CN107180339A

CN107180339A - The efficient measures and procedures for the examination and approval of workflow approval node

Info

Publication number: CN107180339A
Application number: CN201710428786.0A
Authority: CN
Inventors: 陈达志
Original assignee: Chengdu Morning Glory Information Technology Co Ltd
Current assignee: Chengdu Morning Glory Information Technology Co Ltd; Chengdu Qianniucao Information Technology Co Ltd
Priority date: 2017-06-08
Filing date: 2017-06-08
Publication date: 2017-09-19
Also published as: CN108805532A; WO2018224024A1; CN108805532B

Abstract

The step of the step of examining role the invention discloses a kind of efficient measures and procedures for the examination and approval of workflow approval node, including a setting approval node and an examination ＆ approval role efficiently examine, setting approval node to examine role includes three kinds of modes：Assigned role, specific office（Department manager role）, by rank set examination ＆ approval role；Examine the efficient approval process of role：Using the suggestions made after examination of the examination ＆ approval role of first submission suggestions made after examination as the approval results of the approval node, as long as having any one to examine role submits suggestions made after examination, approval node examination ＆ approval terminate.As long as approval node of the present invention, which has any one to examine role, have submitted suggestions made after examination, the approval results of the approval node are determined that, approval node examination ＆ approval terminate, and the examination ＆ approval task of other examination ＆ approval roles is removed automatically, realizes efficient, quick examination ＆ approval.The power of examination and approval that many people are particularly suitable for use in same examination ＆ approval task is identical, anyone provide suggestions made after examination all can situation.

Description

The efficient measures and procedures for the examination and approval of workflow approval node

Technical field

The present invention relates to a kind of workflow measures and procedures for the examination and approval of the management software systems such as ERP, more particularly to a kind of workflow The efficient measures and procedures for the examination and approval of approval node.

Background technology

Access control based roles（RBAC）Be Recent study at most, a kind of thought most ripe data base authority pipe Reason mechanism, it is considered as to substitute traditional forced symmetric centralization（MAC）And self contained navigation（DAC）Ideal candidates.Pass The flexibility of the self contained navigation of system is high but security is low, and forced symmetric centralization is safe but limits too strong；It is based on Both access controls of role have concurrently, are not only easy to manage and reduce complexity, cost and the probability made a mistake, thus Great development has been obtained in recent years.Access control based roles（RBAC）Basic thought be according in business organization's view Different functional posies divides different roles, the access rights of database resource is encapsulated in role, user is by being assigned Different roles are given to carry out dereference database resource.

Substantial amounts of table and view are often all had in large-scale application system, this causes management to database resource and awarded Adaptability in tactics obtains sufficiently complex.The access and receiving and grant for authority that database resource is directly managed by user are very difficult, and it needs Understanding of the user to database structure is very thorough, and is familiar with the use of sql like language, once and application system structure or peace Full demand has changed, and will carry out large amount of complex and cumbersome mandate changes, and is very easy to occur some and unexpected awards Security breaches caused by power error.Therefore, be that large-scale applied system design one kind is simple, efficient right management method into For system and the common requirements of system user.

The mechanism of authorization control of based role can carry out simple, efficient management to the access rights of system, greatly The burden and cost of System right management are reduced, and causes System right management to more conform to the service management of application system Specification.

However, the user authority management of traditional based role and Work-flow control method are using " role is to a pair of user It is many " relation mechanism, its " role " be group/role of class property, i.e., one can correspond to/associate multiple users, role class simultaneously It is similar under the concepts such as post/position/work post, this relation mechanism be divided into following three kinds of forms substantially to the mandate of user right：

1st, as shown in figure 1, directly being authorized to user, big workload, frequent operation and trouble are had the disadvantage；Section is examined in approval process The review operation main body of point is user, and workflow approval node directly selects employee/user as examination ＆ approval main body, as generation employee Change（Such as transfer-position, leaving office）, all flows that the employee is related to have to be adjusted accordingly, especially for company management Personnel, the approval process that it is related to is more, and the workload of flow adjustment is big, numerous and diverse, easily error or omission, and influence enterprise is just Often operation, or even cause the loss that can not estimate.

Even if simply employee's power of examination and approval changes, it is also desirable to make corresponding adjustment to the flow that the employee is related to, There is also problem like above.

2nd, as shown in Fig. 2 to role（Class/group/post/work post property）Authorized（One role can associate multiple User）, user is by role's acquisition authority, and review operation main body is group/class property role；

3rd, as shown in figure 3, both the above mode is combined.

In statement above, 2,3 are required to authorize the role of class/group property, and pass through class/group/post/work post The role of property authorize and the mode of Work-flow control has the disadvantage that：

1st, operation when user right changes is difficult：During actual system use, often because being needed during operation Authority to user is adjusted, such as：When handling the change of employee's authority, some employee's authority of role association becomes Change, we can not change the authority of whole role because of the change of indivedual employee's authorities, because the role is also associated with other The unchanged employee of authority.Therefore in order to tackle this kind of situation, otherwise new role is created to meet the employee that the authority changes, The employee is directly authorized according to authority demand（Depart from role）.Both the above processing mode, it is more in role-security In the case of to role authorization not only the time required to it is long, and easily make a mistake, user operates cumbersome and trouble, also easily goes out Mistake causes the loss to system user.

When the power of examination and approval of employee/user changes, or employee/user departs from role, workflow approval node is straight Selecting selects employee/user as examination ＆ approval main body, otherwise role is increased newly to meet the requirement of approval process.First way, works as hair Resiurce of student's work changes（Such as transfer-position, leaving office）, all flows that the employee is related to have to be adjusted accordingly, especially for public affairs Administrative staff are taken charge of, the approval process that it is related to is more, the workload of flow adjustment is big, numerous and diverse, easily error or omission, influence enterprise The normal operation of industry, or even cause the loss that can not estimate.Even if simply employee's power of examination and approval changes, it is also desirable to the member The flow that work is related to makes corresponding adjustment, and there is also problem like above.The second way, newly-increased role is just related to role Newly-built, association, authorize work, especially role is more, role association user it is also many in the case of, which role is specifically associated with A little users are difficult to remember.

