EA044698B1 - METHOD OF SETTING THE TIME PERIOD OF WORKING WITH THE MAILBOX CLIENT AND IM MESSAGE CLIENT IN THE SYSTEM - Google Patents

Description

Field of technology

The present invention relates to a method for setting a period of time for which work rights are granted in administrative software systems such as ERP, and in particular, it relates to a method for setting a period of time for which work with mailbox content and instant content is allowed. messages in the system.

BACKGROUND OF THE INVENTION

In traditional administrative software systems such as ERP, employee rights are typically assigned based on the employee's job titles. Once rights are granted to a specific mailbox or instant messaging account, an employee has the right to view both all historical data/information and all current data/information in the specified mailbox or instant messaging account. , however, in some cases, this can easily lead to leakage of company information. For example, a company hires a new employee for a position, but it is not desirable for that employee to view historical data/information in the mailbox account or instant messaging account assigned to him (or the company only wants the employee to be able to view the data /information in a mailbox account or instant messaging account only for a certain period of time, which cannot be provided by traditional methods of entitlement); Once an employee is granted rights to a mailbox or instant messaging account, the employee can view historical data/information in the mailbox or instant messaging account without the company being able to take effective restrictive measures. , which leads to a leak of company data. Additionally, for example, if a specific employee is temporarily assigned to review a specific mailbox or instant messaging account for a specific period of time associated with another position, then that employee must be granted View rights to that mailbox or instant messaging account. for instant messaging. Once the rights are granted, that employee can view all the data/information in that mailbox or instant messaging account, which results in leakage of other data other than the data that needs to be viewed in that mailbox or messaging account instant messages. It follows that in the current methods of granting viewing rights to mailbox accounts and instant messaging accounts, in some cases it is not possible to effectively restrict access rights, which is not conducive to maintaining the confidentiality of company information and is easily harmful to the company.

When an employee/user joins a position or is transferred to another position, a mailbox account and an instant messaging account must be associated with the employee/user each time (manually associating a mailbox account with an employee/user has obvious disadvantages: as a result re-association over a long period of time, it is easy for a situation to arise where, after associating a mailbox with an employee/user, there is a significant deviation in the scope of responsibilities that correspond to the employee/user and the mailbox, and even errors occur.However, reuse or even use for a relatively long time or a very long time leads to great inconvenience and problems for subsequent work, as well as significant losses; similarly, manually linking an instant messaging account with an employee/user also has such disadvantages), so the workload is large (and the linking may be erroneous); Moreover, associating a mailbox account and/or instant messaging account with an employee causes some delay, which negatively affects the smooth execution of the related work. For example, when Employee Jia was transferred from the position of Production Manager to the position of Sales Manager, if after the transfer of Employee Jia's current mailbox to the person who took over his position, no new mailbox was associated with Employee Jia, then in this case, Employee Jia does not have a mailbox. box and he cannot perform the corresponding work; If Employee Jia's current mailbox has not been handed over to the person who took over his position, then that person will not be able to see the relevant information in the letters from the past period, which will negatively affect the job performance. In another example, Employee Jia held the positions of Production Manager and After-Sales Service Manager and is no longer a Production Manager (Employee Jia's mailbox cannot be transferred to the person who took over his position because it also contains the After-Sales Manager's work emails); If the person who took over his position as production manager is given a new mailbox, then this must also be communicated to the appropriate persons (for example, equipment maintenance personnel, third-party manufacturers, etc.), which not only increases the working time

- 1 044698 load, but also represents additional work for the relevant personnel; Moreover, Employee Jia can also view new production-related emails (for example, the sender of the email does not know that Employee Jia is not a production manager). In another example, when Employee Jia was transferred from the position of Production Manager to the position of Manager of After-Sales Service Department, if after the transfer of Employee Jia's current mailbox to the person who took over his position, Employee Jia was not provided with a new mailbox, then during this period, Employee Jia with cannot view emails related to sales work to begin with, which is not conducive to performing normal work (traditional instant messaging account entitlement management also has the same problem).

Using the time to associate a mailbox account with its currently associated mailbox subscriber has the following advantages: If a business wants to establish operating rights for an operator using the association time as the initial point in time, for example, if a company needs, due to management requirements, After the person currently associated with the target mailbox account was associated with the corresponding mailbox, the currently associated person could only work with the contents of the mailbox for the time period before the association, or for the time period after the association, or for the time period from binding time before the specified time, etc.; or that some authorized controllers thus also work with the contents of the target mailbox account that is associated with subordinates, but the association time is dynamic (many factors, such as the assignment of employees to a position, their transfer and their departure from position, will increase association time uncertainty, so the time of association of the target mailbox account with the person currently associated with it is uncertain) and, accordingly, cannot be established using traditional methods; however, the method presented in this application can solve such a problem. Applying the time to associate a mailbox subscriber with the mailbox account to which he is currently associated has benefits similar to those noted above.

Using the association time of an IM account with its currently associated subject with IM access has the following benefits: If a business wants to establish work rights for an operator using the association time as the initial point in time, for example, if the company Control requirements require that once the person currently associated with the target IM account is associated with the corresponding IM account, the currently associated person can only interact with the content in the IM account for the period of time before the binding, or for the period of time after the binding, or for the period of time from the time of binding to the specified time, etc.; or that some authorized controllers thus also work with the content in the target instant messaging account that is associated with subordinates, but the timing of the association is dynamic (many factors, such as the appointment of employees to a position, their transfer and their leaving the position , will increase the uncertainty of the linking time, so the linking time of the target instant messaging account with its currently associated person is uncertain) and accordingly cannot be established using traditional methods; however, the method presented in this document can solve such a problem. Applying the time to associate an IM access subject with the IM account they are currently associated with has benefits similar to those noted above.

In addition, the fact that a mailbox account or an instant messaging account is used by different people at different times leads to the disclosure of information; for example, mailbox A, which contains a lot of confidential research information, was first provided to employee Jia from the research department; After Employee Jia resigned, Mailbox A was transferred to Employee Y from the sales department, in which case Employee Y can view the confidential research information that was stored in Mailbox A from the very beginning. Moreover, the sender of the information (such as the sender of the information in the letter and the sender of the information in the message) does not want to send information to a mailbox account and an instant messaging account whose user is constantly changing, since this easily leads to the disclosure of information. For example, an employee was late, but his manager did not deduct from his salary due to the employee’s good performance and sent the employee a letter with an explanation; if the mailbox of such an employee is used by other persons in the future, then other persons will learn about this letter, which will not contribute to the management of the company.

- 2 044698

Brief description of the invention Technical problem

The object of the present invention is to overcome the disadvantages of the prior art and to provide methods for setting the period of time for which work with the contents of a mailbox is allowed, and the period of time for which work with the contents of instant messages is allowed, while setting the time period for which the access right is granted ensures that work is performed on the contents in the mailbox account or instant messaging account only for the specified period of time for which the access right is granted, thereby reducing the possibility of disclosure of information in information in your mailbox or instant messaging account and improves the security of the information in your mailbox or instant messaging account.

Technical solutions

The problem of the present invention is solved by the following technical solutions: a method for setting the period of time during which work with the contents of a mailbox is allowed in the system, including selecting a role, user or employee as a mailbox subscriber; establishing for each mailbox subscriber a period of time for which access rights are granted, wherein said period of time for which access rights are granted comprises one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time, to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time; the mailbox subscriber's performance of content for the period of time for which the access right is granted in the mailbox account to which the mailbox subscriber is associated.

Preferably, a role is a single entity rather than a group/class, and one role can only be associated with one user while one user is associated with one or more roles at a time.

A method for setting a period of time for which work with the contents of a mailbox is permitted in a system includes setting a period of time for which the access right is granted for a mailbox account, wherein the specified time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; All roles, users, and employees using the mailbox account interact with content in the mailbox account for the period of time for which the mailbox account access right is granted.

The method for setting the period of time for which work with the contents of a mailbox is allowed in the system includes:

(1) selecting a role, user, or employee as a controller;

(2) setting one or more monitored for each controller, with the monitored being a role, user, or employee;

(3) setting each controller a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from a point in time determined by counting down a fixed period time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time;

(4) each controller's performance on the content in the mailbox account used by the respective controller for the period of time for which the controller is granted access rights.

Steps (1) to (4) are performed sequentially, or step (1), step (3), step (2) and step (4) are performed sequentially.

The method of setting the period of time for which work with the contents of a mailbox is allowed in the system includes selecting a role, user or employee as controlled; setting for each controlled person a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time, up to the current moment

- 3 044698 time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time;

the execution by all controllers to which each supervisee corresponds to the content in the mailbox account used by the supervisee for the period of time for which the supervisee is granted access rights.

The method for setting the period of time for which work with the contents of a mailbox is allowed in the system includes: selecting a role, user or employee as a mailbox subscriber; assigning to each mailbox subscriber a period of time for which the access right is granted, wherein the time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time of association of the mailbox subscriber with the mailbox account with which he is currently associated, up to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation; and a period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time; the mailbox subscriber's performance of content for a period of time for which the mailbox subscriber is granted access rights in the mailbox account that the mailbox subscriber uses.

