Patent ID: 8516604

Claim:
A method for managing a user, the method comprising: authenticating an identity of the user to determine whether the user has an authority to perform a configuration management operation; if the identity authentication is successful, authenticating, by a service router, a management authority of the user; wherein the authenticating the management authority of the user comprises performing a management authority authentication on an access control list (ACL) configuration when the user configures the ACL; wherein the performing the management authority authentication on the ACL configuration comprises determining whether a source IP address or a destination IP address of the ACL configured by the user belongs to a first network segment to which network addresses pre-assigned to the user belong, and determining that the user is permitted to configure the ACL if the source IP address or the destination IP address of the ACL configured by the user belongs to the first network segment; and if the management authority authentication is successful, permitting, by the service router, the user to perform a service configuration management operation according to the management authority of the user.