JP2005085136A - Administrative document management device and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an administrative document management device for imparting proper access authority to each document and file and managing each document and file, and to provide an administrative document management program. <P>SOLUTION: An access authority management part 10 of an administrative document management server 2 acquires a document name or a file name, operation contents to be performed to a document or a file, and the assignment, occupational rank and role of a user who tries to perform the operation from a user terminal 3, and acquires the value of a flag set in the document or the file by referring to document management data 12, and acquires a permission level based on the assignment, occupational rank and role of the user by referring to exception access authority data 14 or default access authority data 13 according to the value of the flag, and decides whether or not the operation contents desired by the user are the operation permitted by the permission level to decide the propriety of the operation. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an administrative document management apparatus and an administrative document management program for granting appropriate access authority to individual documents and books and managing the individual documents and books.

  The work of government agencies and local governments is based on “documentation”, and vast amounts of documents are created and stored every day. As a computer system for managing this enormous document, there is an administrative document management system (for example, Patent Document 1).

  By the way, it is required to ensure the integrity and confidentiality of documents handled by administrative agencies. Therefore, in order to manage a document as electronic data, it is necessary to set an access authority for each document.

In addition, in order to set access authority for each of a large number of documents and books, a great deal of labor is required. Therefore, a computer system that can set access authority with the lowest possible workload is desired. It was.
JP 2000-99470 A

  In view of the above circumstances, the present invention sets an appropriate access authority for each document and book, and determines whether or not the document can be operated according to a user who wants to operate the document and book. And to provide administrative document management program.

  To achieve the above object, an administrative document management apparatus according to claim 1 is an administrative document management apparatus that manages a document created in a business of a public institution, and includes at least a document name, A flag value indicating whether access authority is set for the document, a book name of the book for storing the document, and a flag value indicating whether access authority is set for the book For document management data consisting of the above, exception access authority data in which the permission level that ranks the operations that can be performed on a specific document or a specific book for each operation content is set for each position, and the document or book Storage means for storing default access authority data in which the permission level that ranks the operations that can be performed for each operation content is set for each position, the document name or the book title, When the operation content to be performed on the document or the book and the job title of the user to be operated are acquired, the flag of the flag set in the document or the book is referenced with reference to the document management data. A value is acquired, and according to the value of the flag, the exception access authority data or the default access authority data is referenced to acquire a permission level based on the user's job title, and the operation content is permitted at the permission level. And an access authority management unit that determines whether the operation is performed and determines whether the operation is possible.

  The administrative document management apparatus according to claim 2 is the administrative document management apparatus according to claim 1, wherein the exception access authority data is an operation that can be performed on a specific document or book. The permission level ranked for each operation content is set for each position of a specific organization, and the access authority management means includes the document name or the book title, and the operation content to be performed on the document or the book title. When acquiring the organization and position to which the user to be operated belongs, referring to the document management data, the value of the flag set in the document or the book is acquired, and according to the value of the flag, By referring to the exception access authority data or the default access authority data, the permission level is assigned based on the position or role in the organization to which the user belongs. And, the operation content is determined whether the operation is allowed in the permission level, and determines whether the operation.

  The administrative document management apparatus according to claim 3 is the administrative document management apparatus according to claim 1 or 2, wherein the exception access authority data is for a specific document or book. The permission level that ranks the operations that can be performed for each operation content is set for each position of the specific organization and the role within the organization, and the default access authority data indicates the operations that can be performed on the document or book for each operation content. The ranked permission level is set for each job title and role, and the access authority management means tries to operate the document name or the book title, the operation contents to be performed on the document or the book title, The organization and position to which the user belongs. When the role is acquired, the value of the flag set in the document or the book is acquired with reference to the document management data, and the exception access authority data or the default access authority is acquired according to the flag value. Refers to the data, obtains with priority the permission level set for each role in the organization to which the user belongs, determines whether the operation content is an operation permitted at the permission level, and operates It is characterized by determining whether or not.

  An administrative document management apparatus according to a fourth aspect of the present invention is the administrative document management apparatus according to any one of the first to third aspects, wherein the access authority management unit is configured to store a document to be operated by a user. If the value of the flag indicates that the access right is not set, the flag value of the book that stores the document is acquired, and the exception access right data or the default is obtained according to the value of the flag. A permission level is acquired with reference to access authority data.

