JP2008083885A - Information processing system and information processing program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing system for easily confirming an access right set in a group to which a user is belonging for a certain resource, and for easily setting an access right. <P>SOLUTION: The retrieval condition accepting means of an information processing system accepts a resource and a user as the conditions of retrieval, and a belonging group extraction means extracts a group to which the user accepted by a retrieval condition accepting means is belonging, and an access right extraction means extracts an access right to the resource accepted by the retrieval condition accepting means set in the user accepted by the retrieval condition accepting means or the group extracted by the belonging group extraction means, and a display means displays the access right extracted by the access right extraction means, and an access right setting means sets the access right to the resource in the user or the group to which the user is belonging according to an operation by an operator. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an information processing system and an information processing program.

2. Description of the Related Art Conventionally, in a document management system, it is generally performed to set an access right for a document and control access to a user. In general, it is possible to easily set an access right by defining a group which is a set of users and setting an access right for the group. Note that “access” refers to reading or writing data from / to a storage device (including a memory or the like, which is not necessarily stored in the computer).
When you publish a document in that document management system, you want to show it to a specific user, but don't want to show it to other users, or you want to show a specific document of the published document to a specific user, There are requests such as not wanting to show other documents.

  As these related technologies, for example, in Patent Document 1, when there is an access restriction on the electronic document data, the access right is changed easily, and the access authority can be transmitted by a simple procedure. A database for storing the electronic document data set with the command, instruction means for instructing the first user to transmit the electronic document data in the database to the second user, and the electronic document data in the database An application notification transmission means for transmitting an access authority change application notification to the administrator of the document electronic data when the first user or the second user does not have access right, and the document electronic data in the database in response to the access authority change application notification Data transmitting means for transmitting the electronic document data to the second user when the access right is changed to Document management apparatus is disclosed for.

  Further, for example, in Patent Document 2, even when the user / group access authority for a plurality of documents / folders is changed collectively, the existing access authority set for the user / group for the document / folder is changed. An object of the present invention is to provide a document management system having a function of collectively setting / changing / adding / erasing user / group access authority for a plurality of documents / folders, If the access authority for the document / folder user / group has already been set, and the user is instructed not to set / change / add / delete the access authority instructed by the user, the function is disabled. Also, if the access authority for the document / folder user / group is already set If you specified by the user to merge the access authority indicated by the user, to be merged and the access authority indicated by the user with access privileges previously set is disclosed in.

  In addition, for example, in Japanese Patent Application Laid-Open No. 2004-318, an object is to provide a document management apparatus that saves the user from adding the access right to input data, and the document management apparatus includes an input unit that inputs document data. Storage means for holding document data; and registration means for registering document data input by the input means in the storage means. The storage means has an access right set in advance, and the storage means The access right is also set for the document data registered in the document data, and when the registration unit registers the document data input by the input unit, the access right set in the storage unit is set to access the document data. It is disclosed that it is set as a right.

However, in an environment where a large number of people register documents and individual users can set access rights, what documents can be viewed and what documents are impossible for a specific user Confirming and setting the desired access right state is cumbersome and labor intensive.
Japanese Patent Laying-Open No. 2005-085152 Japanese Patent Laid-Open No. 2003-091448 Japanese Patent Laid-Open No. 2002-041548

  The present invention can easily confirm an access right set for a user or a group to which the user belongs to a certain resource, and can easily set the access right and information. The purpose is to provide a processing program.

The gist of the present invention for achieving the object lies in the inventions of the following items.
[1] Accepting means for receiving the resource identification information and the user identification information stored in the storage unit;
Belonging group extracting means for extracting a group to which a user corresponding to the identification information of the user accepted by the accepting means belongs;
Access right extraction for extracting access right to the resource corresponding to the identification information of the resource accepted by the accepting means, set in the user accepted by the accepting means or the group extracted by the belonging group extracting means Means,
Group extraction means for extracting a group in which access rights to the resource received by the reception means are set;
Display means for displaying on the display device the access right extracted by the access right extraction means or the group extracted by the group extraction means;
An access right setting means for setting an access right for the resource to the user or a group to which the user belongs according to an operation by an operator;
An information processing system comprising group setting means for setting the user to belong to the group extracted by the group extracting means in response to an operation by an operator.

