JP2001154899A - Device for managing file and medium for recording program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a file managing device for allowing a user to comfortably browse and operate a file. SOLUTION: This file managing device is provided with a means for obtaining user information, checking access authority, and then performing interface processing for a processing request, a means for performing interface processing for a request for processing without obtaining user information when a request for processing is issued, and a rewriting means for rewriting a display control file to be processed which is described in language with a tag for a screen operation, and used for the display of information necessary for the request for processing so that the former means can be called when an access limit is set in the destination of the request for processing, and for rewriting the display control file so that the latter means can be called when the setting of the access limit is released.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention stores a file management apparatus for managing files and allowing a plurality of users to browse and operate the files, and a program used to realize the apparatus. The present invention relates to a program recording medium, and more particularly, to a file management device that allows a user to browse and operate a file comfortably, and a program recording medium used for realizing the device.

[0002] The Web filing system adopts a configuration in which a CGI program (common gate interface program) for managing an interface between a WWW service and a client is developed on a server.
The CGI program controls the user authentication and processes the access right check according to the user information obtained by the user authentication.

[0003] When performing user authentication, the user is required to input user information, which is troublesome for the user. Therefore, when user authentication is not required, this input can be omitted. It is preferable that the user can comfortably browse and operate the file.

[0004]

2. Description of the Related Art When a WWW service executes a CGI program, it is determined whether or not to perform user authentication based on whether execution (access) of the CGI program is restricted.

[0005] From now on, when there is a possibility that access restriction may be imposed on a file on the server, a CGI program to which execution restriction is set is prepared, and this CGI program is used for a user. In this configuration, user authentication is performed by requesting input of a user name and a password, and it is checked whether or not the user has an access right to the file in accordance with the input user information. .

[0006]

However, according to such a conventional technique, there is a problem that a user cannot comfortably browse and operate a file.

In other words, according to the prior art, even when access to a file on the server is not restricted, a CGI program to which execution restriction is set is used. A user name and a password must be entered in response to a program request, and there is a problem in that the user is not able to browse and operate the file comfortably because of unnecessary operations.

[0008] By using a CGI program to which no execution restriction is set, a user can browse and operate a file to which access is not restricted without inputting a user name and a password. According to the configuration, if access restriction is applied to the file, the user authentication is not performed, so that a user having access right cannot view or operate the file. Become.

[0009] The present invention has been made in view of the above circumstances, and there is a configuration in which a file is managed and a plurality of users are allowed to view and operate the file. It is an object of the present invention to provide a new file management device that enables comfortable browsing and manipulation of files, and a new program recording medium used for realizing the device.

[0010]

In order to achieve this object, a file management apparatus according to the present invention obtains user information and checks an access right when a processing request for a folder or a file is issued. A first interface unit for executing an interface process for the processing request, and a second interface unit for executing an interface process for the processing request without obtaining user information when there is a processing request for a folder or a file. And access to the processing request destination with the display control file described in the interface means of 2 and a display language which is described in a tagged language for screen operation and used for displaying information required for processing the folder or file as a processing target. Invoking the first interface means when the limit is set Rewriting means for rewriting the display control file so that the display control file is rewritten so as to call the second interface means when the setting of the access restriction for the processing request destination is released. It comprises so that it may be provided.

The functions of the file management apparatus of the present invention configured as described above are specifically realized by a program, which is stored on a floppy disk or the like, or stored on a disk such as a server. The present invention is realized by being stored and then installed in the file management device of the present invention and operating on the memory.

In the file management apparatus according to the present invention, when access restriction is set for a processing request destination such as a folder, the rewriting means calls the first interface means so as to call the first interface means. Rewrite. On the other hand, when the setting of the access restriction is released, the rewriting means rewrites the display control file so as to call the second interface means.

[0013] From now on, if a user performs a click operation while presenting information necessary for a processing request to the client device using the display control file, access restriction is set to the processing request destination. In this case, the first interface means is called, whereby the user can receive the access right check by inputting the user information, and only the user having the access right can view and operate the file. Become like On the other hand, when the access restriction is not set for the processing request destination, the second interface means is called, whereby the user can immediately browse and operate the file without inputting the user information.

