JP2006119872A - Business system and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce the burden for management of access right in a business system for displaying a plurality of business screens to advance processing. <P>SOLUTION: Access rights for business screens are set by a user in units of business screens, the set access rights are stored in association with the business screens, and at the time of displaying a business screen, access limitation for the business screen is performed based on authentication information accepted from the user and the access right set for the business screen. When the user sets the access rights for business screens, a setting screen having a setting column of access right, which is prepared in units of business screens, is displayed. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a business system and a program, and more particularly to a technique for reducing an access right management burden in a business system that displays a plurality of screens.

With respect to a business system configured using a computer and used by a plurality of users, it is required to restrict access to a screen to be displayed in terms of security management. Such access restriction is usually performed by setting an access right for each individual user.
JP 2000-215166 A

  In the method of setting the access right for each user as described above, the management burden increases when the number of users is large. For example, when a screen is added, deleted, changed, etc., the access right of each user must be reviewed. Especially when the number of screens is large, the management burden becomes enormous.

  The present invention has been made in view of such circumstances, and provides a business system and program capable of reducing the burden of managing access rights in a business system that displays a plurality of business screens and proceeds with processing. Objective.

In order to achieve the above object, the invention described in the first claim of the present invention is a business system configured by using a computer and displaying a plurality of business screens to proceed with processing. Means for allowing a user to set an access right for a screen in units of the business screen; means for storing the set access right in association with the business screen; and authentication information received from a user when displaying the business screen And means for restricting access to the business screen based on the access right set for the business screen.
According to the present invention, since the access right can be set for each business screen, the access right set for each business screen can be easily managed. In addition, when screens are added or deleted, or the screen configuration is changed, only the access rights for the business screens that have been added need to be set. Compared to the method of setting access rights for each user, the management burden Is less.

The invention according to claim 2 of the present invention is the business system according to claim 1, wherein the means for allowing a user to set an access right for the business screen in units of the business screen includes: Means for displaying a setting screen having the access right setting field prepared for each business screen is included.
According to the present invention, since the access right can be set by the setting screen prepared for each business screen, the access right can be easily set for each business screen.

  The invention described in claim 3 of the present invention is the business system described in claim 2, wherein the access right is stored in the user authentication information in association with the user's affiliation. Presenting the setting screen having a setting field for setting by affiliation unit, and the means for restricting access to the business screen is associated with the authentication information received from the user Means for restricting access to the business screen in accordance with the access right set for.

  According to a fourth aspect of the present invention, the business system according to the second aspect is the business system according to the second aspect, wherein means for storing the user's title in association with the user's authentication information; Means for displaying a screen having a setting field for setting by job title as the setting screen, and the means for restricting access to the business screen is associated with authentication information received from a user. Means for restricting access to the business screen according to the access right set for the job title is included.

  As described above, according to the present invention, since the access right can be set for each user's affiliation unit or post unit, the load for setting the access right is less than when the access right is set for each user. That's it.

  ADVANTAGE OF THE INVENTION According to this invention, the management burden of the access right in the business system which displays a some business screen and advances a process can be reduced.

  Hereinafter, a business system according to an embodiment of the present invention will be described. The business system described in the present embodiment is configured using a computer, and displays a plurality of screens (hereinafter referred to as business screens) to advance the process while performing a dialogue process with the user. In this embodiment, as an example of such a business system, it is operated in an electric power company, and supports operations such as reception of repair related to power equipment, examination / approval, design, ordering of construction, process management, management of construction history, etc. The system will be described.

  FIG. 1 shows a schematic configuration of a business system 1 according to the present embodiment. As shown in the figure, a computer 10 connected to each other via a communication network 5 is connected to a management department, a sales office, a service center, an affiliated company, etc. in an electric power company to which the business system 1 is applied. is set up. The communication network 5 is, for example, a LAN (Local Area Network), a dedicated line, the Internet, or the like. These computers 10 are personal computers, office computers, mainframes, and the like.

  FIG. 2 is an example of the hardware configuration of the computer 10. A computer 10 shown in FIG. 1 includes a CPU 21, a memory 22 such as a RAM / ROM, a hard disk drive 23, an input device 24 such as a keyboard and a mouse, a display device 25 such as a display, and a communication interface 26 for communicating through a communication network 5. Etc.

  In FIG. 1, a computer 10 installed in a management department operates a database 11 that stores various information related to a business system 11. Further, in each computer 10 in FIG. 1, software (hereinafter referred to as client software 12) that provides the functions of the business system 1 is operating. The client software 12 accesses the database 11 via the communication network 5.

  The business screen is displayed by the client software 12. There are multiple business screens. For example, when designing electric power facilities, a screen for selecting a designer or a person in charge, a screen for selecting a person in charge of on-site work, a screen for browsing design reasons, a screen for selecting a process, a screen for design approval There is. The client software 12 switches the business screen according to the progress of the process. The client software 12 registers information received from the user through the business screen in the database 11. The client software 12 acquires information from the database 11 and displays it on the business screen.

  The business system 1 is used by various users belonging to management departments, sales offices, service centers, related companies, and the like. For this reason, the client software 12 restricts access to the business screen based on the authentication information (user ID, password) acquired from the user. This access restriction is performed based on the access right set for each business screen.

  The access right is set by an operator of an administrative department having authority. FIG. 3 shows a screen (hereinafter referred to as a selection screen 300) displayed on the computer 10 operated by the operator when setting the access right. When the operator clicks the authority update button 312 after selecting one of the screen IDs (311) displayed on the selection screen 300, the screen shown in FIG. 4 (hereinafter referred to as the setting screen 400) is displayed. The setting screen 400 is provided with a setting column 411 for setting an access right for each user affiliation unit such as a sales office, a service center, a room department, or a related company. Each setting column 411 is further provided with a setting column 412 for setting an access right for each job title such as a director, a deputy director, a section manager, a deputy director, and a person in charge. The contents set in each column of the setting screen 400 are sent to the management department computer 10 and registered in the database 11 when the update button 413 of the setting screen 400 is clicked. An example of the access right registered in the database 11 is shown in FIG.