[2] Accepting means for receiving resource identification information and user identification information stored in the storage unit;
Belonging group extracting means for extracting a group to which a user corresponding to the identification information of the user accepted by the accepting means belongs;
Access right extraction for extracting access right to the resource corresponding to the identification information of the resource accepted by the accepting means, set in the user accepted by the accepting means or the group extracted by the belonging group extracting means Means,
Display means for displaying the access right extracted by the access right extraction means on a display device;
An information processing system comprising: access right setting means for setting an access right to the resource for the user or a group to which the user belongs according to an operation by an operator.

[3] Accepting means for receiving the resource identification information and the user identification information stored in the storage unit;
A group extracting unit for extracting a group in which an access right to the resource corresponding to the resource identification information received by the receiving unit is set;
An information processing system comprising group setting means for setting the user to belong to the group extracted by the group extracting means in response to an operation by an operator.

[4] The receiving means further receives the type of access right,
The information processing system according to [1] or [2], wherein the access right extracting unit extracts an access right according to a type of the access right received by the receiving unit.

[5] The accepting means accepts whether or not the user has the access right.
The information processing system according to [4], wherein the access right extraction unit extracts the access right depending on whether or not the access right received by the reception unit is present.

[6]
A reception function for receiving resource identification information and user identification information stored in the storage unit;
A belonging group extraction function for extracting a group to which a user corresponding to the identification information of the user accepted by the acceptance function belongs;
Access right extraction for extracting access rights to resources corresponding to the resource identification information accepted by the acceptance function, which is set in the user accepted by the acceptance function or the group extracted by the belonging group extraction function Function and
A group extraction function for extracting a group in which an access right to the resource received by the reception function is set;
A display function for displaying on the display device the access right extracted by the access right extraction function or the group extracted by the group extraction function;
An access right setting function for setting an access right for the resource to the user or a group to which the user belongs according to an operation by an operator;
An information processing program that realizes a group setting function for setting the user to belong to the group extracted by the group extraction function in response to an operation by an operator.

[7]
A reception function for receiving resource identification information and user identification information stored in the storage unit;
A belonging group extraction function for extracting a group to which a user corresponding to the identification information of the user accepted by the acceptance function belongs;
Access right extraction for extracting access rights to resources corresponding to the resource identification information accepted by the acceptance function, which is set in the user accepted by the acceptance function or the group extracted by the belonging group extraction function Function and
A display function for displaying the access right extracted by the access right extraction function on a display device;
An information processing program for realizing an access right setting function for setting an access right to the resource for the user or a group to which the user belongs in accordance with an operation by an operator.

[8]
A reception function for receiving resource identification information and user identification information;
A group extraction function for extracting a group in which an access right to a resource corresponding to the resource identification information received by the reception function is set;
An information processing program that realizes a group setting function for setting the user to belong to the group extracted by the group extraction function in response to an operation by an operator.

  According to the information processing system of claim 1, it is possible to easily confirm the access right set for a user or a group to which the user belongs to a certain resource, and It is possible to easily confirm the group that the user has, and to easily set the access right or register the user in the group having the access right.

  According to the information processing system of the second aspect, it is possible to easily confirm the access right set for the user or the group to which the user belongs to a certain resource, and the access right can be easily set. It becomes like this.

  According to the information processing system according to claim 3, it is possible to easily confirm a group having an access right to a certain resource, and it is easy to register a user to the group having the access right. become able to.

  According to the information processing system of the fourth aspect, it is possible to easily confirm the access right to be searched.

  According to the information processing system of the fifth aspect, it becomes possible to easily confirm users, groups and the like that do not have access rights.

  According to the information processing program of claim 6, the access right set for the user or the group to which the user belongs can be easily confirmed for a certain resource, and the access right for the resource is assigned. It is possible to easily confirm the group that the user has, and to easily set the access right or register the user in the group having the access right.

  According to the information processing program of the seventh aspect, it is possible to easily confirm the access right set for the user or the group to which the user belongs to a certain resource, and the access right can be easily set. It becomes like this.

  According to the information processing program of claim 8, it is possible to easily confirm a group having an access right to a certain resource, and it is easy to register a user to the group having the access right. become able to.

  This embodiment will be described by way of example of implementation in a document management system capable of registering a document and releasing the registered document to other users. In the document management system, a user who intends to publish a document has the authority to set and change the access right for the document.

Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a conceptual module configuration diagram of the present embodiment.
The module generally refers to a component such as software or hardware that can be logically separated. Therefore, the module in the present embodiment indicates not only a module in a program but also a module in a hardware configuration. Therefore, the present embodiment also serves as an explanation of a program, a system, and a method. In addition, the modules correspond almost one-to-one with the functions. However, in mounting, one module may be composed of one program, or a plurality of modules may be composed of one program. A plurality of programs may be used. The plurality of modules may be executed by one computer, or one module may be executed by a plurality of computers in a distributed or parallel environment. Hereinafter, “connection” includes not only physical connection but also logical connection.
The system includes a configuration in which a plurality of computers, hardware, devices, and the like are connected via a network and the like, and includes a case where the system is realized by one computer, hardware, devices, and the like.
Hereinafter, a document will be mainly exemplified and described as a resource. Note that a document includes a plurality of documents, folders, and the like in addition to a single document.

  In the first embodiment, as shown in FIG. 1, the document management system 100 includes an access right setting search module 110, a user information management DB 200, and an access right management DB 300. The access right setting search module 110 includes a search condition reception module 111, a belonging group extraction module 112, an access right extraction module 113, a group extraction module 114, a result display module 115, an access right setting module 116, and a group setting module 117. Yes. In the document management system 100, various modules are activated by an operation from the user 900, and the various modules output to a display or the like, thereby transmitting a processing result or the like to the user 900. In addition, the document management system 100 may be connected to a communication network. In this case, the user 900 may operate the document management system 100 via the client PC.

The search condition reception module 111 receives documents and users as search conditions. In addition, an access right may be received, and whether or not the access right is possessed may be received. This acceptance may be an operation by the user 900, stored in advance in the storage device, or may be for performing batch processing.
The affiliation group extraction module 112 searches the user information management DB 200 for a group to which the user accepted by the search condition acceptance module 111 belongs and extracts it.

The access right extraction module 113 sets the access right for the document received by the search condition reception module 111 set in the user received by the search condition reception module 111 or the group extracted by the group extraction module 112. Search and extract from management DB300. Further, according to the access right received by the search condition receiving module 111, the access right may be searched and extracted from the access right management DB 300. Further, the access right may be searched and extracted from the access right management DB 300 depending on whether or not the access right received by the search condition receiving module 111 is possessed.
The group extraction module 114 searches the access right management DB 300 for a group in which the access right for the document received by the search condition reception module 111 is set.

The result display module 115 displays the access right extracted by the access right extraction module 113 or the group extracted by the group extraction module 114.
The access right setting module 116 sets an access right for the document to the access right management DB 300 for the user or a group to which the user belongs in accordance with an operation by the user 900.
The group setting module 117 sets the user in the user information management DB 200 so as to belong to the group extracted by the group extraction module 114 in accordance with an operation by the user 900.

The user information management DB 200 is a database in which a search from the affiliated group extraction module 112 or data storage by the group setting module 117 is performed. It remembers the relationship between users and groups, and groups and groups.
The access right management DB 300 is a database in which search from the access right extraction module 113 and the group extraction module 114 or data storage by the access right setting module 116 is performed. The access right set for the user or group for each document is stored.
In addition, there may be a database of documents. In addition, these databases do not have to reside in one computer, and a plurality of computers may be connected via a communication line.

A data structure stored in the user information management DB 200 will be described with reference to FIGS. The data structure stored in the user information management DB 200 may be any one of the data structures shown in FIGS. 2 to 5, a combination thereof, or another data structure (for example, a network structure).
FIG. 2 is a table showing an example of correspondence between users and groups. The user / group correspondence table 210 has a user / group column 211 and a group column 212 to which the user / group column 211 belongs. The user / group column 211 stores one user or group managed by this system, one per line. In the group column 212 to which the user belongs, a user, a group stored in the group column 211, or a group to which the group belongs is stored. A group is a set of one or more users, and a group may belong to a group in addition to users. A user or group can belong to a plurality of groups. For example, user A belongs to two groups, group I and group J, and group J belongs to group K.
The user / group correspondence table 210 is a table suitable for extracting a group to which a user or group belongs.

FIG. 3 is a table showing an example of correspondence between groups and users. The group / user correspondence table 220 has a reverse relationship to the data structure of FIG. 2, and has a user / group column 222 belonging to the group column 221. The group column 221 stores one group managed in this system, one per line. A user or group belonging to the group stored in the group column 221 is stored in the belonging user / group column 222. For example, user A and user B belong to group I, and user D and group J belong to group K.
The group / user correspondence table 220 is a table suitable for extracting users or groups belonging to a group.