A method for setting a period of time for which work with the contents of a mailbox is permitted in a system includes: setting for a mailbox account a period of time for which the access right is granted, wherein the time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time, determined by counting back a fixed period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated, to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated until the time the system is implemented; the period of time from the time of linking a mailbox account with the mailbox subscriber with which it is currently associated until the time of system implementation; and a period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated until the current point in time; All roles, users, and employees using the mailbox account interact with content in the mailbox account for the period of time for which the mailbox account access right is granted.

The method for setting the period of time for which work with the contents of a mailbox is allowed in the system includes:

(1) selecting a role, user, or employee as a controller;

(2) setting one or more monitored for each controller, with the monitored being a role, user, or employee;

(3) setting each controller a period of time in respect of which the access right is granted, wherein the period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time the mailbox subscriber was associated with the mailbox account with which he is currently associated to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time the system is implemented; and a period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time;

(4) each controller's performance on the content in the mailbox account used by the respective controller for the period of time for which the controller is granted access rights.

Steps (1) to (4) are performed sequentially, or step (1), step (3), step (2) and step (4) are performed sequentially.

The method of setting the period of time for which work with the contents of a mailbox is allowed in the system includes selecting a role, user or employee as controlled; setting each controlled person a period of time in respect of which access rights are granted, when

- 4 044698 this period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time the mailbox subscriber was associated with the mailbox account with which it is connected at the current moment, up to the current moment in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time the system is implemented; and a period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time; the execution by all controllers to which each supervisee corresponds to the content in the mailbox account used by the supervisee for the period of time for which the supervisee is granted access rights.

A method for setting a period of time for which instant messaging content is permitted to be accessed in a system includes selecting a role, user, or employee as the subject with access to instant messages; specifying to each subject with access to instant messages a period of time for which the access right is granted, wherein said period of time for which the access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; the IM entity's performance of content on an instant messaging account used by the IM entity for the period of time for which the IM entity is granted access rights.

Preferably, a role is a single entity rather than a group/class, and one role can only be associated with one user while one user is associated with one or more roles at a time.

A method for setting a period of time for which instant messaging content is permitted to be accessed in a system includes setting a period of time for which the access right is granted for an instant messaging account, wherein the specified time period for which the access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time; All roles, users, and employees using the instant messaging account interact with content in the instant messaging account for the period of time for which the access right for the instant messaging account is granted.

The method for setting the period of time for which work with the contents of instant messages is allowed in the system includes:

(1) selecting a role, user, or employee as a controller;

(2) setting one or more monitors for each controller, where the monitor is a role, user, or employee;

(3) setting each controller a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from a point in time determined by counting down a fixed period time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time;

(4) each controller's performance of content on the instant messaging account used by the respective controller for the period of time for which the controller is granted access rights.

Steps (1) to (4) are performed sequentially, or step (1), step (3), step (2) and step (4) are performed sequentially.

The method of setting the period of time for which work with the contents of instant messages is allowed in the system includes selecting a role, user or employee as controlled; setting each controlled person a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from the point in time determined

- 5 044698 by counting down a fixed period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; the execution by all controllers to which each supervisee corresponds to the content in the instant messaging account used by the supervisee for the period of time for which the supervisee is granted access rights.

A method for setting a period of time for which instant messaging content is permitted to be accessed in a system includes selecting a role, user, or employee as the subject with access to instant messages; setting each subject with access to instant messages a period of time for which the access right is granted, wherein the time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed the length of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time the system is implemented; and a period of time from the time the instant messaging access subject is associated with the instant messaging account with which he is currently associated to the current point in time; the execution by the IM access subject of content for a period of time for which the IM access subject is granted access rights, in the instant messaging account used by the IM access subject.

A method for setting a period of time for which instant messaging content is allowed to be accessed in a system includes: setting an instant messaging account for a period of time for which the access right is granted, wherein the time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time the instant messaging account is associated with the instant messaging entity with which it is currently associated to the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the instant messaging account is associated with the instant messaging entity with which it is currently associated until the time the system is implemented; the period of time from the time the instant messaging account is associated with the subject with access to instant messages with which it is currently associated until the time of implementation of the system and the period of time from the time the account is associated with instant messaging with the subject with access to instant messages , with which it is connected at the current moment, up to the current point in time; All roles, users, and employees using the instant messaging account interact with content in the instant messaging account for the period of time for which the access right for the instant messaging account is granted.

The method for setting the period of time for which work with the contents of instant messages is allowed in the system includes:

(1) selecting a role, user, or employee as a controller;

(2) setting one or more monitors for each controller, where the monitor is a role, user, or employee;

(3) setting each controller a period of time in respect of which the access right is granted, wherein the period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated to the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; and the period of time from the time the subject with access to instant messages is associated with the instant messaging account , with which it is currently associated, up to the current point in time;

(4) each controller performs work with the content in the account for instantaneous exchange

- 6 044698 messages used by the corresponding controlled person, for the period of time in respect of which the controller is granted access rights.

Steps (1) to (4) are performed sequentially, or step (1), step (3), step (2) and step (4) are performed sequentially.

The method for setting the period of time for which work with the contents of instant messages is allowed in the system includes: selecting a role, user or employee as controlled; specifying to each controllable a period of time in respect of which the access right is granted, wherein the time period in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the binding time a subject with access to instant messages with an instant messaging account with which he is currently associated, up to the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; and the period of time from the time the subject with access to instant messages is associated with the instant messaging account , with which it is currently associated, up to the current point in time; the execution by all controllers to which each supervisee corresponds to the content in the instant messaging account used by the supervisee for the period of time for which the supervisee is granted access rights.

Association time relating to the time of association of a mailbox account with the mailbox subscriber with which it is currently associated, the time of association of a mailbox subscriber with the mailbox account with which it is currently associated, the time of association of an instant messaging account with the subject with instant messaging access with which it is currently associated and the time of association of the subject with access with instant messaging with the instant messaging account with which it is currently associated refers to the time of the last association; for example, if there is more than one association time regarding the time an IM account is associated with the IM access subject it is currently associated with (it is possible that the IM account has previously been associated with that subject with access to instant messages), then only the last pairing time is automatically used.

Positive effects

The present invention has the following beneficial effects.

1. According to the present invention, when an employee/user uses an instant messaging account/mailbox account (an instant messaging account/mailbox account to which the employee is associated; or an instant messaging account/mailbox account mailbox to which the user is associated; or the instant messaging account/mailbox account to which the user is associated; or the instant messaging account/mailbox account to which the role is associated. the user that the employee is associated with; or the IM account/mailbox account that the role the user is associated with is associated with), working with content in the IM account/mailbox account that the employee is using /user will occur based on the period of time for which the access right is granted, which is set for him. There is no need to set a time period for which the access right to operate on the mailbox/IM account used by the employee/user is granted. If a new IM/Mailbox account needs to be used when transferring an employee/user, then there is also no need to set a time period for which access rights regarding the contents of the IM/Mailbox account are granted (more In addition, there is also no need to re-set the period of time for which the access right to work on a mailbox/IM account is granted when the employee/user is not transferred from the position and a new IM account is used. mailbox account or a new instant messaging account/mailbox account has been added).

2. According to the present invention, when an employee/user uses an instant messaging account/mailbox account (an instant messaging account/mailbox account that the employee is associated with; or an account

- 7 044698 instant messaging record/mailbox account to which the user the employee corresponds to is associated; or the instant messaging account/mailbox account that the user is associated with; or the instant messaging account/mailbox account that is associated with the role that the user the employee is associated with is associated with; or the instant messaging account/mailbox account that the role the user is associated with is associated with), the employee interacts with content in the instant messaging account/mailbox account that the employee is using, based on the time period, in respect of which they are granted the access right established for the user to whom the employee corresponds; or the employee works with content in the instant messaging account/mailbox account that the employee uses based on the time period for which the access right is granted defined for the role associated with the user to which the employee corresponds; or the user interacts with the content in the instant messaging account/mailbox account that the user uses based on the time period for which the access right is granted specified for the employee to whom the user corresponds; or the user interacts with content in the instant messaging account/mailbox account that the user uses based on the time period for which the access right is granted defined for the role that is associated with the user. The mailbox/IM account used by the employee/user does not need to set a time period for which the access right is granted to operate. If a new IM/Mailbox account needs to be used when transferring an employee/user, then there is also no need to set a time period for which access rights regarding the contents of the IM/Mailbox account are granted (more In addition, there is also no need to re-set the period of time for which the access right to work on a mailbox/IM account is granted when the employee/user is not transferred from the position and a new IM account is used. mailbox account or a new instant messaging account/mailbox account has been added). An employee's work or user's work with content in an instant messaging account/mailbox account can be controlled based on the time period for which the access right is granted, for the role associated with the user to which the employee corresponds, or for the role with which associated user.