  The administrative document management apparatus according to claim 5 is the administrative document management apparatus according to any one of claims 1 to 4, wherein the access authority management means stores a book to be operated by a user. When the value of the flag indicates that the access right is not set, the permission level is acquired with reference to the default access right data.

  An administrative document management program according to claim 6 is an administrative document management program that is executed by a computer that manages a document created in a business of a public institution, and includes at least a document name and the document A flag value indicating whether or not access authority is set, a book name of a book that stores the document, and a flag value indicating whether or not access authority is set for the book Document management data consisting of the above, exception access authority data in which the permission level that ranks the operation that can be performed on a specific document or a specific book for each operation content is set for each position, and the document or book A computer that stores default access authority data in which permission levels obtained by ranking the operations that can be performed for each operation content are set for each job title. Alternatively, when the book title, the content of the operation to be performed on the document or the book, and the position of the user to be operated are acquired, the document or the book is referred to by referring to the document management data. Obtain the value of the flag that has been set, refer to the exception access authority data or the default access authority data according to the value of the flag, obtain a permission level based on the user's job title, and Is operated as an access authority management means for determining whether or not the operation is permitted at the permission level and determining whether or not the operation is permitted.

  The administrative document management program according to claim 7 is the administrative document management program according to claim 6, wherein the exception access authority data is an operation that can be performed on a specific document or book. The permission level ranked for each operation content is set for each position of a specific organization, and the access authority management means includes the document name or the book title, and the operation content to be performed on the document or the book title. When acquiring the organization and position to which the user to be operated belongs, referring to the document management data, the value of the flag set in the document or the book is acquired, and according to the value of the flag, Refer to the exception access authority data or the default access authority data, and permit based on the position or role in the organization to which the user belongs. Get the level, the operation content is determined whether the operation is allowed in the permission level, and determines whether the operation.

  An administrative document management program according to an eighth aspect of the present invention is the administrative document management program according to any one of the sixth to seventh aspects, wherein the exception access authority data is for a specific document or book. The permission level that ranks the operations that can be performed for each operation content is set for each position of the specific organization and the role within the organization, and the default access authority data indicates the operations that can be performed on the document or book for each operation content. The ranked permission level is set for each job title and role, and the access authority management means tries to operate the document name or the book title, the operation contents to be performed on the document or the book title, The organization and position to which the user belongs. When the role is acquired, the value of the flag set in the document or the book is acquired with reference to the document management data, and the exception access authority data or the default access authority is acquired according to the flag value. Refers to the data, obtains with priority the permission level set for each role in the organization to which the user belongs, determines whether the operation content is an operation permitted at the permission level, and operates It is characterized by determining whether or not.

  Further, the administrative document management program according to the ninth aspect of the present invention is the administrative document management program according to any one of the sixth to eighth aspects, wherein the access authority management means is for the document to be operated by the user. If the value of the flag indicates that the access right is not set, the flag value of the book that stores the document is acquired, and the exception access right data or the default is obtained according to the value of the flag. A permission level is acquired with reference to access authority data.

  The administrative document management program according to the invention described in claim 10 is the administrative document management program according to claims 6 to 9, wherein the access authority management means stores the book to be operated by the user. When the value of the flag indicates that the access right is not set, the permission level is acquired with reference to the default access right data.

  According to the present invention, when the access authority can be set for each document or book and the access authority is not set for each document, the book access authority is applied to the document, and the access authority to the book. If you do not set, the default access authority will be applied, and the availability of operations will be determined according to the organization to which the user belongs, the position, and the role within the organization, so confidentiality will be applied to all documents and books. It can be ensured, and it is possible to save the trouble of setting the access authority, and the burden of management work can be reduced.

  An embodiment of the present invention will be described with reference to FIGS.

  The administrative document management system 1 according to the present embodiment includes an administrative document management server 2 and a plurality of user terminals 3, and is connected to each other by a network 4. The administrative document management server 2 includes a document database 5 that stores electronic data of documents, and also includes an access authority management unit 10, user authentication data 11, document management data 12, default access authority data 13, and a plurality of items. Exception access authority data 14 is stored.

  The access authority management unit 10 has a function of determining whether or not the operation can be performed based on the access authority set to the document selected to be operated by the user and information for identifying the user.

  Further, as shown in FIG. 2, the user authentication data 11 is a data table having items of user name, user affiliation code, affiliation, job title, and role, and each piece of information for identifying each user is recorded. In the user affiliation code item, an identification code for each organization is recorded, and for each digit from the left, an identification code for the entire organization, an identification code for the department, an identification code for the section, and an identification code for the staff are indicated. Other than “00” Is assigned to each organization. If the identification code is “00”, it indicates that the user does not belong to the organization.