2nd, to remember that the concrete power limit that role includes is difficult for a long time：If the privilege feature point of role is relatively more, the time one is grown, very Difficulty remembers the concrete power limit of role, it more difficult to remember the authority difference between the close role of authority, and the authority of close role is also very Easily obscure；To associate new user, it is impossible to accurate to judge association how is selected.

3rd, because user right changes, then role can be caused to create more and more（If not creating new role, can significantly it increase Plus the mandate directly to user）, it more difficult to distinguish the specific difference of each role-security.

4th, during transfer-position, to by many authority distributions of transfer-position user other several users will be given to undertake, then when handling It must will be made a distinction by these authorities of transfer-position user, create role again respectively to associate other several users, such behaviour Make not only complicated and time consumption, and also easily making a mistake.

There is following defect in the workflow examination ＆ approval mechanism of legacy system：

（1）Flow promoter itself can not be selected in approval node as approving person, before approval process terminates, examination ＆ approval stream The promoter of journey can not check the approval results for confirming its application submitted, for example：Promoter has initiated one 10000 yuan of report Approval request is sold, because the content of promoter's submission is wrong or other reasonses, reimbursed sum is checked and approved after multistage examination ＆ approval and is changed For 500 yuan, final approval results only allow 500 yuan of reimbursement, and approval process terminates.Promoter receives and had objection after approval results If, it is necessary to approval process result before is cancelled, then resubmits an examination ＆ approval application, system in-fighting is added, reduces Examination ＆ approval efficiency.

（2）For institutional framework it is more complicated transprovincially, company of transnational group etc., the approval process quantity being related to is very Many, approval process circulation condition and circulation circuit are also very complicated, and for system flow designer, workload is very big, And be easy to malfunction when setting approval process, system is not high using very inconvenient, system reliability.

（3）Set by rank examine when, system can not realize the approval request submitted to highest department manager Examination ＆ approval, generally require and are individually for the special examination ＆ approval role of highest department manager's distribution, add system workflow designer Workload.

（4）Using approval process role can only be submitted to judge that department level is other as criterion, it is impossible to self-defined with list In other roles for being related to or department as the other standard of department level is judged, there is certain use limitation.

Citing：For a contract approval flow, the signing role of contract asks for leave, and allows its colleague to initiate one for him The examination ＆ approval of contract, and system assert its colleague for flow submission role, when being examined by rank for rank judgement with Its colleague is defined, it is impossible to department and position where objective embodiment contract signing role.For example, the signing role of contract is market The sales force 1 in portion, its research staff 1 that role is research and development department that works together, the contract should be by signing role department originally Supervisor-market department's supervisor's role's examination ＆ approval, when the examination ＆ approval rank for setting approval node is 1, system can be distributed to where research staff 1 The supervisor of department-Head of R＆D role is examined, and occurs in that the assignment error of approval process, in-convenience in use.

In addition, the examination ＆ approval mode of conventional operation stream approval node is single, examined for many people, it is many to be entered using ballot mode OK, however ballot mode usually requires each examination ＆ approval role and submits the examination ＆ approval knot of the approval node can be just obtained after voting results Really, in actual application, inefficiency is examined, it is impossible to realize and efficiently, quickly examine.

The content of the invention

It is an object of the invention to overcome the deficiencies of the prior art and provide a kind of efficient side of examination ＆ approval of workflow approval node Method, as long as having any one to examine role submits suggestions made after examination, determine that the approval results of the approval node, and the approval node is examined Criticize and terminate, examination ＆ approval tasks of other examination ＆ approval roles are removed automatically, realize efficient, quickly examination ＆ approval.Many people are particularly suitable for use in same The power of examination and approval of individual examination ＆ approval task is identical, and the suggestions made after examination that anyone provides can determine the situation of approval results.

The purpose of the present invention is achieved through the following technical solutions：The efficient measures and procedures for the examination and approval of workflow approval node, bag Include one and the step of the step of approval node examines role and an examination ＆ approval role efficiently examine is set：

Combination of the step of setting approval node examines role including any one or more in the following manner：

（1）One or more roles are directly specified as examination ＆ approval role；

（2）One or more departments are directly specified, examination ＆ approval role is served as with the department manager role of department；

（3）By rank, examination ＆ approval role is set；

The step of examination ＆ approval role efficiently examines：One approval node includes one or more examination ＆ approval roles, is carried with first The suggestions made after examination for examining role of suggestions made after examination are handed over as the approval results of the approval node, as long as there is any one to examine role Suggestions made after examination are submitted, approval node examination ＆ approval terminate.

The efficient measures and procedures for the examination and approval of workflow approval node, in addition to the list that a setting examination ＆ approval role is related to approval process The step of field contents check authority, the different examination ＆ approval roles of same approval node check the/power of amendment to form fields content Limit is identical.

The efficient measures and procedures for the examination and approval of workflow approval node, include the step of a setting approval node next stage circulation node Suddenly, next stage circulation node includes two kinds：

（1）It is one or more by node when the approval results of the approval node are " passing through "；

（2）One or more rejection nodes when the approval results of the approval node are " rejection "；

Have multiple by node/rejection node optional time when passing through/rejecting, by the examination ＆ approval angle of this first submission suggestions made after examination Color sorting selects one by node/rejection node；When passing through/rejecting, only one of which is by node/rejection node, by this first The individual examination ＆ approval role selecting for submitting suggestions made after examination should by node/rejection node, or by system automatically into this by node/ Reject node.

Described role is independent individual, rather than group/class, and same one role of period can only associate unique user, And the one or more roles of user-association.

Three-tier Architecture Model of the described approval process based on user-role-authority, wherein：

Role's layer：Flow is initiated in workflow and the operating main body of examination ＆ approval is role, and each role is independent individual, rather than Group/class, same one role of period can only associate unique user, and the one or more roles of user-association；

Authority layer：The authority used required in workflow execution is constituted, and authority directly licenses to role；

Client layer：User determines the examination ＆ approval task in approval process by the role of association, and is carried out with the authority of association role Review operation.

