JP2002278822A - Document managing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce a load for manually performing deletion while being conscious of whether each of users added to a selected object belongs to the group of a deleting object or not in a document managing system for computer or the like. SOLUTION: In the document managing system for computer or the like, an access right deleting processing means 12 is provided for deleting the individual access right of a member in a certain group in respect to the selected object as well when deleting the access right of that group in respect to that object.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a document management system such as a computer.

[0002]

2. Description of the Related Art A conventional document management system usually has a security mechanism for limiting the right to access a specific user or group to a document or a folder storing the document. At this time, an access right is added to an arbitrary group for a folder or a document, but a different access right may be added to an arbitrary user in the group. For example, add reference authority to group 1, but want to add full control to Mr. A in the group.
Mr. A wants full control. After adding such an access right, if you want to delete group 1 from the access right of the target object, and if it is important that Mr. A belongs to this group 1, we also want to delete Mr. A's access right There may be cases. In this case, after checking whether each user added as an access right belongs to the group 1, the access right of the user is deleted.

[0003]

However, the procedure in the above-described conventional document management system requires the operator to perform operations while collating information on the access rights of the user and the group for the corresponding folder or file. There was a problem that it was not efficient.

[0004] In addition, performing the above-described procedure in the conventional document management system individually on selected folders and documents is not suitable in terms of the time required for operation and the omission of the procedure in some cases. There was a problem that it was efficient.

[0005] The present invention has been made in view of the above-described problems, and in a document management system such as a computer, whether each user added to a selected object belongs to a group to be deleted. The purpose of this is to reduce the load of manually performing deletion in consideration of the situation.

[0006]

Means for Solving the Problems The above-mentioned problems are solved,
In order to achieve the above object, a document management system according to the first aspect of the present invention provides a document management system, such as a computer, which removes access rights of a group to a selected object from a group of the selected object. Access right deletion processing means for deleting individual access rights of members.

According to the first aspect of the present invention, in a document management system such as a computer, when an access right of a certain group is deleted from a selected object, individual access of a member of the group to the object is deleted. Rights can also be deleted, and the burden on the operator performing operations can be reduced.

A document management system according to a second aspect is characterized in that, in the first aspect, the object is a single file or a plurality of files.

According to the second aspect of the present invention, in a document management system such as a computer, when the access right of a certain group is deleted from a selected single or a plurality of files, the access rights of the group to the file are deleted. Individual access rights of members can also be deleted, thereby reducing the load on operator operations.

A document management system according to a third aspect is characterized in that the object described in the first aspect is a single or a plurality of folders including a single or a plurality of folders or files under the object. .

According to the third aspect of the present invention, in a document management system such as a computer, a single or a plurality of selected folders and a single or a plurality of folders or files under the selected folders are provided. When the access right of the group is deleted, the individual access right of the member of the group to the file is also deleted, so that the load on the operation of the operator can be reduced.

[0012]

Embodiments of the present invention will be described below in detail with reference to the accompanying drawings. The present invention is not limited by the embodiment.

FIG. 1 is a diagram showing details of the hardware 15 of the document management application system shown in FIG.

The hardware 15 has a CPU 100, a memory 1, an output device 2, an input device 3, a display device 4, a hard disk 5, and a bus 6. The CPU 100 controls the entire document management system, and executes various processes of the document management application 16 shown in FIG. Memory 1
Mainly functions as a work area of the CPU 100.
The output device 2 is, for example, a printer.

The input device 3 is for a user to input data to the document management system, and includes a keyboard, a mouse, a scanner, and the like. The display device 4
It is a CRT or a liquid crystal display. The hard disk 5 is composed of a magnetic disk or the like, and stores the installed document management application 16 and other applications (software) and the database 22 shown in FIG.
The bus 6 connects the above components.

FIG. 2 is a diagram showing a configuration of a document management application (software) of the document management system according to the embodiment of the present invention. Although a required processing unit other than the following processing units is conceivable as a document management system, only a processing unit that achieves processing according to the present invention will be described.

The document management application 16 includes a document registration processing section 8, a folder creation processing section 9, a list display section 10,
Access right setting processing unit 11, Access right deletion processing unit 12
Having.