  Based on the value of the user affiliation code, the user indicates the position in the entire organization. For example, the user “Takahashi” who has a user affiliation code of “01, 01, 01, 00” is the manager of the personnel department, so that the department identification code is set to “00” to indicate that he belongs to “section”. Since the user “Adachi” having the user affiliation code of “01, 01, 01, 01” belongs to the “person”, the user “Takahashi” has a higher position than the user “Adachi”. Can be seen above.

  Further, as shown in FIG. 3, the document management data 12 is data including a book management table and a plurality of document management tables. The book management table is a data table that records information about each book together with book management numbers. Yes, with book management number, year, book number, regular category, book name, management section, and confidential flag. The document management table is a data table that is prepared for each book and records the information of each managed document together with the document management number. The book management number, document management number, document number, management section, subject, identification , Confidential flag, decision history CSV, text file, and attached files 1 to 3.

  In the confidential flag item, a value indicating whether or not the exception access authority data 14 is set for the book or document is recorded. If the value of the confidential flag is “1”, it indicates that the exception access authority data 14 is set for the document or book. If the value is “0”, the secret for the document or book is indicated. This indicates that the exception access authority data 14 is not set. When the exception access authority data 14 is not set for the document, the access authority according to the value of the confidential flag set for the book in which the document is stored is applied. When the confidential flag value of the document and the confidential flag value of the book are “0”, the default access authority is applied to both the document and the book.

  Further, as shown in FIG. 4, the default access authority data 13 is a data table in which positions and roles set for each operation level are recorded. In this data table, for example, it is recorded that a user having an operation level “4” authority is a person who has a role of document chief. If the exception access authority data 14 is not set for each document or book, whether or not the operation content is acceptable is determined according to the operation level set in the default access authority data 13.

  Further, as shown in FIGS. 5 and 6, the exception access authority data 14 is a data table in which the organization, position and role set for each operation level are recorded, and the exception access authority data 14 is set. Information indicating a document to be read or a book is recorded in association with each other. For example, in FIG. 5, the person who has the operation level “1” for the document or book set with the exception access authority data 14 is a person who has a position higher than the chief of the new recruiter. It is recorded.

  Further, as shown in FIG. 7, the access authority for the document differs in operation contents permitted for each operation level. A user having the operation level “1” can only display the bibliography / main body, and a user having the operation level “2” can add / change / delete the main body in addition to the bibliography / main body display. be able to. Similarly, a user having the operation level “3” can change the bibliography, and a user having the operation level “4” can perform all operations up to the bibliography / main body deletion for the document. Can do.

  Further, as shown in FIG. 8, the operation authority permitted for the booklet differs depending on the operation level. A user having the operation level “1” can only display attributes, and a user having the operation level “2” can add documents in addition to displaying attributes. Similarly, the user having the operation level “3” can change the attribute, and the user having the operation level “4” can perform all operations up to deletion of the book for the book. it can.

  In addition, the user terminal 3 has a function of transmitting a document number and operation content of a document that the user wants to perform a desired operation, and a user name.

  Next, the access authority management process performed by the administrative document management server 2 will be described based on the flowchart shown in FIG.

  First, the user selects a document that the user wants to perform a desired operation, and the document number and operation content of the document that the user wants to perform a desired operation and the user name are transmitted from the user terminal 3 to the administrative document management server 2. When an operation is performed on a book instead of a document, the book number, operation content, and user name of the book are transmitted from the user terminal 3, but as an example, the user performs any operation on the document. Assuming that

  The access authority management unit 10 of the administrative document management server 2 first acquires the document management number and the operation content (step S01), and then refers to the user authentication data 11 based on the user name, The organization, position, and role are acquired (step S02).

  Next, the access authority management unit 10 refers to the document management data 12 based on the document number of the document selected by the user, and acquires the value of the confidential flag set for the document (step S03). Then, it is determined whether the confidential flag value of the document is “1” or “0” (step S04).

  If the value of the confidential flag is “1”, this means that the exception access authority data 14 set for the document exists, and the access authority management unit 10 is set for the selected document. The exception access authority data 14 is referred to (step S05).

  If the secret flag value is “0”, the access authority management unit 10 acquires the secret flag value of the book in which the document is stored (step S06), and the secret flag value of the book is It is determined whether it is “1” or “0” (step S07).