The structure of described user-role-authority Three-tier Architecture Model comprises the following steps：

Set up role, each role is independent individual, rather than group/class；The role must select a department, angle when creating Color role if after creating belongs to the department, and role is authorized according to the action of role, and the role Title is unique under the department, and the numbering of the role is unique in systems；During the trans-departmental transfer-position of the account, cancel account with it is former The association of role in department, account is associated with the role in new department；

The mandate of authority is carried out respectively to the role of foundation；

Role is associated a user to, wherein, same one role of period can only associate unique user, and a user-association one Individual or multiple roles.

Described approval process includes start node, at least one approval node, an end node：

Start node：Approval process starts；

Approval node：Selection examination ＆ approval role, and examination ＆ approval role is authorized；

End node：Approval process terminates.

It is described by rank set examination ＆ approval role the step of include one set system organization structure the step of and one press portion The step of gate leve does not set examination ＆ approval role：

The step of setting system organization structure, includes following sub-step：

SS1：The department included in system organization structure and role are created, and interdepartmental hierarchical relationship is set；

SS2：The department manager role of all departments is set；

It is described to set the step of examining role to include by department's rank：

SSS1:Select by rank mode examine the setting of role；

SSS2:Select carrying for role's property field in approval process correspondence list, department's property field or the approval process One in angle of cut color, it is used as rank main body；

SSS3:Specific rating value n is filled in, n is >=0 positive integer：

（1）Role's property field in approval process correspondence list is selected as rank main body, using the corresponding role of the field as Criterion judges rank：

1. as n=0, the examination ＆ approval role of the approval node is served as by the corresponding role of the field；

2. as n=1, the examination ＆ approval angle of the approval node is served as by the department manager role of the corresponding role department of the field Color；If the corresponding role of the field is the department manager role of its department, by the corresponding role department of the field The department manager role of upper level department serve as the examination ＆ approval role of the approval node；

3. as n=2, the examination ＆ approval are served as by the department manager role of the upper level department of the corresponding role department of the field The examination ＆ approval role of node；

4. as n=3, this is served as by the department manager role of the upper upper level department of the corresponding role department of the field and examined Criticize the examination ＆ approval role of node；

5. as n=4, this is served as by the department manager role of the Shang Shang upper levels department of the corresponding role department of the field The examination ＆ approval role of approval node；

6. by that analogy；

7. when the other setting of department level exceedes the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination ＆ approval role of the approval node；

（2）Department's property field in approval process correspondence list is selected as rank main body, using the corresponding department of the field as Criterion judges rank：

1. as n=0, the examination ＆ approval role of the approval node is served as by the department manager role of the corresponding department of the field；

2. as n=1, examining for the approval node is served as by the department manager role of the upper level department of the corresponding department of the field Criticize role；

3. as n=2, the approval node is served as by the department manager role of the upper upper level department of the corresponding department of the field Examine role；

4. as n=3, the approval node is served as by the department manager role of the Shang Shang upper levels department of the corresponding department of the field Examination ＆ approval role；

5. by that analogy；

6. when the other setting of department level exceedes the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination ＆ approval role of the approval node；

（3）Select the submission role of approval process as rank main body, rank is judged using submission role as criterion：

1. as n=0, role is submitted to serve as the examination ＆ approval role of the approval node by workflow approval process；

2. as n=1, the department manager role for submitting role department by workflow approval process serves as the approval node Examine role；If submitting the department manager role that role is its department, by the upper level portion for submitting role department The department manager role of door serves as the examination ＆ approval role of the approval node；

3. as n=2, the department manager role of the upper level department of role department is submitted to serve as by workflow approval process The examination ＆ approval role of the approval node；

4. as n=3, the department manager role of the upper upper level department of role department is submitted to carry on a shoulder pole by workflow approval process Appoint the examination ＆ approval role of the approval node；

5. as n=4, the department manager role of the Shang Shang upper levels department of role department is submitted by workflow approval process Serve as the examination ＆ approval role of the approval node；

6. by that analogy；

7. when the other setting of department level exceedes the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination ＆ approval role of the approval node.

Role's property field, department's property field in the list are that must fill out uniterming.

SS2：The department manager role of all departments is set；

SSS1:Select by rank mode examine the setting of role；

SSS3:Specific rating value n is filled in, n is >=0 positive integer：

6. by that analogy；

8. as n >=1, it is necessary to set " the corresponding role of the field is the department manager role of its department, and the department without During upper level department " approval node examined by designated groups；

5. by that analogy；

7. as n >=1, when primary department " the corresponding department of the field supreme " approval node is examined by designated groups, it is necessary to set Batch；

6. by that analogy；

8. " the department manager role that role is its department is submitted, and the department is without upper level portion, it is necessary to set as n >=1 During door " approval node examined by designated groups；

The designated groups examination ＆ approval include one kind in following three kinds of situations：

（1）Designated groups are by one or more examination ＆ approval role constructions；

（2）Designated groups are determined by department's rank, and the selected rank main body of the approval node can only be continued to use during selection rank main body, And rating value n may be only configured to 0；

（3）Designated groups are determined that rank main body can be selected independently by department's rank, and designated groups include one or more specified sections Point, the specified node of next stage, the rating value n until specifying node are must be provided with when the rating value n for specifying node is non-zero For 0 when, the designated groups of the approval node are provided with.

The beneficial effects of the invention are as follows：

（1）As long as having any one to examine role have submitted suggestions made after examination, the approval results of the approval node are determined that, the examination ＆ approval Node examination ＆ approval terminate, and the examination ＆ approval task of other examination ＆ approval roles is removed automatically, realizes efficient, quick examination ＆ approval.It is particularly suitable for use in many People is identical to the power of examination and approval of same examination ＆ approval task, and anyone can determine the situation of the node approval results.

Citing：In the examination ＆ approval of asking for leave submitted by sales force 3, sales manager 1, sales manager 2, personnel administrator 2 have The authority of the result of the examination ＆ approval is directly determined, the examination ＆ approval role in the approval node is by sales manager 1, sales manager 2, people victim Pipe 2 is constituted, wherein any one people, which provides suggestions made after examination, can determine the approval results of the node.Such as：Examine tasks synchronization point Dispensing sales manager 1, sales manager 2, personnel administrator 2, sales manager 2 see the examination ＆ approval task and have submitted examination ＆ approval meaning at first See for " passing through ", then the examination ＆ approval of the node terminate using " by " as approval results, it is no longer necessary to sales manager 1 and personnel administrator 2 provide suggestions made after examination, and the examination ＆ approval task of sales manager 1 and personnel administrator 2 are removed automatically.

