JP2006180103A - Image forming apparatus and program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To suitably authorize even a user who does not belong to a group to operate an image forming apparatus which authorizes the members of the group to operate it. <P>SOLUTION: The image forming apparatus which authorizes users of groups to perform prescribed operation includes a belonging group decision means 51 of deciding which group a user belongs to on the basis of data regarding the user that the user inputs via an input means and a default group correlating means 52 of correlating the data regarding the user with data regarding a default group when the belonging group decision means decides that the user belongs to none of the groups. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an image forming apparatus, an image forming program, and a recording medium.

  For example, a method for setting operation authority of each application (for example, a copy application, a printer application, a FAX application, a scanner application, a document box application, etc.) of the image forming apparatus for each user is proportional to the number of users. Such management labor also increased, and there was a problem that was not efficient. Here, the operation authority is an authority for a user to operate an application and use the application, or an authority to change settings of each application.

  For example, in the conventional method, when a certain user is added as a user of the image forming apparatus, how much operation authority is given to the user for each application, for example, permission to use or change a setting is used. Whether to use only, or to allow use or change of settings, etc. had to be set.

  In order to solve such problems, the concept of a group is introduced between the user and the operation authority, etc., the user belongs to the group, and the operation authority of the application is associated with the group and is assigned to the group. There is a way to allow it.

In such a method, when a user is added as a user of the image forming apparatus, if a group to which the user is added is selected and the user belongs to the group, the authority automatically granted to the group is automatically granted to the user. In addition, it was allowed to manage efficiently.
JP 2001-31474 A

  However, in the method using the group as described above, when there is a valid user who can log in to the image forming apparatus and does not belong to the group, the operation authority related to the application is appropriately given to the user. There was a problem that could not be allowed.

  The present invention has been made in view of the above points, and an object of the present invention is to allow an appropriate operation authority to a user who does not belong to a group in an image forming apparatus that permits the operation authority to the group.

  Therefore, in order to solve the above-described problem, the present invention provides an image forming apparatus that permits a predetermined operation authority to a group to which a user belongs, the data relating to the user input by the user via the input unit Based on the group, the belonging group determining means for determining whether the user belongs to the group, and the belonging group determining means determines that the user does not belong to any group. A default group associating means for associating the data with the data relating to the default group;

  According to the present invention, there is provided an image forming apparatus that permits a predetermined operation authority to a group to which a user belongs, based on data relating to the user input by the user via the input unit. In the belonging group determination means for determining whether or not the user belongs to the group, the belonging group determination means determines that the user does not belong to any group. By providing the default group associating means for associating such data, an appropriate operation authority can be permitted even for a user who does not belong to the group in the image forming apparatus that permits the operation authority for the group. it can.

  The image forming apparatus corresponds to, for example, a copy 1, a printer 2, a scanner 3, a FAX 4, or an MFP (Multi Function Printer) 5 described later. The input means corresponds to, for example, a keyboard of a server 6 or a PC 8 described later, a copy 1 or a printer 2 or a scanner 3, a FAX 4 or an operation panel 21 of an MFP 5. The belonging group determination means corresponds to belonging group determination means 51 described later, for example. Further, the default group association unit corresponds to, for example, a default group association unit 52 described later.

  Further, as means for solving the above problems, an image forming program and a recording medium may be used.

  According to the present invention, an appropriate operation authority can be permitted even for a user who does not belong to a group in an image forming apparatus that permits an operation authority to a group.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram illustrating an example of an image forming system. As shown in FIG. 1, the image forming system includes, for example, a SAM (Security Account Manager) database 7, a server (domain controller) 6, at least one PC 8, a copy 1 and / or a printer 2, and / or Alternatively, the scanner 3 and / or the FAX 4 and / or the MFP 5 are connected via a network.

  The SAM database 7 manages information held by the server 6 operating as a domain controller, such as information on access (operation) authority of users, groups, and devices (or applications installed on the devices). Files shared via the network and resources such as the MFP 5 can be used with single sign-on.

  The functions or means according to the present invention are implemented in the copy 1, the printer 2, the scanner 3, the FAX 4, or the MFP 5. However, for the sake of simplification of explanation, the functions or means will be described as being implemented in the MFP 5. .