The document registration processing section 8 is a processing section for adding bibliographic information to contents input by a file or a scanner, and registering necessary data such as bibliographic information required as a document and content data in the document information table 17. . The folder creation processing unit 9 is a processing unit that creates a folder for storing documents and registers information necessary for the folder in the folder information table 18.

The list display unit 10 is a processing unit that presents a list of folders and documents to the user in a hierarchical manner. The access right setting processing unit 11 displays a GUI when a document or folder is created, allows the user to set the access right of the target object, and updates the account table 19, document or folder security tables 20, 21.

The access right deletion processing unit 12 will be described later in detail. The document management application 16 operates on an operating system 14 that forms an interface with the hardware 15. The operating system 14 shown in FIG. 2 is, for example, a Windows system, and includes various software such as a file viewer attached thereto.

FIG. 3 is a diagram showing the configuration of a database used in the document management system according to the embodiment of the present invention. The database 22 stores the document information table 1 described above.
7, folder information table 18, account table 1
9, the document security table 20 and the folder security table 21 are stored.

FIG. 4 shows an embodiment of the document information table 17 of the database 22 shown in FIG. This table manages bibliographic information and content data of documents.

FIG. 5 shows an embodiment of the folder information table 18 of the database 22 shown in FIG. This table manages folder information.

FIG. 6 shows an embodiment of the account table 19 of the database 22 shown in FIG. This table manages SIDs with unique account IDs.

The SID is W in the Windows system.
ID uniquely assigned to each user group created on Windows operating system in the world
The SID manages users and groups inside the Windows operating system.
With the SID, a service for obtaining a user, a group name, and a user belonging to a group can be received by using an API of the Windows operating system.

FIG. 7 shows an embodiment of the document security table 20 of the database 22 shown in FIG. This table manages the access rights of users and groups added to the document.

FIG. 8 shows an embodiment of the folder security table 21 of the database 22 shown in FIG. This table manages the access rights of users and groups added to the folder.

Document registration processing section 8, folder creation processing section 9
When a document or folder is created, the document security table 20, the folder security table 2
A record is newly added to 1. At this time, the access right setting processing unit 11 is called from the document registration processing unit 8 and the folder creation processing unit 9 to display a GUI and allow the user to set the access right of the target object.
9. Document or folder security table 20,
21 is newly added to the record.

The registered and created documents and folders are hierarchically displayed by the list display unit 10 in a list of folders and documents. When a document or folder is selected from the list and the access right deletion function is called, the access right deletion processing unit 12 is called. The access right deletion processing unit 12 displays, for example, a GUI as shown in FIG. In the "Name" column, a name is displayed so that the selected object can be understood.

When the "Add" button is selected, a list of all user groups is displayed. When the user group to be deleted is selected, the list is displayed in the "User group to be deleted" column. If you select the "Delete" button,
The user group selected in the “List of user groups to be deleted” column is released.

The user groups displayed in the "user / group to be deleted" column are internally associated with SIDs. If you want to automatically delete users belonging to the group, check the "Delete users belonging to the group" box. If, for example, a folder is selected as an object, the same operation as that of the selected object is to be performed on all objects under the folder, the user also checks the "Delete access rights of subordinate objects" box.

The access right deletion processing unit 12 corresponds to FIG.
The processing is executed in accordance with the processing procedure shown in the flowcharts 1 and 12. When the “OK” button is selected in the GUI of FIG. 9 (Step 102: YES (Y)), the account IDs corresponding to the SIDs of all the user groups displayed in the “List of user groups to be deleted” column are entered. , With reference to the account table 19 (step 103).

Thereafter, the processing branches depending on whether the selected object is a document or a folder, and if the selected object is a folder (step 10).
4: NO (N)), the process branches depending on whether the “delete access rights of subordinate objects” box is checked. If the selected object is a document (step 104: Y), the processing in FIG. 11 is repeated for the number of selected documents.

If the selected object is a folder (step 1)
04: N) and if the “delete access rights of subordinate objects” box is checked (step 106: Y), all the documents under the selected folder are displayed as shown in FIG.
1. The process of FIG. 12 is repeated for all folders. When the selected object is a folder (Step 104: N) and the box “Delete the access right of subordinate objects” is not checked (Step 106: N)
Repeats the process of FIG. 12 for the number of selected folders.