  If the value of the confidential flag is “1”, it means that the exception access authority data 14 set for the book exists, and the access authority management unit 10 sets the book in which the document is stored. Referenced exception access authority data 14 is referred to (step S08).

  Further, if the value of the confidential flag is “0”, it means that the exception access authority data 14 is not set in the selected document or the book in which the document is stored. The unit 10 refers to the default access authority data 13 (step S09).

  For example, in the document management data 12 shown in FIG. 3, if the document management number of the document selected by the user is 200307120000031564, the value of the confidential flag in the document management table is “1”, so the document management number 200307120000031564 is set to the document. Referenced exception access authority data 14 is referred to.

  If the document management number of the document selected by the user is 200307120000034613, the confidential flag value of the document management table is “0”, so the confidential flag of the book with the book management number 2003040100103264 that stores the document with the document management number 200307120000031564 is stored. Is referenced. Since the value of the confidential flag of the book management table set for the book management number 2003040100103264 is “1”, the exception access authority data set for the book management number 2003040100103264 is included in the document with the document management number 200307120000034613. 14 applies.

  Next, the access authority management unit 10 sets the exception access authority data 14 set for the selected document, the exception access authority data 14 set for the book for storing the selected document, or default access authority data. 13 obtains the user's operation level from the position and role corresponding to the operation level set to 13 and the user's user affiliation code, organization, position and role (step S10), and determines whether the user's desired operation is possible (Step S11).

  Specifically, the access authority management unit 10 determines whether a user-desired operation is possible according to the following conditions.

1: The subordinate relationship between the organization set in the exception access authority data 14 and the organization to which the user belongs is determined. If there is no hierarchical relationship, “no access authority” is displayed. However, in the case of the default access authority data 13, the determination is made based on the organization that manages each document or each book (the value of the management section in the document management data 12).

2: When there is a dependency relationship and “access authority is present”, the operation level is determined according to the job title and role. When the role given to the user is recorded in the exception access authority data 14, priority is given to the operation level in the role.

3: It is determined whether a user-desired operation is possible according to the determined operation level.

  In the process of step S11, the access authority management unit 10 first determines whether there is an access authority based on the vertical relationship between the organization set in the exception access authority data 14 and the organization to which the user belongs. The presence or absence of this access authority is determined from the value of the user affiliation code.

  If the identification code of the entire organization, the identification code of the department, the value of the section identification code, and the identification code of the person in charge are the same value, the access authority management unit 10 It is determined that there is a subordinate relationship with the organization to which. However, when the value is “00”, it indicates that the organization has a hierarchical relationship, and the hierarchical relationship is determined. When there is no subordinate relationship of the organization, for example, when there is no direct subordinate as in the relationship between the new recruiter and the general affairs section as shown in FIG. 10, it is determined that there is no access authority.

  Further, the access authority management unit 10 determines the hierarchical relationship of the organization based on the position of the value “00” of the user affiliation code. For example, the user affiliation code of the user who belongs to the new recruiter is “01, 01, 01, 01”, and the user affiliation code of the user who belongs to the personnel department is “01, 01, 01, 00”. Since the “section” has the same value, the access authority management unit 10 determines that there is a hierarchical relationship of the organization. In addition, a user who belongs to the general affairs department whose user affiliation code is “01, 01, 00, 00” also has a vertical relationship with the new recruiter. In addition, since the user belonging to the general affairs section whose user affiliation code is “01, 01, 02, 00” has a different value “02”, the access authority management unit 10 is different from the new recruiter in the upper and lower parts of the organization. Determine that there is no relationship.

  Conversely, even when the organization to which the user who wants to perform some operation on the document belongs is lower than the organization set in the exception access authority data 14, the access authority management unit 10 Although there is a vertical relationship, it is positioned at the lower level, so it is determined that the access authority exists.

  In this way, when the organization to which the user belongs and the organization set in the exception access authority data 14 match, or the organization to which the user belongs is positioned higher than the organization set in the exception access authority data 14 (subordinate When there is a relationship), the access authority management unit 10 determines that “access authority exists”.

  In addition, when the exceptional access authority data 14 is not set for either the document or the book, the default access authority is applied. As in the above case, the access authority management unit 10 determines the organization dependency. To do. For example, the document having the document management number 200307120000031564 shown in FIG. 3 has a human resources section as the management section. The user belonging code given to the user belonging to the human resources section and the user belonging code of the user who performs the operation are A comparison is made to determine whether there is access authority.