  FIG. 4 is a table showing an example of correspondence between users and groups. In the user / group list table 230, a child (user or group) is arranged in a row, a parent (group) is arranged in a column, and a circle symbol is stored in a column between those having a parent-child relationship. For example, when searching for a group to which the user A belongs, the groups I and J in the column with a circle in the row of the user A are extracted. When searching for users or groups belonging to the group K, the user D and group J in the row with a circle in the group K column are extracted.

  FIG. 5 schematically shows an example of the structure of users and groups. A user and a group have a tree structure, and by searching the tree structure data, a group to which the user belongs, a user to which the group belongs, and the like can be searched. In addition, when searching for a group to which the group belongs, it is possible to search for a higher group by recursively searching.

The data structure of the access right list stored in the access right management DB 300 will be described with reference to FIG. The access right management table 310 has an information resource column 311, a user / group column 312, and an access right column 313.
The information resource column 311 stores document names managed by this system. In addition to the document name, it may be a document identifier that can uniquely identify the document in the system.
The user / group column 312 stores users or groups who have some access rights to the documents stored in the information resource column 311.

The access right column 313 stores the access right assigned to the user or group stored in the user / group column 312 for the document stored in the information resource column 311. Here, the access right will be described using two of the read right and the content display right. The right to read is the right to display information that indicates that the document exists. For example, the title and summary of the document can be displayed, but It cannot be displayed. The content display right is a right permitted to display the content of the document. In addition, there are a copy right for copying the document, an edit right for editing, and a delete right for deleting the document. In the example shown in FIG. 6, for the document 1, the group I has only the read right, and the groups V and W have the read right and the content display right. This indicates that the right to access document 1 from other users or the like is not permitted.
In addition, a user or group belonging to a group inherits the access rights of the upper group. Therefore, for example, in the case of the relationship between the user and the group as shown in FIG. 5, the user A has the access right of the group I, the group J, and the access right of the group K in addition to the access right of the user A itself. is doing.

Next, the function and operation (operation) will be described.
A procedure example of access right check and access right setting will be described with reference to the flowchart of FIG.
In step S <b> 701, the search condition reception module 111 receives a search condition by an operation from the user 900. Here, the search conditions are a document, a user, an access right, and permission / inhibition of the access right. That is, it is possible to know whether a certain user has a certain access right for the document. In addition, it is possible to know a group that has an access right but the user does not belong to.

In step S702, the affiliation group extraction module 112 searches the user information management DB 200 using the user information received in step S701, so that all the groups to which the user belongs (the group belongs to (Including existing groups).
Then, whether the user information received by the access right extraction module 113 in step S701 and the group extracted by the belonging group extraction module 112 have the same access right as that received in step S701 for the document. It is extracted by searching the access right management DB 300.
Further, the group extraction module 114 extracts a group to which the access right accepted in step S701 is assigned to the document. However, the group extracted by the belonging group extraction module 112 is excluded.

In step S703, for the document accepted in step S701, the user accepted in step S701 or the group extracted by the affiliated group extraction module 112 in step S702 (that is, the group to which the user belongs) is obtained in step S701. It is determined whether or not the received access right is possessed. If the condition is satisfied, the process proceeds to step S704. If the condition is not satisfied, the process proceeds to step S705.
In step S <b> 704, a message such as “conditions are satisfied (matching search conditions)” is displayed on the display, and the user 900 is notified. That is, it turns out that the user who made the search condition has the desired access right for the document. Further, instead of simply displaying a message and ending, a display as shown in FIG. 9 to be described later may be performed to clearly indicate a portion of the access right that satisfies the condition.

In step S705, the result display module 115 displays the following three items on the display.
(1) Display a list of objects, that is, documents. This is a case where the document received in step S701 is a plurality of documents, a folder including a plurality of documents, or the like. This will be described later with reference to FIG.
(2) Display a list of users / affiliated groups for adding / deleting access rights. That is, a list of users received in step S701, a list of belonging groups extracted in step S702, and the current access right status are displayed in correspondence with them, and an operation screen is displayed so that the access right can be set for them. This will be described later with reference to FIG.
(3) A list of groups having access rights to the document is displayed. In other words, the user accepted in step S701 does not belong, but a list of groups having a desired access right to the document can be displayed, and the user can be registered (becomes a member or belongs) to the group. An operation screen like this is displayed. This will be described later with reference to FIG.

