A data privilege control method includes configuring user metadata, dynamically configuring user classification according to the user metadata, dynamically configuring data read and write privilege according to the user classification, receiving a user access request, obtaining the user attributes and determining the user classification according to the user attributes, determining whether the user has a data read and write privilege according to the user classification, and authorizing the user's data read and write operations when it is determined that the user has data read and write privilege. The user metadata includes a number of user attributes.