As described above, according to the present invention, it is necessary to check the access right when adopting a configuration in which a file is managed and a plurality of users are allowed to view and operate the file. Only when the user is required to enter the user information, and when it is not necessary to check the access right, the user information is not required. Therefore, the user is not required to enter the user information unnecessarily. You will be able to browse and operate files comfortably.

[0015]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail according to an embodiment applied to a server / client system.

FIG. 1 shows an embodiment of a server 1 equipped with the present invention.

The server 1 according to this embodiment adopts a configuration for managing files and posts the contents of those files to a plurality of clients 2 (deploying the browser 200) connected via the network 3. In addition, a process for operating (updating, deleting, etc.) these files in response to a request from the client 2 is performed. The file management mechanism 10 and the access right check C
GI program 20, access right non-check CGI program 30, and access right setting CGI program 4
0 and an operating system 50.

Here, prepared to realize the present invention,
Access right check CGI program 20, access right non-check CGI program 30, access right setting C
The GI program 40 is stored in an appropriate recording medium such as a computer readable semiconductor memory.

The file management mechanism 10 has a configuration in which a plurality of folders 11-i (i = 1 to n) are prepared and files 12 to be posted to the client 2 are stored therein. Further, there is provided an HTML file 13-i (i = 1 to n) describing screen data for displaying a list of files 12 stored in the folder and an operation menu corresponding to the list, in association with each folder 11-i. It has a configuration.

Access right check CGI program 20
Is called from the HTML file 13-i and executes interface processing for a processing request issued by the browser 200 on condition that the access right set in the folder 11-i is satisfied.

Access right non-check CGI program 3
No. 0 is called from the HTML file 13-i and executes interface processing for a processing request issued by the browser 200 without considering restrictions on access rights set in the folder 11-i.

Access right setting CGI program 40
Sets a restriction on access rights for each folder 11-i such that any user group is allowed to operate the file 12 and any user group is not allowed to operate the file 12. Perform processing to release the set access right restrictions.

Here, when an access right restriction for at least one user group is set for a certain folder 11-i, the folder 11-i enters a state where the access restriction is set. Means

The operating system 50 is shown in FIG.
As shown in FIG. 2A, user information (information on the correspondence between the user name, the password of the user, and the group name to which the user belongs) is managed, and as shown in FIG. The access right restriction information set by the right setting CGI program 40 is managed.

Next, the display screen displayed by the HTML file 13-i will be described in detail.

Browser 20 deployed on client 2
When a browsing request is issued from 0, a folder tree (hierarchy) is first displayed on the display of the client 2 according to the HTML file 13-i provided in association with each folder 11-i as shown in FIG. A list of names of the folders 11-i having a structure described in a tree structure is displayed.

Subsequently, when a folder name is selected from the folder tree, a list of the names of the files 12 stored in the folder 11-i is displayed according to the HTML file 13-i as shown in FIG. And the "Operation Menu"
A button and a "search" button will be displayed.

Subsequently, when an "operation menu" button provided in the display screen is clicked, according to the HTML file 13-i, as shown in FIG.
An operation menu for the file 12 stored in the folder 11-i is displayed.

When an operation item is clicked from the operation menu displayed in this manner, the access right check CGI program 20 or the access right non-check CGI program 30 is called, and the clicked operation is designated. Enter processing.

At this time, whether the access right check CGI program 20 or the access right non-check CGI program 30 is called depends on the HTML.
Follow the description in file 13-i.

That is, as shown in FIG. 6A, a folder storing the access right non-check CGI program 30 as a description of the HTML file 13-i called when an operation item is clicked from the operation menu. The path to / Scripts / Pragma / Filer / ShowFmCGI.
When "exe" is described, the access right non-check CGI program 30 is called.

On the other hand, as shown in FIG. 6B, an access right check CGI program 20 is stored as a description of the HTML file 13-i called when an operation item is clicked from the operation menu. "/ Scripts / Pragma / Filer / Secure / S
When "howFmCGI.exe" is described, the access right check CGI program 20 is called.

Here, “Commmand.v” included in this description
The information on which operation item was clicked according to the value of “alue” is the access right check CGI program 2
0 or the access right non-check CGI program 30 is notified.

On the other hand, when "set folder access right" on the display screen shown in FIG. 5 is clicked, the access right setting CGI program 40 is called.