  In step S706, the operation of the user 900 on the operation screen displayed in step S705 is accepted and registered in the user information management DB 200 and the access right management DB 300. That is, the access right setting module 116 gives an access right to the user or a group to which the user belongs. Alternatively, the group setting module 117 registers the user in a group that has an access right. Then, the process returns to step S703, and if the condition is satisfied, the fact that the condition is satisfied is notified (step S704), and the process ends.

An example of the screen displayed in step S705 will be described with reference to FIG.
Here, it is assumed that the user 900 wants to set the document 1 created by the user 900 so that the title and contents can be displayed to the user A. For this purpose, the user A confirms whether or not the document 1 has the right to read and display the contents. If the user A does not have the contents display right, the contents display to the user A is performed. It is necessary to set the right, set the content display right to the group to which the user A belongs, or make the user A a member of the group that already has the content display right.

The access right setting status display edit screen 800 is displayed by the result display module 115.
In the access right setting status display edit screen 800, an access right 810, a belonging column 820, a non-affiliating group 830 having an access right, a belonging column 840, and an OK button 850 are displayed.
The access right 810 of the user A & affiliation group has a user / group column 811, a read right column 812, and a content display right column 813. The user / group column 811 displays user A and the group to which user A belongs (group I, group J, group K). Then, an indent is provided and displayed so that the hierarchical relationship between the groups can be understood. In the read right column 812, a box mark or a check mark is displayed so that it can be seen whether or not the read right is set. Similarly, a box mark or a check mark is displayed in the content display right column 813 so that it can be seen whether or not the content display right is set. The user 900 sees the access right 810 of the user A & group, and the user A has no read right and content display right, and the read right is set for the group I to which the user A belongs. It can be seen that the content display right is not set. The read right column 812 and the content display right column 813 can be set by the user 900 with the read right and the content display right. That is, when the corresponding part is checked with a pointing device such as a mouse, the access right setting module 116 sets the access right for the corresponding user or group.

  In the affiliation column 820, a check mark is displayed so that it can be seen whether or not the user A belongs to each group. Further, the user 900 can exclude the user A from the group to which the user currently belongs. That is, when the corresponding part is checked with a pointing device such as a mouse (unchecked), the group setting module 117 excludes the user A from the corresponding group.

  The non-affiliation group 830 having the access right has a group column 831, a read right column 832, and a content display right column 833. In the group column 831, a group to which the user A does not belong but has the read right and the content display right for the document 1 is displayed. As with the access right 810 of the user A & group, an indent may be provided and displayed so that the hierarchical relationship between the groups can be understood. A check mark is displayed in the read right column 832 so that it can be seen that the read right is set. Similarly, a check mark is displayed in the content display right column 833 so that it can be seen that the content display right is set. By viewing the non-affiliated group 830 having access rights, the user 900 can recognize that the read right and the content display right are set for the groups V and W to which the user A does not belong.

In the affiliation column 840, a mark is displayed so that it can be seen that the user A does not belong to each group displayed in the non-affiliation group 830 with access rights. Further, the user 900 can be assigned to the group V or the group W by the user 900. That is, when the corresponding part is checked with a pointing device such as a mouse, the group setting module 117 registers the user A in the corresponding group.
When the OK button 850 is designated by the user 900, setting is performed in the state of the reading right column 812, the content display right column 813, the affiliation column 820, and the affiliation column 840 at that time.

An example of a screen displayed in step S705 will be described with reference to FIG.
The confirmation screen 860 is displayed by the result display module 115.
In the confirmation screen 860, an access right 870 for the user A & group and an OK button 850 are displayed. In the user A & affiliation group access right 870, a user / group column 871, a read right column 872, and a content display right column 873 are displayed. 811, the read right column 812, and the content display right column 813 are displayed, but a portion that matches the search condition is displayed in a form different from that in FIG. That is, it becomes easy to understand that the reading right is set for the group I, and the reading right and the content display right are set for the group J.

An example of a screen displayed in step S705 when a plurality of documents are designated will be described with reference to FIG.
The display screen 880 for a plurality of documents is almost the same as the access right setting status display editing screen 800 shown in FIG. 8, but with a condition item 881 and an unachieved object list 890 added. The result display module 115 displays the display screen 880 for multiple documents.
In the condition item 881, the search condition accepted in step S701 is displayed. That is, “User A” indicates that the search condition “Read and display contents” and “Possible” for “Route 1” and below is designated. Since it is “root 1”, all documents under the root 1 of the folder (directory) are targeted.
In the unreached object list 890, all documents below the route 1 are displayed.
Then, for all the documents, the case of having access right and the case of having access right for a part may be displayed separately. For example, as shown in the reading right column 812 of FIG. 10, it is displayed as “4/9” that all the documents are nine and that the reading right is set to four in the group J. It may be.