  In FIG. 1, the server 6 has been described as operating as a domain controller. For example, the MFP 5 operates as a domain controller, and the SAM database 7 includes access privileges for users, groups, and devices of the MFP 5. Information and the like may be managed. Further, when the image forming system is configured not to support single sign-on, for example, the MFP 5 and the FAX 4 each have a local SAM database 7 and each device performs user authentication. Good. However, in the following description, in the first and second embodiments, the server 6 operates as a domain controller and has the SAM database 7 in order to simplify the description.

  An example of the hardware configuration of the MFP 5 is shown in FIG. FIG. 2 is a hardware configuration diagram of an example of an MFP. As shown in FIG. 2, the MFP 5 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, an image storage memory 14, and a storage configuration as hardware configurations. A device 15, a network controller 16, a drive device 17, a scanner 19, a plotter 20, and an operation panel 21 are included.

  The network controller 16 is an interface that connects the MFP 5 to a network or the like. A program of the MFP 5 (hereinafter referred to as an image forming program) corresponding to software and / or functions of the MFP 5 to be described later is provided to the MFP 5 by a recording medium 18 such as an SD memory card or downloaded through a network. The recording medium 18 is set in the drive device 17, and the image forming program is installed in the recording device 15 from the recording medium 18 via the drive device 17.

  The ROM 12 stores data and the like. The RAM 13 reads and stores an image forming program or the like from the recording device 15 when the MFP 5 is activated, for example. The CPU 11 executes processing according to an image forming program and the like read and stored in the RAM 13.

  The image storage memory 14 is a memory for storing an image (and a document to be described later) related to image formation. The scanner 19 reads a figure or a photograph from paper in response to a request from the image forming program (or the CPU 11) and stores the image data in the image storage memory 14 or is connected to the MFP 5 via a network. It is a device that transfers to PC8. The plotter 20 is a device that outputs image data or the like stored in the image storage memory 14 as vector data in response to a request from an image forming program (or CPU 11) or the like.

  The operation panel 21 displays a screen in response to a request from the image forming program (or CPU 11) or the like, and passes information selected or input by the user on the screen to the image forming program (or CPU 11) or the like. .

  An example of a basic software configuration of the MFP 5 is shown in FIG. FIG. 3 is a software configuration diagram of the MFP (part 1). As shown in FIG. 3, the MFP 5 includes, as software configurations, a network controller control unit 31, a protocol processing unit 32, an overall control unit 33, a copy application 34, a printer application 35, a FAX application 36, and a scanner. An application 37 and a document box application 38 are included.

  The network controller control unit 31 is a control unit that controls the network controller 16. The protocol processing unit 32 is a processing unit that performs processing related to a protocol. The details of the protocol processing unit 32 when a Windows (registered trademark) network is taken as an example of the network are shown in FIG.

  The overall control unit 33 is a control unit that controls the entire MFP 5. The copy application 34 is an application that performs processing related to copying. The printer application 35 is an application that performs processing related to printing. The FAX application 36 is an application that performs processing related to FAX. The scanner application 37 is an application that performs processing related to scanning. The document box application 38 is an application that performs processing for managing documents (including image data and the like).

  Hereinafter, a Windows (registered trademark) network is taken as an example of the network, and an example of a more detailed software configuration of the MFP 5 is shown in FIG. FIG. 4 is a software configuration diagram of the MFP (part 2). As illustrated in FIG. 4, the MFP 5 includes, as software configurations, a network controller control unit 31, a TCP / IP (Transmission Control Protocol / Internet Protocol) processing unit 41, a NetBEUI (NetBIOS Extended User Interface) processing unit 42, IPX / SPX (Internet Packet eXchange / Sequenced Packet eXchange) processing unit 43, NetBIOS (Network Basic Input Output System) processing unit 42, SMB (Server MessageB) control unit 45, SMB (Server MessageB) control unit 45 Printer application 35 and F It includes an X application 36, a scanner application 37, a document box application 38, a.

  The TCP / IP processing unit 41 is a protocol processing unit that performs processing related to TCP / IP. The NetBEUI processing unit 42 is a protocol processing unit that performs processing related to NetBEUI. The IPX / SPX processing unit 43 is a protocol processing unit that performs processing related to IPX / SPX. The NetBIOS processing unit 44 is a protocol processing unit that performs processing related to NetBIOS. The SMB processing unit 45 is a protocol processing unit that performs processing related to SMB.

  An example of the functions of the MFP 5 realized by the hardware and / or software of the MFP 5 is shown in FIG. FIG. 5 is a first functional diagram of the MFP.