3. According to the present invention, when the employee/user/role as a controller uses the IM account/mailbox account of the supervised (which is not the IM account/mailbox account with which the employee is associated; or the instant messaging account/mailbox account to which the employee's user is associated; or the instant messaging account/mailbox account to which the user is associated; or the instant messaging account/mail account mailbox to which the role is associated, which is associated with the user to whom the employee corresponds; or the instant messaging account/mailbox account to which the role is associated, which is associated with the user; or the instant messaging account/mail account the mailbox to which the employee to whom the user corresponds is associated; or an IM/Mailbox account that has a role associated with it, where the employee, user, and role are the controller), the employee who is the controller interacts with the content in the IM/Mailbox account, which the controlled person uses, based on the period of time for which the access right is granted, determined for the employee who acts as the controller; or the controller user interacts with content in the instant messaging account/mailbox account used by the controller based on the time period for which the access right is granted to the controller user; or the controller role works with content in the instant messaging account/mailbox account used by the controller based on the time period for which the access right is granted specified for the controller role; or the employee/user who is the controller interacts with content in the instant messaging/mailbox account used by the supervisee, based on the time period for which the access right is granted, defined for the role that is the controller and which associated with the user to whom the employee corresponds, or which is associated with the user

- 8 044698 tele. There is no need to set a time period for which the access right is granted to work with content in the instant messaging account/mailbox account that the supervised corresponds to or is associated with. By setting the time period for which access rights are granted to work with content in an instant messaging account/mailbox account, when the controller exercises control over the instant messaging accounts/mailbox accounts that use controlled periods The time periods for which access rights are granted to work with content in the instant messaging account/mailbox account of the controlled ones will be based on the time periods for which access rights are granted to work with the controller.

4. According to the present invention, the employee/user/role is the controlled one, and when the controller uses the IM account/mailbox account of the controlled one (the instant messaging account/mailbox account to which the controlled one is associated, the account Instant Messaging/Mailbox Account to which the user is associated, Instant Messaging Account/Mailbox Account to which the User is Associated, Instant Messaging Account/Mailbox Account to which the role that the user the supervised employee is associated with is associated with, the IM account/mailbox account that is associated with the role that the user is associated with, the IM account/mailbox account that is associated with employee to whom the user corresponds, and the IM account/mailbox account that the role is associated with), the controller works with content in the IM account/mailbox account that the supervised employee uses, based on the period the time in respect of which the right of access is granted, determined for the controlled employee who acts as the controlled person; or the controller operates the content in the instant messaging account/mailbox account used by the controlled user based on the time period for which the access right is granted specified for the controlled user who is being controlled; or the controller works with content in an instant messaging account/mailbox account that is used by the user to whom the role is associated, or the employee to whom the user to whom the role is associated, is used, based on the time period for which the access right is granted , defined for the controlled role, which acts as the controlled one.

For example, Zhang San is found to be working with his associated instant messaging account/mailbox account for the past year; Zhang San, as a controller, has been operating the instant messaging account/mailbox account of the controlled person for the past two years; and Zhang San, as a controlled person, has been operating the controlled person's instant messaging account/mailbox account for the past three years; If the controlled ones that correspond to Zhang San are Li Si, Wang Wu and Zhao Liu, then Zhang San can work with the contents of the last two years in the instant messaging accounts/mailbox accounts associated with Li Si, Wang Wu and Zhao Liu, and Zhang San can only view/work with the last year's content on the IM account/mailbox account he is linked to; When Zhang San is controlled, the controller he corresponds to can only work with the contents of the last three years in the instant messaging account/mailbox account that Zhang San is associated with.

5. In traditional rights management mechanisms, a role is defined as a property of a group, job specialty, class, etc., and the role is associated with a user on a one-to-many basis; in the process of real application of the system, it is often necessary to adjust the rights of users in the process of conducting business: for example, when changing the rights of employees, the rights of any employee with whom a certain role is associated are changed, but it is impossible to change the rights for the entire role due to a change in the rights of one employee, since this role is also associated with other employees whose rights have not changed. Therefore, to get out of this situation, either create a new role for an employee whose rights have changed, or such an employee is directly granted rights based on the need for rights (without reference to the role). In the above two management methods, if there are relatively many rights for a role, then when granting rights for a role, it is not only time-consuming, but also easy to make mistakes, so users' work becomes more stressful and time-consuming, and it is also easy to make mistakes that cause System users are having problems.

However, in the method presented in this document, the solution to this problem is simply to selectively change the rights for a role, since the role is one separate entity.

- 9 044698 ness. In the method presented in this document, although it seems that the amount of work will increase when initializing the system, nevertheless, due to copying, etc., its efficiency in creating roles or granting rights can be higher than in the case of traditional roles with group properties; since there is no need to take into account the commonality of roles with group properties when providing association with users; the solution presented in this document makes the installation of rights clear and understandable; In particular, after applying the system for a certain time (dynamically changing the user/rights for the role), the solution presented in this document can greatly improve the efficiency of rights management for system users when applying the system, which makes the dynamic granting of rights easier, more convenient, and also more clear and clear and increases the efficiency and reliability of setting rights.

6. In traditional role-based methods with group properties, it is easy to make mistakes when granting rights, while in the method presented in this document, the likelihood of making mistakes in granting rights is greatly reduced, since in the method presented in this document, only the role that represents a separate entity, and there is no need to consider what commonalities characterize multiple users who associate a role with group properties in traditional ways. That is, errors made in granting rights will also affect only the one user with whom this role is associated, whereas in the case of a traditional role with group properties, they will affect all users with whom this role is associated. Even if errors occur in granting rights, the correction method presented in this document is simple and takes little time, whereas in the case of a traditional role with group properties, when correcting errors, it is necessary to take into account the commonality of rights of all users with which this role is associated, and in the case With a large number of functions, making changes is time-consuming and complex, it is very easy to make mistakes, and in many situations the only solution can be the possibility of creating a new role.

7. In traditional methods of granting rights based on roles with group properties, if there are relatively many rights functions for a role, then it is very difficult to remember specific rights for a long time and it is even more difficult not to forget the difference in rights for roles with similar rights, and if you need to associate with the role of a new user, it is impossible to decide exactly how to choose the role to associate him with. The roles used in the method presented in this document themselves contain a property in the form of a position number/position number, so how to select is immediately clear.

8. When transferring, if many rights of the user who is being transferred need to be distributed among other users, then when doing this, it is necessary to divide the rights of the user who is being transferred, and then create roles for them that connect with other users; Not only is such an operation complex and time-consuming, but it is also very easy to make mistakes.

The method presented in this document provides the following: the user who is transferred is associated with several roles, and during the transfer, the user's associations with roles in the previous department are first removed (these several roles with which associations are removed can be associated again with other users), and then simply associate the user with roles in the new department. This operation is simple and no mistakes will be made.

9. During the creation of a role or after the creation of a role, a department must be selected, and after assigning a role to a department, the department cannot be changed, and the department cannot be changed for the following reasons:

reason 1 - since the property of the role presented in this document is identified with one job title/position number, the job responsibilities/rights under different job titles/position numbers are different: for example, the role of salesperson 1 in the sales department and the role of developer 1 in the technical department contains numbers of completely different job positions/positions, so the rights for them are different;

reason 2 - if the department (sales department) to which the role of salesperson 1 belongs is changed to the technical department and the rights for the role of salesperson 1 are not changed, then in the technical department there will be one role with the rights of a sales department employee, which will lead to confusion in management and the emergence of security weaknesses.

Description of the attached graphic materials

In fig. 1 is a flow chart of one embodiment of a method for setting a period of time during which work on mailbox contents is allowed, according to the present invention;

in fig. 2 is a schematic diagram of a method for granting rights to a user based on a role that is a separate entity, according to the present invention;

in fig. 3 is a flowchart of one embodiment of a method for setting a period of time during which instant messaging content is allowed to be accessed according to the present invention.

- 10 044698

Preferred Mode for Carrying Out the Invention

Specific embodiments.

Below, the technical solutions according to the present invention are described in more detail with reference to the accompanying drawings, however, the scope of protection of the present invention is not limited to the following.

Embodiment 1 As shown in FIG. 1, the method for setting the period of time for which work with the contents of a mailbox is allowed in the system includes the following steps.

S001 - selecting a role, user or employee as a mailbox subscriber.

After you associate a role with a mailbox account in the same period, one role can only be associated with one mailbox account, and one mailbox account can only be associated with one role; Once a user is associated with a mailbox account in the same period, one user can only be associated with one mailbox account, and one mailbox account can only be associated with one user; Once an employee is associated with a mailbox account in the same period, one employee can only be associated with one mailbox account, and one mailbox account can only be associated with one employee.

As shown in FIG. 2, a role is a separate entity, not a group/class, and at the same time, one role can be associated with only one user, while one user is associated with one or more roles, and the user receives the rights of the associated roles . When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

Definition of a role: a role is characterized not by the properties of a group/class/category/position/official position/job specialty, etc., but only by the property of the absence of collectivity, the role is characterized by uniqueness, and the role is a separate entity that exists independently; when used in production and non-production organizations, it corresponds to the position number (in this document, the position number is not a position; one position can be occupied by several employees at the same time, but in the same period one position number can correspond to only one employee).

