first operation permission corresponding to the obtained role corresponding to the subject executing the task as the operation permission for each of the tasks. when a group of tasks are executed, controlling an access of a subject to an object according to operation permission corresponding to each of the tasks in the group of tasks (S104); wherein before the group of tasks are executed, the method further comprises: obtaining the operation permission corresponding to each of the tasks in the group of tasks according to a preset correspondence relationship between each of the tasks in the group of tasks and the operation permission (S102); wherein obtaining the operation permission corresponding to each of the tasks in the group of tasks according to the preset correspondence relationship between each of the tasks in the group of tasks and the operation permission comprises: obtaining a role corresponding to the subject executing each of the tasks according to a preset correspondence relationship between the subject and the role; obtaining a first operation permission corresponding to the role according to a preset correspondence relationship between the role and the operation permission; and taking an intersection of a second operation permission corresponding to the task in the preset correspondence relationship between each of the tasks in the group of tasks and the operation permission, and the first operation permission corresponding to the obtained role corresponding to the subject executing the task as the operation permission for each of the tasks. obtaining a role corresponding to the subject executing each of the tasks according to a preset correspondence relationship between the subject and the role; obtaining a first operation permission corresponding to the role according to a preset correspondence relationship between the role and the operation permission; and taking an intersection of a second operation permission corresponding to the task in the preset correspondence relationship between each of the tasks in the group of tasks and the operation permission, and the first operation permission corresponding to the obtained role corresponding to the subject executing the task as the operation permission for each of the tasks. <EOS>