  As shown in FIG. 5, the MFP 5 includes, as a functional configuration, an affiliation group determination unit 51, a default group association unit 52, and a data setting / change unit 53.

  The affiliation group determination means 51 determines which group the user belongs to based on, for example, a user name input by the user via the operation panel 21. For example, the affiliation group determination means 51 is a user name input by the user via the operation panel 21 and user / group information corresponding to the user name managed in the SAM database 7 acquired from the server 6 or the like. Based on the above, it is determined to which group the user belongs. In the following, for simplification of description, a group of user and group information acquired from the server 6 or the like is simply referred to as user information.

  When the belonging group determination unit 51 determines that the user does not belong to any group, the default group association unit 52 associates the data related to the user with the data related to the default group. For example, the default group association unit 52 sets a flag indicating that a default group / authority table 64 (described later) is applied (used) to an authority determination flag or the like that is referred to when determining the operation authority.

  The data setting / changing means 53 displays a screen as shown in FIG. 10, FIG. 11 or FIG. 12, which will be described later, on the operation panel 21 or the like, for example, in response to a request from the user. According to the information (or data) input or selected, for example, the SAM database 7 (or SAM database 7 (or the like), for example, setting or changing the data relating to the operation authority in image formation managed in association with the data relating to the default group Request to the server 8) etc. to set or change data.

  Here, for simplification of explanation, as an example of data to be set or changed, data related to operation authority in image formation managed in association with data related to a default group is used. The changing unit 53 displays a screen for setting or changing data stored in tables as shown in FIGS. 6 to 9 described later on the operation panel 21 or the like, and the user inputs or selects the screen using the screen. In response to information (or data) or the like, the corresponding data is set or changed, for example, the SAM database 7 (or server 8) or the like is requested, and the data is set or changed.

  Hereinafter, for example, an example of the user / authority table 61 that manages user information managed in the SAM database 7 and the like and information on operation authority of an application or the like installed in the apparatus (MFP 5 in this embodiment). As shown in FIG. FIG. 6 is a diagram illustrating an example of a user / authority table.

  As shown in FIG. 6, the user / authority table 61 associates user information with information on operation authority of applications installed in the MFP 5. In the figure, “◎” indicates that the operation can be used and set (including changing the setting), and “○” indicates that the operation can only be used. , “×” indicates that neither use nor setting is possible as an operation. The same applies to the following.

  For example, by referring to the user / authority table 61, it is understood that the user “Yamada” can use and set the copy application, the scanner application, the FAX application, and the printer application as operations.

  An example of the user / group table 62 that associates user information and group information managed in, for example, the SAM database 7 is shown in FIG. FIG. 7 is a diagram illustrating an example of a user / group table.

  As shown in FIG. 7, the user / group table 62 associates user information with group information. For example, by referring to the user / group table 62, it can be seen that the user “Yamada” belongs to the Admin user group, the printer application user group, the FAX application user group, and the copy application user group.

  Hereinafter, for example, an example of the group / authority table 63 that manages group information managed in the SAM database 7 and the like, and information on operation authority of the application installed in the apparatus (MFP 5 in this embodiment). This is shown in FIG. FIG. 8 is a diagram illustrating an example of a group / authority table.

  As shown in FIG. 8, the group / authority table 63 associates group information with operation authority information of applications installed in the MFP 5. For example, by referring to the group / authority table 63, it is understood that the Admin user group can use and set the copy application, the scanner application, the FAX application, and the printer application as operations.

  A default group / authority table 64 that associates default group information managed in, for example, the SAM database 7 with information on operation authority of an application installed in the apparatus (MFP 5 in this embodiment), for example. An example is shown in FIG. FIG. 9 shows an example of the default group / authority table.

  As shown in FIG. 9, the default group / authority table 64 associates default group information with operation authority information of applications installed in the MFP 5. For example, by referring to the default group / authority table 64, it is understood that the Default user group can use and set the copy application, the scanner application, the FAX application, and the printer application as operations.

  An example of the initial setting screen 71 displayed on the operation panel 21 or the like is shown in FIG. FIG. 10 is a diagram illustrating an example of the initial setting screen.

  As described above, the data setting / changing unit 53 creates the initial setting screen 71 in response to a request from the user, for example, and displays it on the operation panel 21 or the like. The user uses the initial setting screen 71 to set (initialize) an application that can be used by a Default user group, for example.