For example, the following roles may be introduced in the system of a certain company: general director, deputy general director 1, deputy general director 2, sales department manager in Beijing 1, sales department manager in Beijing 2, sales department manager in Beijing 3, sales organization specialist in Shanghai 1, sales specialist in Shanghai 2, sales specialist in Shanghai 3, sales specialist in Shanghai 4, sales specialist in Shanghai 5, etc. Relationship between a user and a role: if an employee of this company Zhang San (for Zhang San there is one user Zhang San installed in the system) is appointed to the position of deputy general director 2 in this company and at the same time appointed to the position of manager of the sales department in Beijing 1, then the roles, with Zhang San needs to be associated with Deputy General Manager 2 and Beijing Sales Manager 1, and Zhang San will have the rights for these two roles.

The concept of a traditional role assumes the properties of a group/class/position/job position/job specialty, while one role can correspond to several users. In this document, the concept of role corresponds to the position number/job position number, and is also similar to the role in films and television series: one role in the same period (in childhood, adolescence, adulthood, etc.) can be performed by only one actor, and one actor may be able to perform several roles.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S002 - setting each mailbox subscriber to a period of time in respect of which the access right is granted, wherein the specified period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting down a fixed the period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

Moreover, the period of time for which the right of access is granted also includes

- 11 044698 period of time from the time of system implementation to the current point in time.

The unit of measurement for the specified period of time in respect of which access rights are granted may be year, month, day, hour, minute, second, etc.

The following are examples to describe these five types of time periods: a period of time from a point in time, determined by counting down a fixed period of time from the current point in time, to the current point in time. For example, on June 20, 2017, Employee Jia was granted rights to view the data/content of emails in the mailbox account that Employee Jia uses for a period of time from a point in time defined by a 6-day countdown from June 20, 2017 to June 20 2017 (which is the current point in time and rights are granted up to the current point in time, not to a specific point in time); those. June 20, 2017 Employee Jia can view the data/contents of emails in the mailbox account used by Employee Jia from June 15, 2017 to June 20, 2017; June 21, 2017 Jia can view the data/content of emails in the mailbox account used by Jia's employee from June 16, 2017 to June 21, 2017; June 22, 2017 Jia can view the data/content of emails in the mailbox account used by Jia's employee from June 17, 2017 to June 22, 2017, etc. That is, a certain period of time in this time period is fixed, and the start time and end time change automatically.

The time period from the start time to the current point in time (the current point in time is changing). For example, on May 1, 2015, Employee Jia is granted rights to view the data/contents of emails in the mailbox account that Employee Jia is using from February 1, 2015 to the current date (present); then Employee Jia can view the data/contents of emails in the mailbox account used by Employee Jia from February 1, 2015 to May 1, 2015; On May 2, 2015, Employee Jia can view the data/contents of emails in the mailbox account that Employee Jia uses from February 1, 2015 to May 2, 2015 (in addition, the start time can be defined as an excluded start time, and in the case of an excluded start time, Employee Jia cannot view the data/content of mails in the mailbox account used by Employee Jia for February 1, 2015 and can only view the data/contents of mails in the mailbox account used by Employee Jia , after February 1, 2015; in addition, other time periods according to the present invention, if they relate to the determination of a start time, may also constitute an excluded start time).

The period of time from the end time to the time of implementation of the system. For example, Employee Jia is granted rights to view the data/contents of emails in the mailbox account used by Employee Jia from February 1, 2015 until the time of implementation of the system; Jia can then view the data/contents of emails in the mailbox account used by Jia's employee from February 1, 2015 until the time of implementation of the system. (That is, Employee Jia can view the data/contents of emails in the mailbox account used by Employee Jia in the system up to and including February 1, 2015); (Additionally, the end time can be defined as an excluded end time; in the case of an excluded end time, Employee Jia cannot view the data/contents of emails in the mailbox account that Employee Jia uses for February 1, 2015 and can only view the data /contents of mails in the mailbox account used by employee Jia before February 1, 2015; in addition, only the end time can be set, and the system implementation time may not be set, and then employee Jia can view the data/contents of letters in the mailbox account used by Employee Jia up to and including the end time, or Employee Jia can view the data/contents of emails in the mailbox account used by Employee Jia up to and including the end time).

The period of time from the start time to the end time. For example, Employee Jia is granted rights to view the data/contents of emails in the mailbox account used by Employee Jia from February 1, 2015 to June 1, 2015; then Jia can view the data/content of emails in the mailbox account used by Jia's employee from February 1, 2015 to June 1, 2015.

The period of time from the time of system implementation to the current point in time (the current point in time is changing). For example, on June 1, 2017, Employee Jia was granted rights to view the data/contents of emails in the mailbox account that Employee Jia is using from the time the system was implemented to the current point in time; then on June 1, 2017, Jia can view the data/contents of emails in the mailbox account used by Jia's employee from the time the system was implemented to June 1, 2017; June 2, 2017 Jia can view the data/contents of emails in the mailbox account used by Jia's employee from the time of system implementation to June 2, 2017, etc.; in addition, the time of implementation of the system may not be set, and then the time period from the time of implementation of the system to the current point in time is a time period including all time; in addition, other time periods according to the present invention, if they relate to determining the system implementation time, may also not be set as the system implementation time.

The end time and start time are set manually.

In the above discussion, the time period for which the access right is granted is set for the Jia employee, not for the mailbox account; Once the time period for which the access right is granted to the Jia employee is established, the Jia employee can only work with the contents in the mailbox for the time period for which the Jia employee is granted the access right. Employee Jia is now using mailbox A, and later Employee Jia will use mailbox B instead of mailbox A; in this case, Employee Jia can only interact with the content in mailbox B for the period of time for which Employee Jia is granted access rights.

The mailbox subscriber interacts with content for the period of time for which the mailbox subscriber is granted access rights, in the mailbox account that the mailbox subscriber uses. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, the mailbox subscriber can only interact with the content in the mailbox account that the mailbox subscriber uses for the time period for which the access right is granted (or the time period for which the mailbox subscriber is granted the access right).

When the mailbox subscriber is a role, the mailbox account used by the mailbox subscriber contains the mailbox account associated with the role; when the mailbox subscriber is a user, the mailbox account used by the mailbox subscriber contains a mailbox account associated with the user, a mailbox account associated with the employee to whom the user corresponds, and a mailbox account associated with the role, associated with the user; when the mailbox subscriber is an employee, the mailbox account used by the mailbox subscriber contains the mailbox account associated with the employee, the mailbox account associated with the user to which the employee corresponds, and the mailbox account associated with the role, which is associated with the user to whom the employee corresponds.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a mailbox account of a mailbox program on a system (i.e., a mailbox account on a system), and in this In this case, the stage of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the main part of the system.

Embodiment 2: The method for setting the period of time during which work with the contents of a mailbox is allowed in the system includes the following steps.

SOU - setting a time period for which an access right is granted for a mailbox account (rather than setting a time period for a mailbox subscriber), wherein the specified time period for which an access right is granted contains one or more of the following four types: period of time from a point in time, determined by counting back a fixed period of time from the current point in time, to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

Moreover, the period of time for which the access right is granted also includes the period of time from the time of implementation of the system to the current point in time.

The unit of measurement for the specified period of time for which access rights are granted may be year, month, day, hour, minute, second, etc.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a mailbox account of a mailbox program on a system (i.e., a mailbox account on a system), and in this In this case, the step of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the entire main part of the system.

S012 - All roles, users and employees using the mailbox account interact with content in the mailbox account for a period of time, in

- 13 044698 regarding which the access right for the mailbox account is granted. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, all roles, users, and employees who use a mailbox account can only perform operations on the content in the mailbox account for the time period for which access rights are granted (or for the time period for which access rights are granted for mailbox account).

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

Embodiment 3: The method for setting the period of time for which work with the contents of a mailbox is allowed in the system includes the following steps.

S021 - selecting a role, user or employee as a controller.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S022 - Set one or more monitored for each controller, with the monitored being a role, user or employee.

S023 - setting each controller a period of time in respect of which the access right is granted, wherein the specified period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time, to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

Moreover, the time period for which the access right is granted also includes the time period from the time of implementation of the system to the current point in time.

The unit of measurement for the specified period of time in respect of which access rights are granted may be year, month, day, hour, minute, second, etc.

Each controller works with the content in the mailbox account used by the corresponding supervised person for the period of time for which the controller is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, each controller can only work with content in the mailbox account used by the corresponding supervised for the period of time for which the controller is granted access rights.

When the supervised is a role, the mailbox account used by the supervised contains the mailbox account associated with the role; When the supervised user is a user, the mailbox account used by the supervised contains the mailbox account associated with the user, the mailbox account associated with the employee to whom the user corresponds, and the mailbox account associated with the role. associated with the user; when the supervised is an employee, the mailbox account used by the supervised contains the mailbox account associated with the employee, the mailbox account associated with the user to which the employee corresponds, and the mailbox account associated with the role that is associated with the user , to which the employee corresponds.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a mailbox account of a mailbox program on a system (i.e., a mailbox account on a system), and in this In this case, the step of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the entire main part of the system.