When multiple documents are specified, each module operates as follows.
The search condition receiving module 111 receives search conditions for a plurality of documents, folders, and the like.
The access right extraction module 113 extracts access right settings for all accepted documents.
The group extraction module 114 extracts a group having a desired access right for all received documents.
The access right setting module 116 sets the document selected by the user 900 from among the documents displayed in the unachieved object list 890 using the read right column 812 and the content display right column 813. Set access rights.

In the above, the search target is the one with the access right, but it is also possible to inquire when there is no access right. In that case, if “Yes” and “No” are reversed, the situation is almost the same. That is, the search condition receiving module 111 receives whether or not the user has further access rights, and the access right extracting module 113 depends on whether or not the user has the access rights received by the search condition receiving module 111. The access right may be extracted. Specifically, the search condition accepting module 111 accepts a distinction between “possible” (with the access right described above) and “impossible” (with no access right) as the access right. Thereafter, the same processing is performed by searching for a group or the like without the access right.
In the above-described embodiment, the document is mainly exemplified as the resource, but a device or the like may be used in addition to the document.

  As shown in FIG. 11, the computer on which this embodiment is executed is a general computer, such as a computer or a personal computer that can serve as a server. CPU 1010 that executes modules such as search condition reception module 111, belonging group extraction module 112, access right extraction module 113, group extraction module 114, result display module 115, and data such as programs, documents, access rights, user information, and the like A memory 1020 for storing data, an auxiliary storage device 1030 configured by an HDD or the like, an input device 1040 for inputting data such as a keyboard and a mouse, an output device 1050 such as a CRT or a liquid crystal display, and the results on paper or the like A printing apparatus 1060 for outputting, a network interface 1080 for communicating with a client, and a bus 1070 for connecting and exchanging data are configured. A plurality of these computers may be connected to each other via a network.

  Note that the hardware configuration illustrated in FIG. 11 illustrates one configuration example, and the present embodiment is not limited to the configuration illustrated in FIG. 11, and is a configuration capable of executing the modules described in the present embodiment. I just need it. For example, some modules may be configured by dedicated hardware (for example, ASIC), and some modules may be in an external system and connected via a communication line. A plurality of systems shown in FIG. 5 may be connected to each other via communication lines so as to cooperate with each other. Further, it may be incorporated in a copying machine, a fax machine, a scanner, a printer, a multifunction machine (also called a multi-function copying machine, which has functions of a scanner, a printer, a copying machine, a fax machine, etc.).

Note that the program according to the embodiment described above can be stored in a computer-readable recording medium in which the program is recorded, or provided through a communication line.
The “computer-readable recording medium on which a program is recorded” refers to a computer-readable recording medium on which a program is recorded, which is used for program installation, execution, program distribution, and the like.
The recording medium is, for example, a digital versatile disc (DVD), which is a standard established by the DVD Forum, such as “DVD-R, DVD-RW, DVD-RAM,” and DVD + RW. Standards such as “DVD + R, DVD + RW, etc.”, compact discs (CDs), read-only memory (CD-ROM), CD recordable (CD-R), CD rewritable (CD-RW), etc. MO), flexible disk (FD), magnetic tape, hard disk, read only memory (ROM), electrically erasable and rewritable read only memory (EEPROM), flash memory, random access memory (RAM), etc. It is.
The program or a part of the program can be recorded on the recording medium and stored or distributed. Also, by communication, for example, a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a wired network used for the Internet, an intranet, an extranet, etc., or wireless communication It can be transmitted using a transmission medium such as a network or a combination of these, and can also be carried on a carrier wave.
Furthermore, the above program may be a part of another program, or may be recorded on a recording medium together with a separate program.