  The data setting / changing unit 53 is an operation authority in image formation that is managed in association with data related to a default group according to information (or data) input or selected by the user using the initial setting screen 71 For example, the SAM database 7 (or the server 8) is requested to set the data related to the data, and the data is set.

  In FIG. 10, the user initially sets applications that can be used by the Default user group to a copy application, a FAX application, a document box application, a scanner application, and a printer application.

  An example of the setting change screen 72 displayed on the operation panel 21 or the like is shown in FIG. FIG. 11 is a diagram illustrating an example of a setting change screen.

  As described above, the data setting / changing unit 53 creates the setting change screen 72 in response to a request from the user, for example, and displays it on the operation panel 21 or the like. The user uses the setting change screen 72 to change settings such as an application that can be used by the Default user group, for example.

  The data setting / changing unit 53 is an operation authority in image formation that is managed in association with data related to a default group in accordance with information (or data) input or selected by the user using the setting change screen 72 For example, the SAM database 7 (or the server 8) is requested to change the data related to the data, and the data is changed (setting).

  In FIG. 11, the user has changed the setting so that the applications that can be used by the Default user group are limited to the copy application, the scanner application, and the printer application.

  An example of the detailed setting change screen 73 displayed on the operation panel 21 or the like is shown in FIG. FIG. 12 is a diagram illustrating an example of a detailed setting change screen.

  As described above, the data setting / changing unit 53 creates the detailed setting changing screen 73 in response to a request from the user, for example, and displays it on the operation panel 21 or the like. The user uses the detailed setting change screen 73 to change detailed settings such as an application (a copy application in the example of FIG. 12) that can be used by the Default user group, for example.

  The data setting / changing means 53 is managed in association with the data related to the default group in accordance with information (or data) input or selected by the user using the detailed setting changing screen 73, for example, a copy application For example, the SAM database 7 (or server 8) or the like is requested to change the detailed setting, and the data is changed (detailed setting).

  In FIG. 12, the user sets the detailed settings of the copy application that can be used by the Default user group, the usable colors are black and white, single color, the number of sheets is limited, the tray is the first paper feed, the first paper feed, The setting is changed to 2 paper feed. Here, in the initial setting of the detailed settings of the copy application that can be used by the Default user group, for example, the usable colors are black and white, single color, two colors, color, the number of sheets is not limited, and the tray is In the description, it is assumed that the first paper feed, the second paper feed, and the manual feed are set.

  Hereinafter, as described with reference to FIG. 11, FIG. 12, and the like, an example of processing in which the user changes the setting (or detailed setting) will be described with reference to a flowchart. FIG. 13 is a flowchart (part 1) illustrating the setting change process.

  For example, when the user performs a predetermined operation on the screen displayed on the operation panel 21 or the like, the MFP 5 determines whether or not the authentication function is valid in step S10. If MFP 5 determines that the authentication function is valid (YES in step S10), it proceeds to step S11. If MFP 5 determines that the authentication function is not valid (NO in step S10), it proceeds to step S21. In FIG. 13, for simplification of explanation, if it is determined that the authentication function is not valid, the process proceeds to step S <b> 21. However, if the MFP 5 determines that the authentication function is not valid, for example, the authority of the user is assigned to the user. The determination may be made using the authority table 61, that is, the process may proceed to step S21 through the process of step S17.

  For example, the MFP 5 refers to an authentication function valid / invalid flag stored in the RAM 13 or the recording device 15 to determine whether the authentication function is valid.

  In step S11, the MFP 5 displays an authentication login screen 74 as shown in FIG. FIG. 14 is a diagram illustrating an example of an authentication login screen.

  As shown in FIG. 14, the authentication login screen 74 includes a user name input area 731 for inputting a user name and a password input area 732 for inputting a password, and the user enters the user name input area 731. Enter the user name and the password corresponding to the user name in the password input area 732, and press the “OK” button 733.

  Returning to FIG. 13, if the MFP 5 determines that the user name and password have been input by the user, in step S <b> 12, the MFP 5 determines whether network authentication is valid. If MFP 5 determines that network authentication is valid (YES in step S12), it proceeds to step S14. If MFP 5 determines that network authentication is not valid (NO in step S12), it proceeds to step S13.

  For example, the MFP 5 refers to a network authentication valid / invalid flag stored in the RAM 13 or the recording device 15 to determine whether the network authentication is valid.