Embodiment 4: The method for setting the period of time during which work with the contents of a mailbox is allowed in the system includes the following steps.

S031 - selecting a role, user or employee as controlled.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S032 - setting each monitored period of time in respect of which the access right is granted, wherein the specified period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time, to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

Moreover, the period of time for which the access right is granted also includes the period of time from the time of implementation of the system to the current point in time.

The unit of measurement for the specified period of time in respect of which access rights are granted may be year, month, day, hour, minute, second, etc.

All controllers, to which each supervised corresponds, operate on the content in the mailbox account used by the supervised for the period of time for which the supervised is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, all controllers that each supervised is associated with can only work with the content in the mailbox account used by the supervised for the period of time for which the supervised is granted access.

When the supervised is a role, the mailbox account used by the supervised contains the mailbox account associated with the role; when the supervised user is a user, the mailbox account used by the supervised contains a mailbox account associated with the user, a mailbox account associated with the employee to whom the user corresponds, and a mailbox account associated with the role associated with the user; when the supervised is an employee, the mailbox account used by the supervised contains the mailbox account associated with the employee, the mailbox account associated with the user to which the employee corresponds, and the mailbox account associated with the role that is associated with the user , to which the employee corresponds.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a program mailbox account (programmatically

- 15 044698 th provision) of a mailbox in the system (i.e. a mailbox account in the system), and in this case the step of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the entire main part of the system.

Embodiment 5: The method for setting the period of time during which work with the contents of a mailbox is allowed in the system includes the following steps.

S041 - selecting a role, user or employee as a mailbox subscriber.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S042 - setting each mailbox subscriber to a time period for which the access right is granted, wherein the time period for which the access right is granted contains one or more of the following four types: a time period from a point in time determined by counting back a fixed period time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation; and a period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time.

The following are examples to describe these four types of time periods: a period of time from a point in time, determined by counting back a fixed period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated, to the current point in time. For example, the association time of the mailbox account currently associated with Employee B is May 1, 2016, and the time period for which Employee B is granted access rights is set as a period of time from a point in time determined by counting back two months from the time employee B was associated with the mailbox account with which he is currently associated until the current point in time; in this case, Employee B can access all content in their associated mailbox account after March 1, 2016. Employee B has a time period for which access rights are granted; If Employee B was relinked to a mailbox account on October 1, 2016, then Employee B can work with all the content in the mailbox account they were relinked to after August 1, 2016.

The period of time from a point in time determined by counting forward a fixed period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation. For example, the association time of the mailbox account currently associated with Employee B is May 1, 2016, and the time period for which Employee B is granted access rights is set to the time period from a point in time determined by counting forward two months from the time employee B is associated with the mailbox account with which he is currently associated until the time the system is implemented; In this case, Employee B can work with all content in their associated mailbox account until July 1, 2016.

The period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated until the time the system is implemented. For example, the link time of the mailbox account currently associated with Employee B is May 1, 2016, and the time period for which Employee B is granted access rights is set to the time period from the time Employee B was associated with the mailbox account with which it is currently associated, until the time of system implementation; In this case, Employee B can work with all the content in their associated mailbox account until May 2016.

The period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time. For example, the time the mailbox account currently associated with Employee B is associated is May 1, 2016, and the time period for which Employee B is granted access rights is set to be the time period from the time Employee B is associated with the mailbox account. the box with which it is currently associated, up to the current point in time; In this case, Employee B can work with all content in their associated mailbox account until May 1, 2016.

The mailbox subscriber interacts with content for the period of time for which the mailbox subscriber is granted access rights, in the mailbox account that the mailbox subscriber uses. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, the mailbox subscriber can only interact with the content in the mailbox account that the mailbox subscriber uses for the time period for which the access right is granted (the time period for which the mailbox subscriber is granted the access right).

When the mailbox subscriber is a role, the mailbox account used by the mailbox subscriber contains the mailbox account associated with the role; when the mailbox subscriber is a user, the mailbox account used by the mailbox subscriber contains a mailbox account associated with the user, a mailbox account associated with the employee to whom the user corresponds, and a mailbox account associated with the role, associated with the user; when the mailbox subscriber is an employee, the mailbox account used by the mailbox subscriber contains the mailbox account associated with the employee, the mailbox account associated with the user to which the employee corresponds, and the mailbox account associated with the role, which is associated with the user to whom the employee corresponds.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a mailbox account of a mailbox program on a system (i.e., a mailbox account on a system), and in this In this case, the step of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the entire main part of the system.

Embodiment 6: The method for setting the period of time during which work with the contents of a mailbox is allowed in the system includes the following steps.

S051 - Setting a mailbox account to a time period for which an access right is granted, wherein the time period for which an access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed the period of time from the time of linking the mailbox account with the mailbox subscriber with which it is currently associated until the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated until the time the system is implemented; the period of time from the time of linking a mailbox account with the mailbox subscriber with which it is currently associated until the time of system implementation; and a period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated until the current point in time.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a mailbox account of a mailbox program on a system (i.e., a mailbox account on a system), and in this In this case, the stage of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the entire main part of the system.

- 17 044698

S052 - All roles, users and employees using the mailbox account interact with content in the mailbox account for the period of time for which the access right for the mailbox account is granted. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, all roles, users, and employees who use a mailbox account can only perform operations on the content in the mailbox account for the time period for which access rights are granted (or for the time period for which access rights are granted for mailbox account).

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

Embodiment 7: The method for setting the period of time during which work with the contents of a mailbox is allowed in the system includes the following steps.

S061 - selecting a role, user or employee as a controller.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S062 - Set one or more monitored for each controller, with the monitored being a role, user or employee.

S063 - setting each controller a time period in respect of which the access right is granted, wherein the time period in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time of association of the mailbox subscriber with the mailbox account with which he is currently associated, up to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation; and a period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time.

Each controller works with the content in the mailbox account used by the corresponding supervised person for the period of time for which the controller is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, each controller can only work with content in the mailbox account used by the corresponding supervised for the period of time for which the controller is granted access rights.

When the supervised is a role, the mailbox account used by the supervised contains the mailbox account associated with the role; when the supervised user, the mailbox account used by the supervised contains a mailbox account associated with the user, a mailbox account associated with the employee to whom the user corresponds, and a mailbox account associated with the role associated with the user; when the supervised is an employee, the mailbox account used by the supervised contains the mailbox account associated with the employee, the mailbox account associated with the user to which the employee corresponds, and the mailbox account associated with the role that is associated with the user , to which the employee corresponds.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a mailbox account of a mailbox program on a system (i.e., a mailbox account on a system), and in this In this case, the stage of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the entire main part of the system.

Embodiment 8. The method for setting the period of time for which work with the contents of a mailbox is allowed in the system includes the following steps:

S071 - selecting a role, user or employee as controlled.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S072 - setting each monitored period of time in respect of which the access right is granted, wherein the period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time of association of the mailbox subscriber with the mailbox account with which he is currently associated, up to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time a mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation; and a period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the current point in time.

All controllers that each supervisee corresponds to work with the content in the mailbox account used by the supervisee for the period of time for which the supervisee is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, all controllers that each supervised is associated with can only work with the content in the mailbox account used by the supervised for the period of time for which the supervised is granted access.

When the supervised is a role, the mailbox account used by the supervised contains the mailbox account associated with the role; when the supervised user, the mailbox account used by the supervised contains a mailbox account associated with the user, a mailbox account associated with the employee to whom the user corresponds, and a mailbox account associated with the role associated with the user; when the supervised is an employee, the mailbox account used by the supervised contains the mailbox account associated with the employee, the mailbox account associated with the user to which the employee corresponds, and the mailbox account associated with the role, which is associated with the user to whom the employee corresponds.

A mailbox account source contains one or both of the following two types: 1) a mailbox account is a mailbox account of a mailbox program on a system (i.e., a mailbox account on a system), and in this In this case, the step of creating a mailbox account is additionally provided; 2) A mailbox account is a mailbox account of a mailbox service provided by a third party, such as a NetEase mailbox account, a QQ mailbox account, etc. In this case, the system is the management system used in production and non-production organizations, etc.; The mailbox program in the system is only a component of the system, and not the entire main part of the system.

Embodiment 9 As shown in FIG. 3, the method for setting the period of time for which work with the contents of instant messages is allowed in the system includes the following steps.

S081 - select a role, user or employee as a subject with access to instant messages.

After creating a role-IM account association relationship in the same period, one role can only be associated with one IM account, and one IM account can only be associated with one role; Once a user-IM account association relationship is created in the same period, one user can only be associated with one instant messaging account, and one instant messaging account can only be associated with one user; Once an employee-IM account relationship is created, in the same period, one employee can only be associated with one IM account, and one IM account can only be associated with one employee.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S082 - setting each subject with access to instant messages a period of time in respect of which the access right is granted, wherein the specified period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by countdown of a fixed period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

Moreover, the period of time for which the access right is granted also includes the period of time from the time of implementation of the system to the current point in time.

The unit of measurement for the specified period of time for which access rights are granted may be year, month, day, hour, minute, second, etc.