FIG. 11 is a flowchart of an access right deletion process for one document. This process is repeated for the number of SIDs to be deleted. Referring to the document security table 20, the target document ID and the deletion target S
The record including the account ID corresponding to the ID is deleted (step 201).

The SID to be deleted is a group (step 202: N), and the "delete user belonging to group" box is checked (step 2).
03: Y), refer to the document security table 20, and acquire all account IDs of the target document ID (step 204). Account ID from account table
Is obtained, and it is checked whether this SID belongs to the user and the SID (group) to be deleted (step 205).

In the case of Windows, an API provided by the OS can be used. SID to be deleted
If it belongs to the (group) group (step 20
6: Y), the record including the target document ID and the account ID is deleted with reference to the document security table 20 (step 207). This series of processing is performed for all acquired account IDs.

FIG. 12 is a flowchart of an access right deletion process for one folder. Since the contents of the processing here are the same as the processing in FIG. 11 in which the document is replaced with the folder, the description is omitted.

As described above, according to the present embodiment,
In a document management system such as a computer, when deleting the access right of a certain group to the selected object (a plurality of files and folders) and the object under the folder (a plurality of files and folders) when the object is a folder, Individual access rights of members of the group to each of these objects can also be deleted, and the load on the operator can be reduced.

[0040]

As described above, according to the present invention,
In a document management system such as a computer, when deleting the access right of a certain group to the selected object (a plurality of files and folders) and the object under the folder (a plurality of files and folders) when the object is a folder, It is also possible to delete the individual access rights of the members of the group to each of these objects, and to efficiently process all applicable folders and files without checking the information on the access rights of the group and the user by the operator. Can reduce the load on the operator.

[0041]

[Brief description of the drawings]

FIG. 1 is an explanatory diagram illustrating a hardware configuration of a system including a document management system according to an embodiment of the present invention;

FIG. 2 is an explanatory diagram showing a software configuration of a system including the document management system according to the embodiment of the present invention;

FIG. 3 is an explanatory diagram showing a configuration of a database of a system including the document management system according to the embodiment of the present invention;

FIG. 4 is an explanatory diagram showing an example of a document information table 17 of the database 22 in FIG. 3 of the system including the document management system according to the embodiment of the present invention;

5 is an explanatory diagram showing an example of a folder information table 18 of a database 22 in FIG. 3 of a system including a document management system according to an embodiment of the present invention;

FIG. 6 is an explanatory diagram showing an example of an account table 19 of the database 22 in FIG. 3 of the system including the document management system according to the embodiment of the present invention;

FIG. 7 is an explanatory diagram showing an example of a document security table 20 of the database 22 in FIG. 3 of the system including the document management system according to the embodiment of the present invention;

8 is an explanatory diagram showing an example of a folder security table 21 of a database 22 in FIG. 3 of a system including a document management system according to an embodiment of the present invention.

FIG. 9 is a diagram illustrating G in the access right deleting process in the system including the document management system according to the embodiment of the present invention;
FIG. 9 is an explanatory diagram illustrating an example of a UI.

FIG. 10 is a flowchart showing an operation of an access right deleting process in the system including the document management system according to the embodiment of the present invention;

FIG. 11 is a flowchart showing an operation of a document access right deleting process in a system including the document management system according to the embodiment of the present invention;

FIG. 12 is a flowchart showing the contents of an operation of an access right deletion process for a folder in a system including the document management system according to the embodiment of the present invention;

[Explanation of symbols]

 Reference Signs List 1 memory 2 output device 3 input device 4 display device 5 hard disk 6 bus 8 document registration processing unit 9 folder creation processing unit 10 list display unit 11 access right setting processing unit 12 access right deletion processing unit 14 operating system 15 hardware 16 document management Application 17 Document information table 18 Folder information table 19 Account table 20 Document security table 21 Folder security table 100 CPU

Claims (3)

[Claims] 1. An access right deletion processing means for deleting, in a document management system such as a computer, an access right of a group to a selected object, the individual access right of a member of the group to the object is also deleted. A document management system comprising: 2. The document management system according to claim 1, wherein the object is a single file or a plurality of files. 3. The document management system according to claim 1, wherein the object is one or more folders including one or more folders or files under the object.