  In step S13, the MFP 5 performs authentication (local authentication) using the user name and password input by the user using the authentication login screen 74, and determines that the authentication (login) is successful as a result of the authentication (step S13). If YES in step S13), the process proceeds to step S21. If it is determined that the authentication (login) has failed (NO in step S13), the process proceeds to step S24.

  In FIG. 13, for simplification of description, if it is determined that the authentication (login) is successful, the process simply proceeds to step S <b> 21. However, if the MFP 5 determines that the authentication (login) is successful, for example, The authority may be determined using the user / authority table 61, that is, the process may proceed to step S21 through the process of step S17.

  On the other hand, in step S14, the MFP 5 determines whether or not the login to the server authentication (server 6) is successful. If MFP 5 determines that login to server authentication (server 6) has been successful (YES in step S14), it proceeds to step S15, and if it determines that login to server authentication (server 6) has failed (NO in step S14), it proceeds to step S15. Proceed to S24.

  In step S15, the MFP 5 acquires user information corresponding to the logged-in user from the server 6 or the like. That is, the MFP 5 acquires user and group information corresponding to the logged-in user from the server 6 and the like.

  Progressing to step S16 following step S15, the MFP 5 determines whether or not the group authentication function is valid. If MFP 5 determines that the group authentication function is valid (YES in step S16), it proceeds to step S18. If MFP 5 determines that the group authentication function is not valid (NO in step S16), it proceeds to step S17.

  For example, the MFP 5 refers to a group authentication function valid / invalid flag stored in the RAM 13 or the recording device 15 to determine whether the group authentication function is valid.

  In step S17, the MFP 5 applies the user / authority table 61 and proceeds to step S21. That is, for example, the MFP 5 applies the user / authority table 61 to an authority determination flag or the like that is stored in the RAM 13 or the recording device 15 or the like and is referred to when determining the presence / absence of authority in step S23 or the like described later ( Set the flag to use), and proceed to step S21.

  On the other hand, in step S18, the MFP 5 determines whether or not the user belongs to a group (group management user). If the MFP 5 determines that the user is a group management user (YES in step S18), the process proceeds to step S19. If the MFP 5 determines that the user is not a group management user (NO in step S18), the process proceeds to step S20.

  For example, if the user information acquired in step S15 includes group information, the MFP 5 determines that the user belongs to the group, and if the user information does not include group information, It is determined that the user does not belong to the group.

  In step S19, the MFP 5 applies the group / authority table 63 and proceeds to step S21. That is, the MFP 5 applies the group / authority table 63 to, for example, an authority determination flag stored in the RAM 13 or the recording device 15 and referred to when determining the presence / absence of authority in step S23 and the like described later ( Set the flag to use), and proceed to step S21.

  On the other hand, in step S20, the MFP 5 applies the default group / authority table 64 and proceeds to step S21. That is, the MFP 5 applies the default group / authority table 64 to, for example, an authority determination flag that is stored in the RAM 13 or the recording device 15 and that is referred to when determining the presence / absence of authority in step S23 described later. A flag indicating (use) is set, and the process proceeds to step S21.

  In step S21, the MFP 5 displays a setting change screen 72 as shown in FIG. 11, for example, on the operation panel 21 or the like. Progressing to step S22 following step S21, the MFP 5 receives operation information (or operation data) operated by the user on the setting change screen 72.

  Progressing to step S23 following step S22, the MFP 5 refers to the corresponding table via the server 6 or the like based on the user name, authority determination flag, etc., and informs the user of the operation information received in step S21. It is determined whether or not there is an authority to execute such an operation. If the MFP 5 determines that the user has the authority to execute the operation (YES in step S23), the process proceeds to step S25. If the MFP 5 determines that the user does not have the authority to perform the operation (NO in step S23), the process proceeds to step S24. .

  In step S24, the MFP 5 displays an authentication error screen 75 as shown in FIG. 15 on the operation panel 21 or the like, and ends the setting change process. FIG. 15 is a diagram illustrating an example of an authentication error screen. As shown in FIG. 15, the authentication error screen 75 displays that the user account (combination of user name and password) is invalid or has no execution authority.

  Returning to FIG. 13, in step S25, the MFP 5 executes an operation such as setting change based on the operation information received in step S22. Progressing to step S26 following step S25, the MFP 5 determines whether or not the operation is completed. If MFP 5 determines that the operation has been completed (YES in step S26), it ends the setting change process, and if it determines that the operation has not been completed (NO in step S26), it returns to step S21.