（2）Setting the mode of examination ＆ approval role has：Assigned role, specific office, by rank set examination ＆ approval role：

The benefit of assigned role：

System workflow designer set examination ＆ approval role when need to only select corresponding role as examination ＆ approval role, without Specific user is selected, even if the user of the role association changes, it is not required that reset examination ＆ approval role, operation is just It is prompt, do not allow it is error-prone.

Citing：There are role A, role B in the administration department of company, if role A is the department manager role of administration department, is being asked When false workflow examination ＆ approval are set, role A need to be only selected as examination ＆ approval role, and without selecting the user of role A associations, even if The user of role A associations is changed into Li Si from Zhang San, it is not required that re-start the setting of examination ＆ approval role.

The benefit of specific office：

System workflow designer need to only select corresponding department when setting examination ＆ approval role, then the department manager angle of the department Color is examination ＆ approval role, even if the department manager role of the department changes, then the current department manager role of the department is careful Crowd role, it is not required that reset examination ＆ approval role, simple operation, do not allow it is error-prone.

Citing：It is required for administrative department to examine when the employee of company asks for leave, only needs to select in approval node in the present invention Administrative department is selected, the department manager role of administration department is then examination ＆ approval role, and the corresponding office worker of the department manager role passes through the portion Door supervisor role obtains examination ＆ approval task and examined according to the associated rights of the department manager role, specific a certain without selection Office worker carries out examination ＆ approval setting, simple and convenient；When the department manager role of administration department is changed into role B from role A, then by angle The corresponding office workers of color B are examined, it is not necessary to re-start the setting of examination ＆ approval role.

The benefit of examination ＆ approval role is set by rank：

By way of setting examination ＆ approval role by department's rank, system workflow designer only needs defeated when setting examination ＆ approval role Enter corresponding department's rank, multiple approval processes can be effectively integrated in an approval process, can effectively reduce circulation Condition and circulation circuit, reduce the workload of system workflow designer, improve system reliability.

（3）Traditional rank examination ＆ approval mode can only submit role to judge department level as criterion not using approval process, There is certain use as the other standard of department level is judged in the other roles that self-defined can not be related to using in list or department Limitation.

The application can self-defined role's property field, department's property field or submission to be related in list as needed Role is as the other standard of department level is judged, for example, when setting approval node, can select the signing role in contract list As rank main body, to sign role（Rather than be defaulted as submitting role simply）Department level is judged not as standard, with this determination It is that market department is responsible for role to examine role, uses more flexible, conveniently, highly versatile.

（4）System provides the examination ＆ approval mechanism of highest level department manager, it is to avoid highest level department manager occur can not The problem of approval process being completed by way of rank examination ＆ approval.

Citing：When the highest leader president of enterprise submits approval request, in rank examination ＆ approval, though president not on Level department, system sets designated groups to examine the approval request of president's submission.

Designated groups examination ＆ approval include one kind in following three kinds of situations：

1. designated groups are by one or more examination ＆ approval role constructions, for example, constituting designated groups, president by the member of multiple supervisions board Approval request examined by supervision board member；

2. designated groups are determined by department's rank, and the selected rank main body of the approval node can only be continued to use during selection rank main body, And rating value n may be only configured to 0；Such a situation is used to tackle the situation that the organization structure of the enterprise changes, for example, certain company Former highest level supervisor is general manager, and the board of directors is additionally arranged after changes in microstructure, and highest level supervisor is changed into president, examines It is that 0 examination ＆ approval role automatically becomes president to criticize rating value in node, rather than is fixed as general manager, it is to avoid examination ＆ approval angle occur The problem of color can not be adapted to changes in microstructure；

3. designated groups are determined by department's rank, and rank main body can be selected independently, and designated groups include one or more specified sections Point, the specified node of next stage, the rating value n until specifying node are must be provided with when the rating value n for specifying node is non-zero For 0 when, the designated groups of the approval node are provided with；Such a situation is applied to common department role and examines highest department manager The approval request submitted, for example, the financial executive of Finance Department can be audited in the contract approval request that president is submitted The information of making out an invoice being related to, will finally be confirmed by president.

（5）Approval node department rank n when setting examination ＆ approval role could be arranged to 0, i.e. selection submits role to make in itself For the examination ＆ approval role in approval node, before approval process terminates, it can be selected not by submitting role to carry out examination ＆ approval confirmation in itself It can return to and examine again after agreement, selection is agreed to enter next link, has had more submission role's proceedings for revision, it is to avoid examine As a result incorrect or approval results are reduced in system with submitting the problem of expection of role is not inconsistent and needs newly-built approval process Consumption, improves approval process efficiency and reliability.

Citing：Submit role to have submitted one 10000 yuan of reimbursement approval request, because submit role submitted in have Miss or other reasonses, checking and approving reimbursed sum after multistage examination ＆ approval is modified to 500 yuan, before approval process terminates, by carrying Angle of cut color is checked confirmation as examination ＆ approval role's progress and can pinpointed the problems, and selection can return to after disagreeing and examine again, and selection is same Meaning enters next link, without a newly-built approval process.

（6）The main body of review operation is role in workflow, and this role be independent individual rather than traditional group/ The role of class property, changes even if occurring employee/user（Such as transfer-position, leaving office）, or employee's power of examination and approval changes, Only employee need to be associated with to new role again, or specific aim adjusts role's power of examination and approval, without resetting/adjusting Flow, sets convenient, will not malfunction or omit, not interfere with the normal operation of enterprise, greatly improve the reliability of workflow. Using the role of post property as the examination ＆ approval authorisation body of examination ＆ approval link node, user determines which examination ＆ approval it has appoint by role Business, user carries out review operation by the authority of association role；Understand clear simple, each post number/station property Role be operative body least unit, for different demands of each role to examination ＆ approval, the application can be met very well.

（7）The application role is man-to-man relation to user, and same one role of period can only associate unique user, Advantage of this is that, all no longer need to be allocated the operation of authority when creating user every time, as long as associating a user to Role, and the permission modification of role wants much less than the user right change in traditional mechanism.Independent volume property（Post Number/station property）Role's number change it is small, although employee turnover is big, but the change of post number/station number is small（Even exist Do not change in certain period, i.e., role does not change）, the rights management of user will be so greatly simplified, system is reduced Expense.