The following are examples to describe these five types of time periods: a period of time from a point in time, determined by counting down a fixed period of time from the current point in time, to the current point in time. For example, on June 20, 2017, Employee Jia was granted rights to view instant message data/content in the instant messaging account that Employee Jia uses for a period of time from a point in time defined by a 6-day countdown from June 20, 2017. until June 20, 2017 (which is the current point in time and rights are granted until the current point in time, not to a specific point in time); those. June 20, 2017 Employee Jia can view the IM data/contents in the instant messaging account used by Employee Jia from June 15, 2017 to June 20, 2017; June 21, 2017 Jia can view IM data/content in the instant messaging account used by Jia's employee from June 16, 2017 to June 21, 2017; June 22, 2017 Jia can view the IM data/contents in the IM account used by Jia's employee from June 17, 2017 to June 22, 2017, etc. That is, a certain period of time in this time period is fixed, and the start time and end time change automatically.

The time period from the start time to the current point in time (the current point in time is changing). For example, on May 1, 2015, Employee Jia is granted rights to view IM data/content in the instant messaging account that Employee Jia is using from February 1, 2015 to the current date (present); then Employee Jia can view the IM data/contents in the instant messaging account that Employee Jia is using from February 1, 2015 to May 1, 2015, On May 2, 2015, Employee Jia can view the IM data/contents in the instant messaging account used by Employee Jia, from February 1, 2015 to May 2, 2015 (in addition, the start time may be defined as an excluded start time, and in the case of an excluded start time, Employee Jia cannot view IM data/contents in the instant messaging account used by Employee Jia as of February 1, 2015 and can only view the IM data/contents in the IM account used by Employee Jia after February 1, 2015 In addition, other time periods according to the present invention, if they relate to the determination of a start time, may also constitute an excluded start time).

The period of time from the end time to the time of implementation of the system. For example, Employee Jia was granted rights to view IM data/content in the instant messaging account used by Employee Jia from February 1, 2015 until the implementation of the system; then Jia can view the IM data/contents in the instant messaging account used by Jia's employee from February 1, 2015 until the time of implementation of the system. (That is, Employee Jia can view the IM data/contents in the instant messaging account used by Employee Jia on the system up to and including February 1, 2015); (Additionally, the end time can be defined as an excluded end time; in the case of an excluded end time, Employee Jia cannot view the IM data/contents in the instant messaging account that Employee Jia uses for February 1, 2015 and can only view the IM data/contents of the instant messaging account used by Employee Jia before February 1, 2015; in addition, only the end time can be set, and the implementation time of the system may not be set, and then Employee Jia may view instant messaging data/content in the instant messaging account used by Employee Jia up to and including the end time, or Employee Jia may view instant message data/content in the instant messaging account used by Employee Jia up to and including the time endings).

The period of time from the start time to the end time. For example, Employee Jia was granted rights to view IM data/content in the instant messaging account used by Employee Jia from February 1, 2015 to June 1, 2015; then Jia can view the IM data/contents in the instant messaging account used by Jia's employee from February 1, 2015 to June 1, 2015.

The period of time from the time of system implementation to the current point in time (the current point in time is changing). For example, on June 1, 2017, Employee Jia was granted rights to view the instant messaging data/contents in the instant messaging account used by Employee Jia from the time the system was implemented to the current point in time; then on June 1, 2017, Jia can view the IM data/contents in the instant messaging account used by Jia's employee from the time of implementation of the system to June 1, 2017; June 2, 2017 Jia can view the IM data/contents in the instant messaging account used by Jia's employee from the time of system implementation to June 2, 2017, etc.; in addition, the time of implementation of the system may not be set, and then the time period from the time of implementation of the system to the current point in time is a time period including all time; in addition, other time periods according to the present invention, if they relate to determining the system implementation time, may also not be set as the system implementation time.

The end time and start time are set manually.

In the above discussion, the time period for which the access right is granted is set for the Jia employee, not for the instant messaging account; Once the time period for which the access right is granted to the Jia employee is established, the Jia employee can only interact with the content in the instant messaging account during the time period for which the Jia employee is granted the access right. Employee Jia is now using IM account A, and later Employee Jia will use IM account B instead of IM account A; in this case, Employee Jia can only interact with the content in instant messaging account B for the period of time for which Employee Jia is granted access rights.

An IM entity interacts with content in an instant messaging account used by an IM entity for a period of time for which the IM entity is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

An IM access subject can only interact with content in the instant messaging account used by an IM access subject for the period of time for which the access right is granted (or the time period for which the IM access subject instant messages are granted access rights).

When the subject with instant messaging access is a role, the instant messaging account used by the subject with instant messaging access contains the instant messaging account associated with the role; when the subject with instant messaging access is a user, the instant messaging account used by the subject with instant messaging access contains the instant messaging account associated with the user, the instant messaging account associated with the employee to whom it corresponds the user, and the instant messaging account associated with the role associated with the user; when the subject with instant messaging access is an employee, the instant messaging account used by the subject with instant messaging access contains the instant messaging account associated with the employee, the instant messaging account associated with the user to whom it corresponds employee, and the instant messaging account associated with the role that is associated with the user to whom the employee corresponds.

The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account). instant messaging in the system), and in this case the step of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system.

Embodiment 10: The method for setting the time period for which instant message content is allowed to be processed in the system includes the following steps.

S091 - Setting the time period for which the access right is granted for an instant messaging account (rather than setting the time period for the subject with access to instant messages), wherein the specified time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account). instant messaging in the system), and in this case the step of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system.

S092 - All roles, users and employees using the instant messaging account interact with content in the instant messaging account for the period of time for which the access right for the instant messaging account is granted. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, all roles, users, and employees associated with an IM account can only perform operations on the content in the IM account for the time period for which the access right is granted (or for the time period for which the access right is granted). which is granted the access right for the instant messaging account).

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

Embodiment 11: The method for setting the time period for which instant message content is allowed to be processed in the system includes the following steps.

S101 - selecting a role, user or employee as a controller.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S102 - Set one or more monitored for each controller, where the monitored is a role, user or employee.

S103 - setting each controller a period of time in respect of which the access right is granted, wherein the specified period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time, to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

Each controller interacts with the content in the instant messaging account used by the respective controller for the period of time for which the controller is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, each controller can only interact with content in the instant messaging account used by the respective controller for the period of time for which the controller is granted access rights.

When the supervised is a role, the IM account used by the supervised contains the IM account associated with the role; when the controlled person is a user, the instant messaging account used by the controlled person contains an instant messaging account associated with the user, an instant messaging account associated with the employee to whom the user corresponds, and an instant messaging account, associated with a role associated with a user; When the controlled person is an employee, the instant messaging account used by the controlled person contains an instant messaging account associated with the employee, an instant messaging account associated with the user to whom the employee corresponds, and an account for instant messaging associated with the role that is associated with the user to whom the employee corresponds.

The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account for instant messaging in the system), and in this case the step of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system.

Embodiment 12: The method for setting the time period for which instant message content is allowed to be processed in the system includes the following steps.

S111 - selecting a role, user or employee as controlled.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S112 - setting each monitored period of time in respect of which the access right is granted, wherein the specified period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time, to the current point in time; the period of time from the start time to the current point in time; the period of time from the time of completion to the time of implementation of the system; and a period of time from the start time to the end time.

All controllers to which each supervisee corresponds work with the content in the instant messaging account used by the supervisee for the period of time for which the supervisee is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, all controllers to which each supervisee corresponds can only interact with the content in the instant messaging account used by the supervisee for the period of time for which the supervisee is granted access rights.

When the supervised is a role, the IM account used by the supervised contains the IM account associated with the role; when the controlled person is a user, the instant messaging account used by the controlled person contains an instant messaging account associated with the user, an instant messaging account associated with the employee to whom the user corresponds, and an instant messaging account, associated with a role associated with a user; when the supervised is an employee, the instant messaging account used by the supervised contains an instant messaging account associated with the employee, an instant messaging account associated with the user to which the employee corresponds, and an instant messaging account, associated with the role that is associated with the user to which the employee corresponds.

The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account). instant messaging in the system), and in

- 24 044698 In this case, the stage of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system.

Embodiment 13: The method for setting the time period for which instant message content is allowed to be processed in the system includes the following steps.

S121 - selecting a role, user or employee as a subject with access to instant messages.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S122 - setting each subject with access to instant messages a period of time in respect of which the access right is granted, wherein the period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time the instant messaging access subject was associated with the instant messaging account with which he is currently associated to the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time the system is implemented; and a period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the current point in time.

The following are examples to describe these four types of time periods: a period of time from a point in time determined by counting back a fixed period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the current moment in time. For example, the linking time of the instant messaging account currently associated with Employee B is May 1, 2016, and the time period for which Employee B is granted access rights is set to the time period from the time determined by counting back two months from the time Employee B was associated with the instant messaging account with which he is currently associated to the current point in time; in this case, Employee B can access all content in their associated instant messaging account after March 1, 2016. Employee B has a specified time period for which access rights are granted; If Employee B was relinked to an instant messaging account on October 1, 2016, then Employee B can interact with all the content in the mailbox account they were relinked to after August 1, 2016.