  For example, if the MFP 5 determines that an operation completion button or the like is pressed by a user on a predetermined screen displayed on the operation panel 21 or the like, the MFP 5 determines that the operation is completed.

  Hereinafter, another example of the functional configuration of the MFP 5 and another example of the setting change process will be described in the second embodiment. In the second embodiment, differences from the first embodiment will be mainly described.

  FIG. 16 is a second functional configuration diagram of the MFP. As shown in FIG. 16, the MFP 5 has, as functional configurations, an affiliation group determination unit 51, a default group association unit 52, a data setting / change unit 53, a time limit information storage unit 54, and an information presentation unit 55. ,including.

  The term information storage unit 54 stores information related to the term of validity (for example, term of validity of operation authority, etc.) for a user (or account) not belonging to the group in the RAM 13 or the recording device 15 or the like. In response to the request, the information presentation unit 55 creates a screen (for example, a caution screen 76) including information related to the expiration date stored in the expiration date storage unit 54, and displays it on the operation panel 21 or the like.

  Hereinafter, another example of a process in which the user changes the setting (or the detailed setting) will be described with reference to a flowchart. FIG. 17 is a flowchart (part 2) illustrating the setting change process.

  For example, when the user performs a predetermined operation on the screen displayed on the operation panel 21 or the like, the MFP 5 determines in step S30 whether the authentication function is valid. If MFP 5 determines that the authentication function is valid (YES in step S30), it proceeds to step S31. If MFP 5 determines that the authentication function is not valid (NO in step S30), it proceeds to step S44. In FIG. 17, for simplification of description, if it is determined that the authentication function is not valid, the process proceeds to step S44. However, if the MFP 5 determines that the authentication function is not valid, for example, the authority of the user is assigned to the user. The determination may be made using the authority table 61, that is, the process may proceed to step S44 through the process of step S37.

  For example, the MFP 5 refers to an authentication function valid / invalid flag stored in the RAM 13 or the recording device 15 to determine whether the authentication function is valid.

  In step S31, the MFP 5 displays an authentication login screen 74 as shown in FIG.

  If the MFP 5 determines that the user name and password have been input by the user, the MFP 5 determines in step S32 whether the network authentication is valid. If the MFP 5 determines that the network authentication is valid (YES in step S32), the process proceeds to step S34. If the MFP 5 determines that the network authentication is not valid (NO in step S32), the process proceeds to step S33.

  For example, the MFP 5 refers to a network authentication valid / invalid flag stored in the RAM 13 or the recording device 15 to determine whether the network authentication is valid.

  In step S33, the MFP 5 performs authentication (local authentication) using the user name and password input by the user using the authentication login screen 74, and determines that the authentication (login) is successful as a result of the authentication (step S33). If YES in step S33), the process proceeds to step S44. If it is determined that the authentication (login) has failed (NO in step S33), the process proceeds to step S47.

  In FIG. 17, for simplification of description, if it is determined that the authentication (login) is successful, the process simply proceeds to step S <b> 44. However, if the MFP 5 determines that the authentication (login) is successful, for example, The authority may be determined using the user / authority table 61, that is, the process may proceed to step S44 through the process of step S37.

  On the other hand, in step S34, the MFP 5 determines whether or not the login to the server authentication (server 6) is successful. If the MFP 5 determines that the login to the server authentication (server 6) has been successful (YES in step S34), the MFP 5 proceeds to step S35, and determines that the login to the server authentication (server 6) has failed (NO in step S34). Proceed to S47.

  In step S35, the MFP 5 acquires user information corresponding to the logged-in user from the server 6 or the like. That is, the MFP 5 acquires user and group information corresponding to the logged-in user from the server 6 and the like.

  Progressing to step S36 following step S35, the MFP 5 determines whether or not the group authentication function is valid. If MFP 5 determines that the group authentication function is valid (YES in step S36), it proceeds to step S38. If MFP 5 determines that the group authentication function is not valid (NO in step S36), it proceeds to step S37.

  For example, the MFP 5 refers to a group authentication function valid / invalid flag stored in the RAM 13 or the recording device 15 to determine whether the group authentication function is valid.

  In step S37, the MFP 5 applies the user / authority table 61 and proceeds to step S44. That is, for example, the MFP 5 applies the user / authority table 61 to an authority determination flag or the like that is stored in the RAM 13 or the recording device 15 and that is referred to when determining the presence or absence of authority in step S46 and the like described later ( Set the flag to use), and proceed to step S44.