It is the schematic block diagram which illustrated the module structure of this Embodiment. It is a table which shows the example of a correspondence with a user and a group. It is a table which shows the example of a response | compatibility with a group and a user. It is a table which shows the example of a correspondence with a user and a group. It is explanatory drawing which shows the structural example of a user and a group typically. It is an example of the access right list | wrist of a document. It is the flowchart which showed the example of the procedure of access right check and access right setting. 6 illustrates an access right setting status display and edit screen. It is an example of an access right setting status display screen. 6 illustrates an access right setting status display and edit screen. It is the schematic block diagram which illustrated the hardware of this Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Document management system 110 ... Access right setting search module 111 ... Search condition reception module 112 ... Affiliation group extraction module 113 ... Access right extraction module 114 ... Group extraction module 115 ... Result display module 116 ... Access right setting module 117 ... Group setting Module 200 ... User information management DB
210 ... User and group correspondence table 220 ... Group and user correspondence table 230 ... User and group list table 300 ... Access right management DB
310 ... Access right management table 900 ... User

Claims (8)

Receiving means for receiving the identification information of the resource and the identification information of the user stored in the storage unit;
Belonging group extracting means for extracting a group to which a user corresponding to the identification information of the user accepted by the accepting means belongs;
Access right extraction for extracting access right to the resource corresponding to the identification information of the resource accepted by the accepting means, set in the user accepted by the accepting means or the group extracted by the belonging group extracting means Means,
Group extraction means for extracting a group in which access rights to the resource received by the reception means are set;
Display means for displaying on the display device the access right extracted by the access right extraction means or the group extracted by the group extraction means;
An access right setting means for setting an access right for the resource to the user or a group to which the user belongs according to an operation by an operator;
An information processing system comprising group setting means for setting the user to belong to the group extracted by the group extracting means in response to an operation by an operator. Receiving means for receiving the identification information of the resource and the identification information of the user stored in the storage unit;
Belonging group extracting means for extracting a group to which a user corresponding to the identification information of the user accepted by the accepting means belongs;
Access right extraction for extracting access right to the resource corresponding to the identification information of the resource accepted by the accepting means, set in the user accepted by the accepting means or the group extracted by the belonging group extracting means Means,
Display means for displaying the access right extracted by the access right extraction means on a display device;
An information processing system comprising: access right setting means for setting an access right to the resource for the user or a group to which the user belongs according to an operation by an operator. Receiving means for receiving the identification information of the resource and the identification information of the user stored in the storage unit;
A group extracting unit for extracting a group in which an access right to the resource corresponding to the resource identification information received by the receiving unit is set;
An information processing system comprising group setting means for setting the user to belong to the group extracted by the group extracting means in response to an operation by an operator. The accepting means further accepts the type of access right,
The information processing system according to claim 1, wherein the access right extracting unit extracts an access right according to a type of the access right received by the receiving unit. The accepting means accepts whether or not the user has the access right;
The information processing system according to claim 4, wherein the access right extracting unit extracts the access right depending on whether or not the access right received by the receiving unit is present. On the computer,
A reception function for receiving resource identification information and user identification information stored in the storage unit;
A belonging group extraction function for extracting a group to which a user corresponding to the identification information of the user accepted by the acceptance function belongs;
Access right extraction for extracting access rights to resources corresponding to the resource identification information accepted by the acceptance function, which is set in the user accepted by the acceptance function or the group extracted by the belonging group extraction function Function and
A group extraction function for extracting a group in which an access right to the resource received by the reception function is set;
A display function for displaying on the display device the access right extracted by the access right extraction function or the group extracted by the group extraction function;
An access right setting function for setting an access right for the resource to the user or a group to which the user belongs according to an operation by an operator;
An information processing program that realizes a group setting function for setting the user to belong to the group extracted by the group extraction function in response to an operation by an operator. On the computer,
A reception function for receiving resource identification information and user identification information stored in the storage unit;
A belonging group extraction function for extracting a group to which a user corresponding to the identification information of the user accepted by the acceptance function belongs;
Access right extraction for extracting access rights to resources corresponding to the resource identification information accepted by the acceptance function, which is set in the user accepted by the acceptance function or the group extracted by the belonging group extraction function Function and
A display function for displaying the access right extracted by the access right extraction function on a display device;
An information processing program for realizing an access right setting function for setting an access right to the resource for the user or a group to which the user belongs in accordance with an operation by an operator. On the computer,
A reception function for receiving resource identification information and user identification information;
A group extraction function for extracting a group in which an access right to a resource corresponding to the resource identification information received by the reception function is set;
An information processing program that realizes a group setting function for setting the user to belong to the group extracted by the group extraction function in response to an operation by an operator.

Images