  FIG. 6 shows a specific processing flow when the client software 12 restricts access to the business screen. At the business screen display timing, the client software 12 accesses the database 11 using the screen ID of the business screen as a search key, and acquires the access right set for the business screen. That is, the client software 12 transmits the authentication information acquired from the user and the business screen identifier to the computer 10 of the management department (S611), and the database 11 receives the transmitted authentication information and business screen identifier. (S612). Here, as described above, the access right is set for each affiliation unit and post unit. The database 11 searches for an access right using the business screen identifier and the affiliation and title associated with the identification information as search keys. The database 11 returns the retrieved access right to the client software 12. Note that the user's affiliation and the user's title are registered in the database 11 in association with the authentication information so that the user's affiliation and job title can be specified from the authentication information in the search.

  When the client software 12 receives the access right transmitted from the database 11 (S615), the client software 12 advances the process while restricting access according to the received access right (S616). If the “inquiry restriction” access right is set, some contents displayed on the business screen are not displayed. Further, when the access right “not updateable” is set, the data registered in the database 11 cannot be updated from the business screen. If the access right “unusable” is set, the business screen is not displayed.

  As described above, according to the business system 1 of the present embodiment, the access right can be set for each business screen, thereby simplifying the work for setting the access right and facilitating the management of the access right. Can do. In addition, when screens are added, deleted, or changed, it is only necessary to set the access rights for the business screen that is the target of addition, deletion, or change, compared to the case where access rights are set for each user. Management burden. Further, since the access right can be set for each user's affiliation unit or post, the access right can be set more easily than when the access right is set for each user.

  The above description of the embodiment is for facilitating understanding of the present invention, and does not limit the present invention. It goes without saying that the present invention can be changed and improved without departing from the gist thereof, and that the present invention includes equivalents thereof.

  For example, in the above embodiment, the database 11 is arranged on the computer 10 installed in the management department, and the client software 12 is arranged on each computer 10 installed in the management department, sales office, service center, affiliated company, or the like. However, the database 11 and the client software 12 are managed by a computer in the data center, and each computer 10 accesses the data center as necessary to use the functions of the database 11 and the client software 12. A so-called ASP (Application Service Provider) type configuration can also be used. By adopting such a configuration, software resources are centrally managed, and various merits such as improvement of maintainability, reduction of maintenance cost, and speed of provision of new functions can be obtained.

It is a figure which shows schematic structure of the business system 1 by one Embodiment of this invention. It is a figure which shows the hardware constitutions of the computer by one Embodiment of this invention. It is a figure which shows the selection screen 300 by one Embodiment of this invention. It is a figure which shows the setting screen 400 by one Embodiment of this invention. It is a figure which shows an example of the access right registered into the database 11 by one Embodiment of this invention. It is a flowchart explaining the process which the client software 12 by one Embodiment of this invention performs access restriction with respect to a work screen according to an access right.

Explanation of symbols

1 Business System 5 Communication Network 10 Computer 11 Database 12 Client Software 300 Selection Screen 400 Setting Screen

Claims (8)

A business system configured using a computer and displaying a plurality of business screens to proceed with processing.
Means for allowing a user to set an access right for the business screen in units of the business screen;
Means for storing the set access right in association with the business screen;
Means for restricting access to the business screen based on the authentication information received from the user and the access right set for the business screen when displaying the business screen;
A business system characterized by comprising: The business system according to claim 1,
The means for allowing the user to set the access right for the business screen in units of the business screen includes means for displaying a setting screen prepared in units of the business screen and having a setting field for the access right;
Business system characterized by The business system according to claim 2,
Means for storing the user's affiliation in association with the user's authentication information;
Means for presenting the setting screen having a setting field for setting the access right in the affiliation unit;
Including
The means for restricting access to the business screen includes means for restricting access to the business screen according to the access right set for the affiliation associated with authentication information received from a user. Business system characterized by inclusion. The business system according to claim 2,
Means for associating and storing the user's job title with the user's authentication information;
Means for displaying, as the setting screen, a screen having a setting field for setting the access right for each job title;
Including
The means for restricting access to the business screen includes means for restricting access to the business screen according to the access right set for the job title associated with authentication information received from a user. Business system characterized by inclusion. The computer in the business system configured using a computer and displaying a plurality of business screens to proceed with processing,
A function that allows a user to set the access right for the business screen in units of the business screen;
A function of storing the set access right in association with the business screen;
A function of restricting access to the business screen based on the authentication information received from the user and the access right set for the business screen when displaying the business screen;
A program to realize The program according to claim 5,
The function of allowing a user to set the access right for the business screen in units of the business screen includes a function of displaying a setting screen prepared in units of the business screen and having a setting field for the access right.
A program characterized by The program according to claim 6,
In the computer,
A function for storing the user's affiliation in association with the user's authentication information;
A function for presenting the setting screen provided with a setting field for each affiliation for setting the access right in the affiliation unit;
Realized
The function for performing access restriction on the business screen includes a function for performing access restriction on the business screen according to the access right set for the affiliation associated with authentication information received from a user. Is included,
A program characterized by The program according to claim 7,
In the computer,
A function for storing the user's title in association with the user's authentication information;
A function for displaying a screen having a setting field for setting the access right for each job title as the setting screen;
Realized
The function for restricting access to the business screen includes a function for restricting access to the business screen in accordance with the access right set for the post associated with the authentication information received from the user. Is included,
A program characterized by

Images