  On the other hand, in step S38, the MFP 5 determines whether or not the user belongs to a group (group management user). If the MFP 5 determines that the user is a group management user (YES in step S38), the process proceeds to step S39. If the MFP 5 determines that the user is not a group management user (NO in step S38), the process proceeds to step S40.

  For example, if the user information acquired in step S35 includes group information, the MFP 5 determines that the user belongs to the group, and if the user information does not include group information, It is determined that the user does not belong to the group.

  In step S39, the MFP 5 applies the group / authority table 63 and proceeds to step S44. That is, the MFP 5 applies the group / authority table 63 to, for example, an authority determination flag stored in the RAM 13 or the recording device 15 and referred to when determining the presence / absence of authority in step S46 and the like described later ( Set the flag to use), and proceed to step S44.

  On the other hand, in step S40, the MFP 5 acquires information related to the expiration date for the user (or account) not belonging to the group stored in the RAM 13 or the recording device 15 or the like. Progressing to step S41 following step S40, the MFP 5 determines whether or not the current time exceeds the expiration date based on the information related to the expiration date acquired in step S40 and the current time. Determine. If MFP 5 determines that the current time has exceeded the expiration date (YES in step S41), it proceeds to step S47, and if it determines that the current time has not exceeded the expiration date (NO in step S41), it proceeds to step S42. .

  In step S42, the MFP 5 displays a warning screen 76 as shown in FIG. 18 on the operation panel 21 or the like. FIG. 18 is a diagram illustrating an example of a caution screen. As shown in FIG. 18, the attention screen 76 displays the expiration date of an account that does not belong to the group. By displaying the caution screen in this way, it is understood that a user who does not belong to a group must belong to some group by the expiration date. For example, let an administrator belong to a specified group. Requests can be made.

  Returning to FIG. 17, the process advances to step S43 following step S42, and the MFP 5 applies the default group / authority table 64 and advances to step S44. In other words, the MFP 5 applies the default group / authority table 64 to, for example, an authority determination flag that is stored in the RAM 13 or the recording device 15 and is referred to when determining the presence / absence of authority in step S46, which will be described later. A flag indicating that it is to be used (used) is set, and the process proceeds to step S44.

  In step S44, the MFP 5 displays a setting change screen 72 as shown in FIG. 11, for example, on the operation panel 21 or the like. Progressing to step S45 following step S44, the MFP 5 receives operation information (or operation data) operated by the user on the setting change screen 72.

  Progressing to step S46 following step S45, the MFP 5 refers to the corresponding table via the server 6 or the like based on the user name, authority determination flag, etc., and informs the user of the operation information received in step S44. It is determined whether or not there is an authority to execute such an operation. If the MFP 5 determines that the user has the authority to execute the operation (YES in step S46), the process proceeds to step S48. If the MFP 5 determines that the user does not have the authority to perform the operation (NO in step S46), the process proceeds to step S47. .

  In step S47, the MFP 5 displays an authentication error screen 75 as shown in FIG. 15 on the operation panel 21 or the like, and ends the setting change process.

  On the other hand, in step S48, the MFP 5 executes an operation such as a setting change based on the operation information received in step S45. Progressing to step S49 following step S48, the MFP 5 determines whether or not the operation is completed. If the MFP 5 determines that the operation has been completed (YES in step S49), it ends the setting change process, and if it determines that the operation has not been completed (NO in step S49), it returns to step S44.

  For example, if the MFP 5 determines that an operation completion button or the like is pressed by a user on a predetermined screen displayed on the operation panel 21 or the like, the MFP 5 determines that the operation is completed.

  In each of the above-described embodiments, the tables as illustrated in FIGS. 6 to 9 are described as being managed by the SAM database 7 and stored in the hardware of the server 6. Each table as shown in FIGS. 6 to 9 may be stored and managed in the recording device 15 or the like. In the third embodiment, an example of a functional configuration of the MFP 5 in such a configuration is shown.

  FIG. 19 is a functional configuration diagram (part 3) of the MFP. As shown in FIG. 19, the MFP 5 includes, as functional configurations, an belonging group determination unit 51, a default group association unit 52, a data setting / change unit 53, a time limit information storage unit 54, and an information presentation unit 55. , A user / group management means 56, a group / authority management means 57, and a default group / authority management means 58.