  After the presence / absence of access authority is determined, the access authority management unit 10 determines the operation level based on the user's affiliation, position, and role. For example, suppose that the exception access authority data 14 shown in FIG. 5 is the exception access authority data 14 set in the selected document, the user belongs to the personnel department new recruiter, the job title is the chief, and the role is the document chief. The access authority management unit 10 sets the operation level of the user to “4”. If the user belongs to the personnel department new recruiter, the job title is the chief, and the role is normal, the operation level of the user is “1”. If the user's desired operation is a change of bibliography, as shown in FIG. 7, the operation level needs to be “3” or higher. Therefore, if the user's operation level is “4”, the operation is possible. Thus, if the user's operation level is “1”, the operation is impossible.

  Further, for example, the exception access authority data 14 shown in FIG. 6 is set as the exception access authority data 14 set in the book for storing the selected document, and the user affiliation is the personnel department, the job title is the section manager, and the role is normal. Then, the access authority management unit 10 regards the operation level set for the book as the operation level set for the document, and sets the operation level for the user's document to “3”. The operation level set for this book becomes the operation level of the user's document.

  Also, assuming that the user's affiliation is the personnel department new recruiter, the job title is the chief, and the role is the document chief, the organization to which the user belongs is not set, but the operation level is given because it is a subordinate organization. If the user-desired operation is a change of bibliography, as shown in FIG. 7, the operation level needs to be “3” or higher. Therefore, if the user operation level is “3”, the operation is possible. become.

  Further, the general manager of the general affairs department whose user affiliation code is “01, 01, 00, 00” is positioned lower than the supervisor among the positions set in the conditions of the exception access authority data 14 of FIG. 5 and FIG. However, since it is positioned higher than the section manager, the operation level is “3”.

  Even when the exception access authority data 14 is not set and the default access authority data 13 is applied, the access authority management unit 10 performs the same process as described above to determine the operation level.

  When the access authority management unit 10 determines that the operation is possible, the access authority management unit 10 notifies the user terminal 3 that the document selected by the user-desired operation is operable, and continuously executes the desired operation. If it is determined that the document cannot be operated (step S12), it is notified that the document selected by the user's desired operation cannot be operated, and the process is stopped (step S13).

  In this way, if access rights can be set for individual documents and books, and access rights are not set for individual documents, the book access rights are applied to the documents, and access rights are set for the books. If not, the default access authority will be applied, and the availability of operations will be determined according to the organization and position to which the user belongs, so confidentiality can be ensured for all documents and books, In addition, it is possible to save the trouble of setting the access authority, and the burden of management work can be reduced.

  Note that the administrative document management server 2 may be realized by causing a general-purpose computer to execute a program in which processing performed by the access authority management unit 10 illustrated in FIG. 1 is described.

It is a figure which shows the structure of an administrative document management system. It is a figure which shows user authentication data. It is a figure which shows document management data. It is a figure which shows the example of default access authority data. It is a figure which shows the example of exception access authority data. It is a figure which shows the example of exception access authority data. It is a figure which shows the example of the access authority set with respect to a document. It is a figure which shows the example of the access authority set with respect to a book. It is a flowchart which shows the process sequence of an access authority management process. It is a figure showing the dependency of an organization.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Administrative document management system 2 Administrative document management server 3 User terminal 4 Network 5 Document database 10 Access authority management part 11 User authentication data 12 Document management data 13 Default access authority data 14 Exception access authority data

Claims (10)