A period of time from a point in time determined by counting forward a fixed period of time from the time an entity with instant messaging access is associated with the instant messaging account with which it is currently associated until the time the system is implemented. For example, the linking time of the instant messaging account currently associated with Employee B is May 1, 2016, and the time period for which Employee B is granted access rights is set to the time period from the time determined by counting forward two months from the time employee B is associated with the instant messaging account with which he is currently associated until the time the system is implemented; in this case, employee B can work with all the content in the associated

- 25 044698 instant messaging account before July 1, 2016

The period of time from the time a subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time the system is implemented. For example, the linking time of the instant messaging account currently associated with Employee B is May 1, 2016, and the time period for which Employee B is granted access rights is set to the time period from the time Employee B is associated with the account. the instant messaging account with which it is currently associated until the time of implementation of the system; In this case, Employee B can access all content in their associated IM account until May 1, 2016.

The period of time from the time a subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the current point in time. For example, the linking time of the instant messaging account currently associated with Employee B is May 1, 2016, and the time period for which Employee B is granted access rights is set to the time period from the time Employee B is associated with the account. the instant messaging account with which it is currently associated, up to the current point in time; In this case, Employee B can access all content in their associated IM account after May 1, 2016.

An IM entity interacts with content in an instant messaging account used by an IM entity for a period of time for which the IM entity is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

An IM access subject can only interact with content in the instant messaging account used by an IM access subject for the period of time for which the access right is granted (or the time period for which the IM access subject instant messages are granted access rights).

When the subject with instant messaging access is a role, the instant messaging account used by the subject with instant messaging access contains the instant messaging account associated with the role; when the subject with instant messaging access is a user, the instant messaging account used by the subject with instant messaging access contains the instant messaging account associated with the user, the instant messaging account associated with the employee to whom it corresponds the user, and the instant messaging account associated with the role associated with the user; when the subject with instant messaging access is an employee, the instant messaging account used by the subject with instant messaging access contains the instant messaging account associated with the employee, the instant messaging account associated with the user to whom it corresponds employee, and the instant messaging account associated with the role that is associated with the user to whom the employee corresponds.

The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account for instant messaging in the system), and in this case the step of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system.

Embodiment 14: The method for setting the time period for which instant message content is allowed to be processed in the system includes the following steps.

S131 - Setting for an instant messaging account a time period in respect of which an access right is granted, wherein the time period in respect of which an access right is granted comprises one or more of the following four types: a time period from a time point determined by counting back a fixed period of time from the time the instant messaging account was associated with the instant messaging entity with which it is currently associated to the current point in time; period of time from a point in time determined by counting forward a fixed period of time from

- 26 044698 time of linking the instant messaging account with the subject with access to instant messaging with which it is currently associated, until the time of system implementation; the period of time from the time the instant messaging account is associated with the entity with access to instant messages with which it is currently associated until the time the system is implemented; and a period of time from the time the instant messaging account is associated with the instant messaging entity with which it is currently associated until the current point in time.

The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account). instant messaging in the system), and in this case the step of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system.

S132 - All roles, users and employees using the instant messaging account interact with content in the instant messaging account for the period of time for which the access right for the instant messaging account is granted. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, all roles, users, and employees associated with an IM account can only perform operations on the content in the IM account for the time period for which the access right is granted (or for the time period for which the access right is granted). which is granted the access right for the instant messaging account).

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

Embodiment 15: The method for setting the time period for which instant message content is allowed to be processed in the system includes the following steps.

S141 - selecting a role, user or employee as a controller.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department. Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S142 - Set one or more monitored for each controller, where the monitored is a role, user or employee.

S143 - setting each controller a time period in respect of which the access right is granted, wherein the time period in respect of which the access right is granted contains

- 27 044698 one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until current moment in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time the system is implemented; and a period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the current point in time.

Each controller interacts with the content in the instant messaging account used by the respective controller for the period of time for which the controller is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like.

In addition, each controller can only interact with content in the instant messaging account used by the respective controller for the period of time for which the controller is granted access rights.

When the supervised is a role, the IM account used by the supervised contains the IM account associated with the role; when the controlled person is a user, the instant messaging account used by the controlled person contains an instant messaging account associated with the user, an instant messaging account associated with the employee to whom the user corresponds, and an instant messaging account, associated with the role associated with the user; when the supervised is an employee, the instant messaging account used by the supervised contains an instant messaging account associated with the employee, an instant messaging account associated with the user to which the employee corresponds, and an instant messaging account, associated with the role that is associated with the user to which the employee corresponds.

The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account). instant messaging in the system), and in this case the step of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system.

Embodiment 16: The method for setting the time period for which instant message content is allowed to be processed in the system includes the following steps.

S151 - selecting a role, user or employee as controlled.

A role is a separate entity, not a group/class, and one role can only be associated with one user at a time, while one user is associated with one or more roles, and the user receives the rights of the associated roles. When creating a role or after creating a role, a department is selected for the role, and the role belongs to the department, while the rights of the role are granted based on the job responsibilities of the role, and the name of the role in such department is the only one, and the role number is the only one in the system.

When a specified user is transferred to another department, the user's association with a role in the previous department is removed and the user is associated with a role in the new department.

Once a role is created, the role can be associated during the user creation process, and it can also be associated at any time after the user is created. After you associate a user with a role, you can delete the link relationship to the role at any time, and you can also create a link relationship with other roles at any time.

One employee corresponds to one user, one user corresponds to one employee, and the employee defines (obtains) rights through the role that is associated with the user to which he corresponds.

S152 - setting each monitored period of time in respect of which the access right is granted, wherein the period of time in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from time of binding the subject with access to

-

Claims (15)