（8）Simple to operate, the efficiency high of dynamic management, registration transfer-position etc., reliability is high：Registration/leaving office/transfer-position exists Application in approval process is simple, and the operating main body of initiation and the examination ＆ approval of workflow is role, when employee/user changes Shi Buyong resets approval process（User need to only cancel or association role：No longer hold a post the angle of the post number/station number The user of color just cancels the role association, the angle in the user-association of the role post number of the catcher tenure post number/station number Color, the then user for associating the role just obtains inter-related task and authority of the role in examination and approval workflow automatically, without right Examination and approval workflow is reset or the role in workflow is authorized again, drastically increases the effect of flow setting Rate, safety and reliability.

Citing：Because Zhang San user leaves office or the reason such as transfer-position, Zhang San no longer do " work of this role of purchasing agent 3 ", then Zhang San eliminates to be associated with the role；Other Li Si's catcher does that " work of this role of purchasing agent 3 ", then should by Li Si's association Role, then Li Si automatically obtained in approval process " the examination ＆ approval task and the power of examination and approval of this role of purchasing agent 3 ".

（9）Role definition is the properties such as group, work post, class by traditional rights management mechanism, and role is one-to-many to user Relation, during actual system use, often because needing to be adjusted the authority of user during operation, than Such as：When the change of employee's authority is handled, the authority of some employee of role association changes, and we can not be indivedual because of this The change of employee's authority and the authority for changing whole role, because the role is also associated with the unchanged employee of other authorities.Therefore In order to tackle this kind of situation, otherwise new role is created to meet the employee that the authority changes, or to the employee according to power Limit demand is directly authorized（Depart from role）.Both the above processing mode, in the case where role-security is more to role authorization not Long the time required to only, and easily make a mistake, user operates cumbersome and trouble, and also easily error causes to system user Loss.

But under the present processes, because role is an independent individual, then it can select to change role-security i.e. It can reach purpose.The present processes, although seem that workload can be increased in system initialization, but duplication etc. can be passed through Method, makes it create the efficiency of role or mandate higher than tradition using group as the role of property, because without considering that property is group Intercommunity of the role when meeting association user, application scheme can allow priority assignation clear, understand；Especially used in system After a period of time（User/role-security dynamic change）, this application scheme can increase substantially system and use for system user In rights management efficiency, make dynamic authorization simpler, be more convenient, it is apparent, clear, improve the efficiency of priority assignation and reliable Property.

（10）Role authorization method of the tradition by property of group easily malfunctions, and the application method significantly reduces mandate error Probability because the application method need to only be considered as the role of independent individual, and without considering to associate the group under conventional method Which intercommunity multiple users of property role have.Even if error is authorized, also only influence is associated with that user of the role, And tradition can then influence to be associated with all users of the role with the role of group property.Even if there is permission grant mistake, this Shen Modification method please is simple, the time is short, and tradition with role's repairing lookup error of group property when need consideration to be associated with the role All users authority intercommunity, trouble is not only changed in the case of more than function point, complicated, is very easy to error, and very Can only newly create role in the case of many could solve.

（11）Under role authorization method of the tradition using group as property, if the privilege feature point of role is relatively more, the time one It is long, it is difficult to remember the concrete power limit of role, it more difficult to remember the authority difference between the close role of authority, to associate new use Family, it is impossible to accurate to judge association how is selected.The role of the application method inherently has the property of post number/station number Matter, is selected very clear.

（12）During transfer-position, to by many authority distributions of transfer-position user other several users will be given to undertake, then handle Shi Bixu will be made a distinction by these authorities of transfer-position user, create role again respectively to associate other several users, such Operate not only complicated and time consumption, and also easily making a mistake.

The application method is then：Several roles by transfer-position user-association, in transfer-position, cancel user and former department first The association of interior role（These roles being cancelled can be associated to other users again）, then by user and new department Interior role is associated.It is simple to operate, it will not malfunction.

（13）, it is necessary to select a department when creating role, completed once the role creates, then department can not be replaced, Why not role can change department：

Reason 1：Because role's property of the application is equal to a station number/post number, the work in different station number/post number It is different to make content/authority, and the role of developer 1 of the role of salesman 1 and engineering department under such as sales department have been Complete two different station number/posies number, its authority is different；

Reason 2：If by the affiliated function of the role of salesman 1（Sales department）Technology department is replaced by, this role's of its sales force 1 Authority is constant, then there is a role for possessing sales department's authority in technology department, can so cause managerial confusion and security breaches.

（14）One role can be present in different approval nodes in same approval process, for each approval node Examination ＆ approval role can carry out examination ＆ approval role in independent priority assignation, different approval nodes to the checking of this form fields, Modification authority can be different.Advantage is illustrated：Certain role is Chengdu sales manager 3, and in contract approval workflow, it is present in Chengdu Sales contract is examined and Shanghai sales contract examines two approval nodes；For the sales contract in Chengdu, the role in examination ＆ approval It can check in whole fields such as customer name, contact person, contact method, product quantity, production unit cost, contract value of the contract Hold, and production unit cost, contract value can be changed；But examine Shanghai sales contract when can not check customer name, contact person, The sensitivity field contents such as contact method, can not change.So, can make free burial ground for the destitute by oneself sets role to be flowed in examination ＆ approval Authority in journey.

Brief description of the drawings

Fig. 1 is the direct schematic diagram authorized to user of system in background technology；

The schematic diagram that Fig. 2 is authorized for system in background technology to group/class property role；

Fig. 3 is system of users directly mandate and the schematic diagram being combined to group/class property role authorization in background technology；

Fig. 4 is system organization structure dendrogram in embodiment；

Fig. 5 is the schematic diagram that present system is authorized by independent individual property role to user；

Fig. 6 is workflow approval process schematic diagram of the present invention；

Fig. 7 is user of the present invention-role authorization method flow diagram.

Embodiment

Technical scheme is described in further detail below in conjunction with the accompanying drawings, but protection scope of the present invention is not limited to It is as described below.

