Patent ID: 8095674

Claim:
A method for access control in device management, comprising: configuring, by a terminal, a management object (MO) of a device management account (DMAcc) of a server in the terminal based on an OMA DM protocol, wherein the MO of the DMAcc includes preset rights, and the preset rights indicate whether the server has rights to create a node of which a type is a management object identifier (MOI) or to change the type of the node to the MOI; receiving, by the terminal, a command that comprises the MOI and a node identifier of a target node from a server; and judging whether the rights of the server meet preset rights according to the MOI included in the command; judging whether the server has access rights of the target node identified by the node identifier according to an access control list (ACL) of the target node; and running the command when the rights of the server meet the preset rights and the server has the access rights of the target node identified by the node identifier.