instant messages with the instant messaging account with which it is currently associated, up to the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time the system is implemented; and a period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the current point in time. All controllers to which each supervisee corresponds work with the content in the instant messaging account used by the supervisee for the period of time for which the supervisee is granted access rights. In this case, the operation includes one or more of viewing data/content, deleting data/content, and the like. In addition, all controllers to which each supervisee corresponds can only interact with the content in the instant messaging account used by the supervisee for the period of time for which the supervisee is granted access rights. When the supervised is a role, the IM account used by the supervised contains the IM account associated with the role; when the controlled person is a user, the instant messaging account used by the controlled person contains an instant messaging account associated with the user, an instant messaging account associated with the employee to whom the user corresponds, and an instant messaging account, associated with the role associated with the user; when the supervised is an employee, the instant messaging account used by the supervised contains an instant messaging account associated with the employee, an instant messaging account associated with the user to which the employee corresponds, and an instant messaging account, associated with the role that is associated with the user to which the employee corresponds. The instant messaging account source contains one or both of the following two types: 1) An instant messaging account is an instant messaging account of the instant messaging program (software) on the system (i.e., an instant messaging account). instant messaging in the system), and in this case the step of creating an account for instant messaging is additionally provided; 2) Instant messaging account is an instant messaging account of instant messaging software provided by a third party. In this case, the system is the management system used in production and non-production organizations, etc.; The instant messaging program in the system is only a component of the system, not the entire main part of the system. The above are only preferred embodiments of the present invention, and it should be understood that the present invention is not at all limited to the embodiments disclosed herein, which should not be construed as exclusive of other embodiments, but can be applied to any other combinations, variations and environments, Therefore, without deviating from the discussed essence of the present invention, changes can be made to it based on the above ideas or technologies or knowledge from related fields. Moreover, unless there is a departure from the spirit and scope of the present invention, changes and modifications suggested by those skilled in the art are intended to be within the scope of protection of the present invention as defined by the appended claims. CLAIM 1. A method of setting the period of time for which work with the contents of a mailbox is allowed in the system, characterized in that it includes: selecting a role, user or employee as a mailbox subscriber; establishing for each mailbox subscriber a period of time for which access rights are granted, wherein said period of time for which access rights are granted comprises one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time, to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; the mailbox subscriber's performance of content for the period of time for which the mailbox subscriber is granted access rights in the mailbox account, - 29 044698 which is used by a mailbox subscriber, while the specified mailbox account is associated with only one role in the same period, while the specified role is associated only with the specified mailbox account, while the role is independent and in one and the same the same period is associated with only one user, wherein one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 2. A method for setting the period of time during which work with the contents of a mailbox is allowed in the system, characterized in that it includes: setting a time period for which an access right is granted for a mailbox account, wherein the specified time period for which an access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting down a fixed the period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; all roles, users, and employees using a mailbox account interact with content in the mailbox account for the period of time for which the mailbox account access right is granted, and the specified mailbox account is in the same period is associated with only one role, while the specified role is associated only with the specified mailbox account, while the role is independent and in the same period is associated with only one user, while one user is associated with one or more roles with the ability Granting a user one or more access rights associated with one or more roles. 3. A method for setting the period of time during which work with the contents of a mailbox is allowed in the system, characterized in that it includes: selecting a role, user or employee as a controller; setting one or more monitored for each controller, where the monitored is a role, user or employee; setting each controller a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time, up to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; each controller's performance of work on content in a mailbox account used by the corresponding supervised person for a period of time for which the controller is granted access rights, wherein the work controller and each of the one or more supervised persons represents a user or role, wherein said account mailbox in the same period is associated with only one role, while the specified role is associated only with the specified mailbox account, while the role is independent and in the same period is associated with only one user, while one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 4. A method for setting the period of time during which work with the contents of a mailbox is allowed in the system, characterized in that it includes: selecting a role, user or employee as controlled; setting for each controlled person a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time, up to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; the execution by all controllers to which each supervisee corresponds to work on the content in the mailbox account used by the supervisee for a period of time for which the supervisee is granted access rights, where the work controller and each of one or more supervisees represents a user or role, in this case, the specified mailbox account is associated with only one role in the same period, while the specified role is associated only with the specified mailbox account, while the role is independent and in the same period is associated with only one user, wherein one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 5. A method for setting the period of time during which work with the contents of a mailbox is allowed in the system, characterized in that it includes: selecting a role, user or employee as a mailbox subscriber; assigning to each mailbox subscriber a period of time for which the access right is granted, wherein the time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time of association of the mailbox subscriber with the mailbox account with which he is currently associated, up to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation and the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until current moment in time; the execution by a mailbox subscriber of content for a period of time for which the mailbox subscriber is granted access rights, in a mailbox account that is used by the mailbox subscriber, wherein said mailbox account is associated with only one role, while the specified role is associated only with the specified mailbox account, while the role is independent and is associated with only one user at a time, while one user is associated with one or more roles with the ability to provide the user with one or more access rights associated with one or more roles. 6. A method for setting the period of time during which work with the contents of a mailbox is allowed in the system, characterized in that it includes: setting for a mailbox account a time period for which the access right is granted, wherein the time period for which the access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the time of linking the mailbox account with the mailbox subscriber with which it is currently associated to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated until the time of implementation of the system; the period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated until the time of system implementation and the period of time from the time the mailbox account is associated with the mailbox subscriber with which it is currently associated until current moment in time; all roles, users, and employees using a mailbox account interact with content in the mailbox account for the period of time for which the mailbox account access right is granted, and the specified mailbox account is in the same period is associated with only one role, while the specified role is associated only with the specified mailbox account, while the role is independent and in the same period is associated with only one user, while one user is associated with one or more roles with the ability Granting a user one or more access rights associated with one or more roles. 7. A method for setting the period of time during which work with the contents of a mailbox is allowed in the system, characterized in that it includes: selecting a role, user or employee as a controller; setting one or more monitored for each controller, where the monitored is a role, user or employee; specifying to each controller a period of time in respect of which the access right is granted, wherein the time period in respect of which the access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the binding time a mailbox subscriber with the mailbox account with which he is currently associated, up to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation and the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until current moment - 31 044698 time; each controller's performance of work on content in a mailbox account used by the corresponding supervised person for a period of time for which the controller is granted access rights, wherein the work controller and each of the one or more supervised persons represents a user or role, wherein said account mailbox in the same period is associated with only one role, while the specified role is associated only with the specified mailbox account, while the role is independent and in the same period is associated with only one user, while one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 8. A method for setting the period of time during which work with the contents of a mailbox is allowed in the system, characterized in that it includes: selecting a role, user or employee as controlled; specifying to each controllable a period of time in respect of which the access right is granted, wherein the time period in respect of which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the binding time a mailbox subscriber with the mailbox account with which he is currently associated, up to the current point in time; the period of time from a point in time determined by counting forward a fixed period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of implementation of the system; the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until the time of system implementation and the period of time from the time the mailbox subscriber is associated with the mailbox account with which he is currently associated until current moment in time; the execution by all controllers to which each supervisee corresponds to work on the content in the mailbox account used by the supervisee for a period of time for which the supervisee is granted access rights, where the work controller and each of one or more supervisees represents a user or role, in this case, the specified mailbox account is associated with only one role in the same period, while the specified role is associated only with the specified mailbox account, while the role is independent and in the same period is associated with only one user, wherein one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 9. A method for setting the period of time for which work with the contents of instant messages is allowed in the system, characterized in that it includes: selecting a role, user, or employee as the subject with access to instant messages; specifying to each subject with access to instant messages a period of time for which the access right is granted, wherein said period of time for which the access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting down a fixed period of time from the current point in time to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; execution by an IM access subject of content in an instant messaging account used by an IM access subject for a period of time for which the IM access subject is granted the access right, whereby the specified account for instant messaging in the same period is associated with only one role, while the specified role is associated only with the specified instant messaging account, and the role is a separate entity, not a group or class, and in the same period is associated with only one user, wherein one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 10. A method for setting the period of time for which work with the contents of instant messages is allowed in the system, characterized in that it includes: setting a period of time for which an access right is granted for an instant messaging account, wherein said period of time for which an access right is granted comprises one or more of the following four types: a period of time from a point in time determined by reverse counting a fixed period of time from the current point in time to the current point in time; the time period from the start time to the current 32 044698 point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; All roles, users, and employees using the instant messaging account interact with content in the instant messaging account for the period of time for which the access right for the instant messaging account is granted, and the specified account for instant messaging in the same period is associated with only one role, while the specified role is associated only with the specified instant messaging account, while the role is independent and is associated with only one user in the same period, while one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 11. A method of setting the period of time for which work with the contents of instant messages is allowed in the system, characterized in that it includes: selecting a role, user or employee as a controller; setting one or more monitored for each controller, where the monitored is a role, user or employee; setting each controller a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time, up to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; each controller's performance of work on content in an instant messaging account used by the respective supervisee for a period of time for which the controller is granted access rights, wherein the work controller and each of one or more supervisees represents a user or role, wherein the specified an IM account is associated with only one role in the same period, while the specified role is associated only with the specified IM account, while the role is independent and is associated with only one user in the same period , wherein one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 12. A method for setting the period of time for which work with the contents of instant messages is allowed in the system, characterized in that it includes: selecting a role, user or employee as controlled; setting for each controlled person a period of time in respect of which the right of access is granted, wherein the specified period of time in respect of which the right of access is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the current point in time, up to the current point in time; the period of time from the start time to the current point in time; the time period from the end time to the system implementation time and the time period from the start time to the end time; the execution by all controllers, to whom each supervisee corresponds, of working with the content in the instant messaging account used by the supervisee, for a period of time for which the supervisee is granted access rights, where the work controller and the supervisee represent a user or role, wherein the specified an IM account is associated with only one role in the same period, while the specified role is associated only with the specified IM account, while the role is independent and is associated with only one user in the same period , wherein one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 13. A method for setting the period of time for which work with the contents of instant messages is allowed in the system, characterized in that it includes: selecting a role, user, or employee as the subject with access to instant messages; setting each subject with access to instant messages a period of time for which the access right is granted, wherein the time period for which the access right is granted contains one or more of the following four types: a period of time from a point in time determined by counting back a fixed the length of time from the time the subject is associated with access to instant messages with the instant messaging account with which he is currently associated until the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with instant messaging access is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; and the period of time from the time the subject with access to instant messages is associated with the instant messaging account , with which it is currently associated, up to the current point in time; execution by an IM access subject of content in an instant messaging account used by an IM access subject for a period of time for which the IM access subject is granted the access right, whereby the specified account for instant messaging in the same period is associated with only one role, while the specified role is associated only with the specified instant messaging account, while the role is independent and is associated with only one user in the same period, while one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 14. A method of setting the period of time for which work with the contents of instant messages is allowed in the system, characterized in that it includes: setting for an instant messaging account a time period for which the access right is granted, wherein the time period for which the access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting back a fixed the length of time from the time the instant messaging account is associated with the instant messaging entity with which it is currently associated until the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the instant messaging account is associated with the instant messaging entity with which it is currently associated until the time the system is implemented; the period of time from the time the instant messaging account is associated with the subject with access to instant messages with which it is currently associated until the time of implementation of the system and the period of time from the time the account is associated with instant messaging with the subject with access to instant messages , with which it is connected at the current moment, up to the current point in time; All roles, users, and employees using the instant messaging account interact with content in the instant messaging account for the period of time for which the access right for the instant messaging account is granted, and the specified account for instant messaging in the same period is associated with only one role, while the specified role is associated only with the specified instant messaging account, while the role is independent and is associated with only one user in the same period, while one user is associated with one or more roles with the ability to grant the user one or more access rights associated with one or more roles. 15. A method of setting the period of time for which work with the contents of instant messages is allowed in the system, characterized in that it includes: selecting a role, user or employee as a controller; setting one or more monitored for each controller, where the monitored is a role, user or employee; specifying to each controller a period of time in respect of which the access right is granted, wherein the time period in respect of which the access right is granted comprises one or more of the following four types: a period of time from a point in time determined by counting back a fixed period of time from the binding time a subject with access to instant messages with an instant messaging account with which he is currently associated, up to the current point in time; a period of time from a point in time determined by counting forward a fixed period of time from the time the subject with access to instant messages is associated with the instant messaging account with which he is currently associated until the time of implementation of the system; the period of time from the time the subject with IM access is associated with the instant messaging account with which he is currently associated until the time of implementation of the system and the period of time from the time of association -