An administrative document management device that manages documents created in the work of public institutions,
At least a document name and a flag value indicating whether or not access authority is set for the document, a book name of a book for storing the document, and whether or not access authority is set for the book Document management data consisting of a flag value indicating
Exception access authority data in which the permission level that ranks the operations that can be performed on a specific document or a specific book for each operation content is set for each position,
Default access authority data in which the permission level that ranks the operations that can be performed on a document or book for each operation content is set for each position,
Storage means for storing
When obtaining the document name or the book title, the operation content to be performed on the document or the book, and the position of the user to be operated,
Referencing the document management data, obtaining the value of the flag set in the document or book, referring to the exception access authority data or the default access authority data according to the value of the flag, Get permission levels based on the user's position,
An access authority management unit that determines whether the operation content is an operation permitted at the permission level and determines whether or not the operation is permitted;
An administrative document management device comprising: In the exception access authority data, a permission level that ranks the operations that can be performed on a specific document or book for each operation content is set for each position of a specific organization,
The access authority management means includes
When obtaining the document name or the book title, the operation content to be performed on the document or the book, and the organization and position to which the user to be operated belongs,
Referencing the document management data, obtaining the value of the flag set in the document or book, referring to the exception access authority data or the default access authority data according to the value of the flag, Get permission levels based on your job title or role in your organization,
The administrative document management apparatus according to claim 1, wherein it is determined whether the operation content is an operation permitted at the permission level, and whether or not the operation is permitted is determined. In the exception access authority data, the permission level obtained by ranking the operations that can be performed on a specific document or book for each operation content is set for each job title of the specific organization and each role in the organization,
In the default access authority data, the permission level that ranks the operations that can be performed on a document or a book for each operation content is set for each position and role,
The access authority management means includes
The document name or book title, the operation content to be performed on the document or book, and the organization and position to which the user to operate belongs. When you get a role,
Referencing the document management data, obtaining the value of the flag set in the document or book, referring to the exception access authority data or the default access authority data according to the value of the flag, Priority is given to the permission level set for each role in the organization to which the user belongs,
The administrative document management apparatus according to claim 1, wherein the operation content is determined to be an operation permitted at the permission level, and whether or not the operation is permitted is determined.   The access authority management means obtains the flag value of the book that stores the document when the value of the flag of the document that the user intends to operate indicates that the access authority is not set. 4. The administrative document management apparatus according to claim 1, wherein a permission level is acquired by referring to the exception access authority data or the default access authority data in accordance with a value of the flag.   The access authority management means refers to the default access authority data to obtain the permission level when the value of the flag of the book that the user intends to operate indicates that the access authority is not set. The administrative document management apparatus according to any one of claims 1 to 4, wherein An administrative document management program executed on a computer that manages documents created in the work of public institutions,
At least a document name, a flag value indicating whether or not access authority is set for the document, a book name of a book for storing the document, and whether or not access authority is set for the book Document management data consisting of a flag value indicating whether or not, exception access authority data in which the permission level ranked for each operation content is set for each operation content that can be performed on a specific document or a specific book, A computer that stores default access authority data in which the permission level that ranks the operations that can be performed on a document or book for each operation content is set for each position,
When obtaining the document name or the book title, the operation content to be performed on the document or the book, and the position of the user to be operated,
Refer to the document management data, obtain the value of the flag set in the document or book, refer to the exception access authority data or the default access authority data according to the flag value, Get permission levels based on the user's position,
An access authority management unit that determines whether the operation content is an operation permitted at the permission level and determines whether or not the operation is permitted;
Administrative document management program characterized by functioning. In the exception access authority data, a permission level that ranks the operations that can be performed on a specific document or book for each operation content is set for each position of a specific organization,
The access authority management means includes
When obtaining the document name or the book title, the operation content to be performed on the document or the book, and the organization and position to which the user to be operated belongs,
Referencing the document management data, obtaining the value of the flag set in the document or book, referring to the exception access authority data or the default access authority data according to the value of the flag, Get permission levels based on your job title or role in your organization,
The administrative document management program according to claim 6, wherein it is determined whether the operation content is an operation permitted at the permission level, and whether or not the operation is permitted is determined. In the exception access authority data, the permission level obtained by ranking the operations that can be performed on a specific document or book for each operation content is set for each job title of the specific organization and each role in the organization,
In the default access authority data, the permission level that ranks the operations that can be performed on a document or a book for each operation content is set for each position and role,
The access authority management means includes
The document name or book title, the operation content to be performed on the document or book, and the organization and position to which the user to operate belongs. When you get a role,
Referencing the document management data, obtaining the value of the flag set in the document or book, referring to the exception access authority data or the default access authority data according to the value of the flag, Priority is given to the permission level set for each role in the organization to which the user belongs,
8. The administrative document management program according to claim 6, wherein it is determined whether the operation content is an operation permitted at the permission level, and whether or not the operation is permitted is determined.   The access authority management means obtains the flag value of the book that stores the document when the value of the flag of the document that the user intends to operate indicates that the access authority is not set. 9. The administrative document management program according to claim 6, wherein a permission level is acquired by referring to the exception access authority data or the default access authority data in accordance with a value of the flag.   The access authority management means refers to the default access authority data to obtain the permission level when the value of the flag of the book that the user intends to operate indicates that the access authority is not set. The administrative document management program according to any one of claims 6 to 9.

Images