【Embodiment 1】The efficient measures and procedures for the examination and approval of workflow approval node, including a setting approval node examine the step of role A step of rapid and examination ＆ approval role efficiently examines：

（3）By rank, examination ＆ approval role is set；

Setting the mode of examination ＆ approval role has：Assigned role, specific office, by rank set examination ＆ approval role：

The benefit of assigned role：

The benefit of specific office：

The benefit of examination ＆ approval role is set by rank：

Particularly, the step of the application examination ＆ approval role efficiently examines：One approval node includes one or more examination ＆ approval angles Color, one expression of selection is examined by this role, selects multiple expressions to be examined all by any one in this multiple role Can be so that 5 kinds of examination ＆ approval character types are all optional.

Using the suggestions made after examination of the examination ＆ approval role of first submission suggestions made after examination as the approval results of the approval node, as long as There is any one to examine role and submit suggestions made after examination, approval node examination ＆ approval terminate.

As long as that is, having any one to examine role have submitted suggestions made after examination, having determined that the examination ＆ approval of the approval node As a result, approval node examination ＆ approval terminate, and the examination ＆ approval task of other examination ＆ approval roles is removed automatically, realizes efficient, quick examination ＆ approval.It is special Not Shi Yongyu many people it is identical to the power of examination and approval of same examination ＆ approval task, the suggestions made after examination that anyone provides can determine this The situation of node approval results.

【Embodiment 2】The efficient measures and procedures for the examination and approval of workflow approval node, in addition to a setting examination ＆ approval role is to approval process The step of form fields content being related to checks authority, the different examination ＆ approval roles of same approval node are looked into form fields content See that authority must be identical.When an approval node have it is multiple examination ＆ approval role when, set field check and modification authority is also pin The unified rights that all examination ＆ approval roles are set, rather than authority is set for each examination ＆ approval role.Because each examination ＆ approval The power of examination and approval of role is all identical, and any one examination ＆ approval role can determine the approval results of node, it is therefore necessary to ensure each examine The form fields content that crowd role is seen all is identical.

Examination ＆ approval role's acquiescence can check whole fields of list, and acquiescence forbids changing whole fields of list；User can be with Setting forbids examination ＆ approval role to check that some fields, or mandate can change some fields in current procedures.

【Embodiment 3】The efficient measures and procedures for the examination and approval of workflow approval node, in addition to a setting approval node next stage circulation The step of node, next stage circulation node includes two kinds：

【Embodiment 4】By rank, the step of the step of examining role includes a setting system organization structure and one are set The step of examination ＆ approval role is set by rank：

SS1：The department included in system organization structure and role are created, and interdepartmental hierarchical relationship, such as Fig. 4 are set It is shown, department A one-levels higher than department B, department A two-stages ... higher than department C；

SS2：The department manager role of all departments is set；

SSS1:Select by rank mode examine the setting of role；

SSS2:Select carrying for role's property field in approval process correspondence list, department's property field or the approval process One in angle of cut color, it is used as rank main body；When selecting rank main body, one and can only be selected；

Can there are multiple role's properties, the field of department's property on list（Role is such as signed, is responsible for role, signing department, is responsible for Department etc.）, but a flow only one of which flow submits role；

SSS3:Specific rating value n is filled in, n is >=0 positive integer：

（1）Role's property field in approval process correspondence list is selected as rank main body, using the corresponding role of the field as Criterion judges rank, for example, the submission role of flow is d2, but role's property field in the list of selection is signing angle Color, signing role is role d3：

1. as n=0, the examination ＆ approval role of the approval node is served as by selected role d3；

2. as n=1, the examination ＆ approval angle of the approval node is served as by selected role d3 department D department manager role d1 Color；If selected role is the department manager role of its department, by the upper level department of selected role department Department manager role serve as the examination ＆ approval role of the approval node；

3. as n=2, the examination ＆ approval are served as by selected role d3 department D upper level department C department manager role c1 The examination ＆ approval role of node；

4. as n=3, this is served as by selected role d3 department D upper upper level department B department manager role b1 and examined Criticize the examination ＆ approval role of node；

5. as n=4, this is served as by selected role d3 department D Shang Shang upper levels department A department manager role a1 The examination ＆ approval role of approval node；

6. by that analogy；

7. when the other setting of department level exceedes the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination ＆ approval role of the approval node；For example：For role d3, department's rank highest should be 4, work as department When rank is set to 6, the examination ＆ approval role of the approval node is served as by highest level department A department manager role a1.

（2）Department's property field in approval process correspondence list is selected as rank main body, using the selected department as Criterion judges rank, for example, department's property field in the list of selection is signing department, the signing department is department D：

1. as n=0, the examination ＆ approval role of the approval node is served as by the department manager role d1 for selecting department D；

2. as n=1, the examination ＆ approval angle of the approval node is served as by selecting department D upper level department C department manager role c1 Color；

3. as n=2, the examination ＆ approval of the approval node are served as by selecting department D upper upper level department B department manager role b1 Role；

4. as n=3, examining for the approval node is served as by selecting department D Shang Shang upper levels department A department manager role a1 Criticize role；

5. by that analogy；

6. when the other setting of department level exceedes the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination ＆ approval role of the approval node；For example：For department D, department's rank highest should be 3, work as department When rank is set to 6, the examination ＆ approval role of the approval node is served as by highest level department A department manager role a1.

（3）Select the submission role of approval process as rank main body, rank judged using submission role as criterion, If for example, submit role be role d2,：

1. as n=0, role d2 is submitted to serve as the examination ＆ approval role of the approval node by workflow approval process；

Approval node department rank n when setting examination ＆ approval role could be arranged to 0, i.e. selection submits role d2 in itself as examination ＆ approval Examination ＆ approval role in node, can be by submitting role d2 to carry out examination ＆ approval confirmation in itself before approval process terminates, and selection is disagreed After can return to and examine again, selection is agreed to enter next link, has had more submission role's proceedings for revision, it is to avoid approval results occur Incorrect or approval results reduce system in-fighting with submitting the problem of expection of role is not inconsistent and needs newly-built approval process, Improve approval process efficiency and reliability.