  The user / group management means 56 manages a user / group table 62 as shown in FIG. 7 stored in the recording device 15 or the like. The group / authority management means 57 manages a group / authority table 63 as shown in FIG. 8 stored in the recording device 15 or the like. The default group / authority management means 58 manages a default group / authority table 64 as shown in FIG. 9 stored in the recording device 15 or the like.

  As described above, according to the present invention, an appropriate operation authority can be permitted even for a user who does not belong to a group in an image forming apparatus that permits the operation authority to a group. Therefore, even if the group authentication function is valid, a user who does not belong to the group can also appropriately operate (or change settings, etc.) the image forming apparatus.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible.

1 is a diagram illustrating an example of an image forming system. 2 is a hardware configuration diagram of an example of an MFP. FIG. It is a software block diagram (the 1). FIG. 3 is a software configuration diagram of the MFP (part 2); FIG. 3 is a first functional configuration diagram of an MFP. It is a figure which shows an example of a user and authority table. It is a figure which shows an example of a user group table. It is a figure which shows an example of a group and authority table. It is a figure which shows an example of a default group and authority table. It is a figure which shows an example of an initial setting screen. It is a figure which shows an example of a setting change screen. It is a figure which shows an example of a detailed setting change screen. It is a flowchart (the 1) which shows a setting change process. It is a figure which shows an example of an authentication login screen. It is a figure which shows an example of an authentication error screen. FIG. 3 is a second functional configuration diagram of the MFP. It is a flowchart (the 2) which shows a setting change process. It is a figure which shows an example of a caution screen. FIG. 3 is a functional configuration diagram (part 3) of the MFP.

Explanation of symbols

1 copy 2 printer 3 scanner 4 FAX
5 MFP
6 Server 7 SAM Database 8 PC
11 CPU
12 ROM
13 RAM
DESCRIPTION OF SYMBOLS 14 Image storage memory 15 Recording apparatus 16 Network controller 17 Drive apparatus 18 Recording medium 19 Scanner 20 Plotter 21 Operation panel 31 Network controller control part 32 Protocol processing part 33 Overall control part 34 Copy application 35 Printer application 36 FAX application 37 Scanner application 38 Document Box 41 TCP / IP processing unit 42 NetBEUI processing unit 43 IPX / SPX processing unit 44 NetBIOS processing unit 45 SMB processing unit 51 Affiliated group determination unit 52 Default group association unit 53 Data setting / change unit 54 Time limit information storage unit 55 Information presentation Means 56 User / group management means 57 Group / right management means 58 Default group / right management means 61 User / right Table 62 User / group table 63 Group / authority table 64 Default group / authorization table 71 Initial setting screen 72 Setting change screen 73 Detailed setting change screen 74 Authentication login screen 75 Authentication error screen 76 Caution screen 731 User name input area 732 Password input area 733 OK button

Claims (8)

An image forming apparatus that permits a predetermined operation authority to a group to which a user belongs,
Based on the data relating to the user input by the user via the input means, belonging group determination means for determining which group the user belongs to;
In the belonging group determination means, when it is determined that the user does not belong to any group, a default group association means for associating the data related to the user and the data related to the default group;
An image forming apparatus comprising:   Data for setting or changing data relating to operation authority in image formation, included in a default group / authority management unit that manages data relating to the default group and data relating to operation authority in image formation in association with each other 2. The image forming apparatus according to claim 1, further comprising setting / changing means.   3. The image forming apparatus according to claim 1, further comprising expiration date information presentation means for presenting expiration date information related to an operation authority by a user who does not belong to a group to the user.   4. The image forming apparatus according to claim 1, further comprising a user / group management unit configured to associate and manage data relating to a user and data relating to a group to which the user belongs. 5.   5. The image according to claim 1, further comprising a group / authority management unit that associates and manages data relating to a group to which a user belongs and data relating to operation authority in image formation. Forming equipment.   6. The apparatus according to claim 1, further comprising a default group / authority management unit that manages data relating to the default group and data relating to operation authority in image formation in association with each other. Image forming apparatus. A computer in the image forming apparatus that permits a predetermined operation authority to the group to which the user belongs,
Based on the data relating to the user input by the user via the input means, belonging group determination means for determining which group the user belongs to;
In the belonging group determination means, when it is determined that the user does not belong to any group, a default group association means for associating the data related to the user and the data related to the default group;
An image forming program which is operated as described above.   A computer-readable recording medium on which the image forming program according to claim 7 is recorded.

Images