Citing：Role d2 is submitted to have submitted one 10000 yuan of reimbursement approval request, because submitting in role d2 submitted Have and miss or other reasonses, checking and approving reimbursed sum after multistage examination ＆ approval is modified to 500 yuan, before approval process terminates, It can be pinpointed the problems by submitting role d2 to check confirmation as examination ＆ approval role's progress, selection can return to after disagreeing and examine again, Selection is agreed to enter next link, without a newly-built approval process.

2. as n=1, submit role d2 department D department manager role d1 to serve as this by workflow approval process and examine Criticize the examination ＆ approval role of node；（If it is d1 to submit role, he is its department D department manager role, then by submitting role institute The examination ＆ approval role of the approval node is served as in department D upper level department C department manager role c1）

3. as n=2, role d2 department D upper level department C department manager role is submitted by workflow approval process C1 serves as the examination ＆ approval role of the approval node；

4. as n=3, role d2 department D upper upper level department B department manager angle is submitted by workflow approval process Color b1 serves as the examination ＆ approval role of the approval node；

5. as n=4, role d2 department D Shang Shang upper levels department A department manager is submitted by workflow approval process Role a1 serves as the examination ＆ approval role of the approval node；

6. by that analogy；

7. when the other setting of department level exceedes the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination ＆ approval role of the approval node.For example：For role d2, department's rank highest should be 4, work as department When rank is set to 6, the examination ＆ approval role of the approval node is served as by highest level department A department manager role a1.

Application scheme is on the basis of advantage of the former base in submission role's level authority mode, also another advantage：Can be with Select there is the newly-increased role of contract signing role, contract, contract to be responsible for role on role of different nature, such as contract list, this is examined Batch node originally should not be to submit role's decision level, and should be with contract signing Role judgement rank.Such as, list is submitted an expense account First approval node will be to submit the higher level of role, and an approval node in addition will be examined with the higher level for submitting an expense account role（Report Sell role and submit role to be probably different roles）.

Traditional rank examination ＆ approval mode can only submit role to judge that department level is other as criterion using approval process, it is impossible to There is certain use limitation as the other standard of department level is judged in the self-defined other roles being related to using in list or department Property.

The application can select the signing role in contract list as needed as rank master when setting approval node Body, to sign role（Rather than be defaulted as submitting role simply）As standard judge department level not, using this determination examine role as Market department is responsible for role, uses more flexible, conveniently, highly versatile.

【Embodiment 5】By rank, the step of the step of examining role includes a setting system organization structure and one are set The step of examination ＆ approval role is set by rank：

SS2：The department manager role of all departments is set；

SSS1:Select by rank mode examine the setting of role；

SSS3:Specific rating value n is filled in, n is >=0 positive integer：

（1）Role's property field in approval process correspondence list is selected as rank main body, using the selected role as judgement Standard judges rank, for example, the submission role of flow is d2, but role's property field in the list of selection is signs role, Signing role is role d3：

6. by that analogy；

8. as n >=1, it is necessary to set that " selected role is the department manager role of its department, and the department is supreme During primary department " approval node examined by designated groups.

5. by that analogy；

7. as n >=1, when primary department " the selected department supreme " approval node is examined by designated groups, it is necessary to set.

6. by that analogy；

8. " the department manager role that role is its department, and the department supreme one are submitted, it is necessary to set as n >=1 During level department " approval node examined by designated groups；

System provides the examination ＆ approval mechanism of highest level department manager, it is to avoid highest level department manager occur can not pass through The problem of rank examination ＆ approval mode completes approval process.

【Embodiment 6】As shown in figure 5, described role is independent individual, rather than group/class, same one role of period It can only associate unique user, and the one or more roles of user-association.

Role's layer：Flow is initiated in workflow and the operating main body of examination ＆ approval is role, and each role is independent individual, rather than Group/class, same one role of period can only associate unique user, and the one or more roles of user-association；The angle The composition of color is：Numbered in the name+hilllock of post；

As shown in fig. 6, described approval process includes a start node, at least one approval node, an end section Point：

Start node：Role's initiation/application/submission workflow is initiated as start node, or by first approval node to make For start node；

System determines approval process according to the list submitted of role is initiated, for need workflow form design one or Multiple approval processes, but a role can only select some approval process under the list（Same role can be only present in In one of flow of same list）；

Citing:Procurement contract list has two kinds of flows, respectively P1 flows and P2 flows, if in the start node of P1 flows In have selected role A, then P2 flows start node cannot reselection role A, the now newly-increased buying of role A closes Same examination ＆ approval, are submitted when examining automatically into P1 flows.

End node：Approval process circulation terminates to approval node examination ＆ approval during this node, and the end node is without examining Batch operation；Or using last approval node as end node, the end node needs to carry out review operation.

As shown in fig. 7, the structure of described user-role-authority Three-tier Architecture Model comprises the following steps：

Below to being analyzed by independent individual property role the advantage that user's progress authorization possesses：

User can only be defined the competence by it with associating for role, if to change the authority of user, be gathered around by adjusting role Some authorities are to reach that change is associated with the purpose of the authority of the user of the role.User is not authorized directly, but passes through it Associated role authorizes to user, and once after user-association role, the user just has all operations of the role Authority.

Role is one-to-one to the relation of user（When the role is with a user-association, other users can not then be associated again The role；If the role is not by user-association, it can be selected to associate by other users）.User is a pair to the relation of role It is many（One user can associate multiple roles simultaneously）.

The definition of role：Role is without the property such as group/class/classification/post/position/work post, but non-set Property, role has uniqueness, and role is self-existent independent individual；Equivalent to post number in enterprises and institutions apply （The non-post in post number herein a, post may have multiple employees simultaneously, and one post number of same period can only correspond to one Individual employee）.

Citing：Following role can be created in some Corporation system：General manager, vice general manager 1, vice general manager 2, Beijing sale One manager, Beijing sell two managers, Beijing sell three managers, Shanghai sales engineer 1, Shanghai sales engineer 2, on Extra large sales engineer 3, Shanghai sales engineer 4, Shanghai sales engineer 5 ...

User and the incidence relation of role：The said firm vice general manager 2 if the said firm employee Zhang San holds a post, while Beijing sale of holding a post One manager, the then role that Zhang San's needs are associated is that a manager is sold in vice general manager 2 and Beijing, and Zhang San has the two angles The authority of color.

The concept of traditional role is group/class/post/position/work post property, and a role can correspond to multiple users.And The concept of the application " role " is also analogous to the role in movie and television play equivalent to post number/station number：One role is with for the moment Section（Childhood, juvenile, middle age ...）It can only be played by a performer, and a performer may divide decorations polygonal.

Create role after, can create user during association role, can also user create after the completion of It is associated at any time.The incidence relation with role can be released after user-association role at any time, can also be set up at any time and other The incidence relation of role.

The composition of the role is：Numbered in the name+hilllock of post.For example：Workshop Production workman 1, Workshop Production workman 2, car Between direct labor 3 ... role be independent individual, equivalent to post number, the concept of station number, different from traditional rights management body The concept of role is group/class property of post/position/work post etc. in role in system, traditional system.

【Embodiment 7】Citing employee Zhang San enters after certain company below, and the relation between employee, user and role is：

1st, new registration：The new registration of employee, is directly the user（Employee）The role of corresponding post number/station number is selected to be closed Connection, example：Zhang San's registration company（Company is that Zhang San is assigned with a Zhang San user）, action is, in sale one, to bear Blame the sale of Beijing Area's refrigerator product（Corresponding role is sale one subordinate " this role of sales engineer 5 "）, then open Three users directly select " this role association of sales engineer 5 ".

2nd, position is increased：Zhang San worked after a period of time, and company also arranges Zhang San to be responsible for the pin of Beijing Area's tv product Sell（Corresponding role is sale one subordinate " this role of sales engineer 8 "）And hold a concurrent post portion supervisor after sale（Correspondence portion after sale It is responsible for 1 this role）, then Zhang San user be further added by association sale one subordinate " sales engineer 8 " and after sale subordinate " after sale Portion is responsible for 1 " the two roles, and now, Zhang San employee is associated with three roles, respectively sells the " sales engineer of a subordinate 5 ", " sales engineer 8 " and after sale subordinate " after sale portion supervisor 1 ", Zhang San user then has the authority of these three roles.

3rd, position is reduced：A period of time has been spent again, and company determines to allow Zhang San's tenure portion after sale to handle（Correspondence subordinate after sale " portion manager after sale " this role）, and no longer hold a concurrent post other work.Then Zhang San's user-association subordinate after sale " portion manager after sale " this Individual role, while cancelling three roles associated before this（Sell " sales engineer 5 ", " sales engineer 8 " and selling for a subordinate Under rear portion " after sale portion supervisor 1 "）, now, Zhang San user only possesses the authority of subordinate " portion manager after sale " this role after sale.

4th, the adjustment of role-security（The adjustment of the authority possessed for role in itself）：As company determines increase portion after sale The authority of manager, then need to only increase the mandate that this role is handled to portion after sale, then Zhang San user is because portion is handled after sale The authority of this role is added, and the authority of Zhang San user is also increased.

5th, leave office：After 1 year, Zhang San leaves office, then cancels Zhang San user and subordinate " portion manager after sale " this role after sale Association.

Citing：Company is in dynamic manage, and registration, the leaving office of office worker often persistently occur, but post number/station Number change it is considerably less (or even not changing over a period to come).

Classical authorization method：In the case of more than systemic-function point, authorized with the role of traditional group/class property, Not only authorize workload big, it is numerous and diverse, and error-prone, or even malfunctioned and be all not easy to find in a short time, it is easily right System user causes damage.

The application authorization method：The application is that the role of post number/station property is authorized, user-association role And define the competence, then to the control of user right, realized simply by the incidence relation of simple user-role, allow authority Control becomes simple, easy to operate, clear, and mandate efficiency is greatly improved and reliability is authorized.

Described above is only the preferred embodiment of the present invention, it should be understood that the present invention is not limited to described herein Form, is not to be taken as the exclusion to other embodiment, and available for various other combinations, modification and environment, and can be at this In the text contemplated scope, it is modified by the technology or knowledge of above-mentioned teaching or association area.And those skilled in the art are entered Capable change and change does not depart from the spirit and scope of the present invention, then all should appended claims of the present invention protection domain It is interior.

Claims

1. the efficient measures and procedures for the examination and approval of workflow approval node, it is characterised in that the step that approval node examines role is set including one A step of rapid and examination ＆ approval role efficiently examines：

（3）By rank, examination ＆ approval role is set；

2. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 1, it is characterised in that：Also include a setting The step of form fields content that examination ＆ approval role is related to approval process checks authority, the different examination ＆ approval roles of same approval node It is identical to the checking of form fields content/modification authority.

3. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 1, it is characterised in that：Also include a setting The step of approval node next stage circulation node, next stage circulation node includes two kinds：

4. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 1, it is characterised in that：Described role is only Vertical individual, rather than group/class, same one role of period can only associate unique user, and a user-association one or many Individual role.

5. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 4, it is characterised in that：Described approval process Based on the Three-tier Architecture Model of user-role-authority, wherein：

6. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 5, it is characterised in that：Described user-angle The structure of color-authority Three-tier Architecture Model comprises the following steps：

7. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 1, it is characterised in that：Described approval process Including a start node, at least one approval node, an end node：

Start node：Approval process starts；

End node：Approval process terminates.

8. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 1, it is characterised in that：It is described to be set by rank The step of the step of examining role sets system organization structure including one and a step by department rank setting examination ＆ approval role Suddenly：

SS2：The department manager role of all departments is set；

SSS1:Select by rank mode examine the setting of role；

SSS3:Specific rating value n is filled in, n is >=0 positive integer：

6. by that analogy；

5. by that analogy；

6. by that analogy；

9. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 8, it is characterised in that：Angle in the list Color property field, department's property field are that must fill out uniterming.

10. the efficient measures and procedures for the examination and approval of workflow approval node according to claim 1, it is characterised in that：It is described to be set by rank Put the step of the step of examining role sets system organization structure including one and one sets examination ＆ approval role's by department's rank Step：

SS2：The department manager role of all departments is set；

SSS1:Select by rank mode examine the setting of role；

SSS3:Specific rating value n is filled in, n is >=0 positive integer：

6. by that analogy；

5. by that analogy；

6. by that analogy；