When started in this manner, the access right setting CGI program 40 first starts the client 2 in step 1 as shown in the processing flow of FIG.
Of the folder 1 as shown in FIG.
Display the access right setting screen for 1-i.

That is, any user group is allowed to operate the file 12 stored in the folder 11-i,
An access right setting screen for setting an access right for not allowing any user group to operate the file 12 stored in the folder 11-i and releasing the setting is displayed.

Subsequently, in step 2, by acquiring the input data value to the access right setting screen, the folder 1
The set value of the access right for 1-i is obtained, and in the subsequent step 3, the operating system 50 is requested to set / cancel the access right according to the obtained set value.

In response to this request, the operating system 50 performs a process of updating the access right restriction information shown in FIG.

Subsequently, in step 4, as a result of the processing in step 3, the folder 11-i with no access restriction is changed to the folder 11-i with access restriction (restriction of access right to at least one user group is set). Folder 11-i) has been changed to
When it is determined that such a change has been made, the process proceeds to step 5, where the access right check CGI program 2 is executed.
0 is called, the description of the HTML file 13-i prepared in association with the folder 11-i is rewritten, and the process ends.

That is, the path to the folder storing the CGI program described in the HTML file 13-i is changed from “/Scripts/Pragma/Filer/ShowFmCGI.exe” to “/ Scripts / Pragma / Filer / Secure”. / ShowFmCG
I.exe ".

On the other hand, in step 4, the folder 11-i with access restriction is changed from the folder 11-i with no access restriction.
If it is determined that the folder 11-i has not been changed to the folder 11-i
Is determined to have been changed to the folder 11-i with no access restriction, and when it is determined that the change has been made in this way, the process proceeds to step 7 to call the access right non-check CGI program 30. Then, the description of the HTML file 13-i prepared in association with the folder 11-i is rewritten, and the process ends.

That is, the path to the folder storing the CGI program described in the HTML file 13-i is set to "/Scripts/Pragma/Filer/Secure/ShowFmCGI.exe".
From the description, `` / Scripts / Pragma / Filer / ShowFmCGI.
exe ”.

On the other hand, in step 6, from the folder 11-i with access restriction to the folder 11-i without access restriction
When it is determined that the folder has not been changed to, that is, the folder 1 with the same access restriction as before
If it is determined that the folder 11-i is the folder 11-i without access restriction as before,
The processing is terminated without rewriting the L file 13-i.

As described above, the access right setting CGI
When the access restriction is set for the folder 11-i, the program 40 requests the HTML file 13-i prepared in association with the folder 11-i to call the access right check CGI program 20. While rewriting the description of the HTML file 13-i,
When the access restriction on the folder 11-i is released, H prepared in association with the folder 11-i is prepared.
When the TML file 13-i calls the access right non-check CGI program 30, processing is performed to rewrite the description of the HTML file 13-i.

Next, the processing executed by the access right check CGI program 20 will be described with reference to the processing flow of FIG.
The processing executed by the access right non-check CGI program 30 will be described.

Access right check CGI program 20
Is called according to the description of the HTML file 13-i by clicking an operation item from the operation menu shown in FIG. 5, as shown in the processing flow of FIG.
First, in step 1, it is determined whether or not this is the first operation request for the folder 11-i displaying the operation menu.

By this judgment processing, the folder 11-i
When it is determined that this is the first operation request to the client 2, the process proceeds to step 2, where a user name and password are input by displaying a user information input screen as shown in FIG.

Subsequently, in step 3, a user authentication request is issued to the operating system 50 by designating the input user name and password.

In response to the request, the operating system 50 performs user authentication as to whether or not the user is an authorized user according to the management data of the user information shown in FIG. 2A, and returns the result. come.

Subsequently, in step 4, it is determined whether or not a reply that the user is a legitimate user is returned from the operating system 50, and it is determined that a reply that the user is not a legitimate user is returned. If so, proceed to step 5 and request the user to re-enter the user name and password, and then re-enter the user name and password.
Return to step 3.

On the other hand, if it is determined in step 4 that the operating system 50 has returned a response indicating that the user is a legitimate user, the process proceeds to step 6 where the input user name is specified and the operating system 5
A request to check the access right is issued to 0.

In response to this request, the operating system 50 specifies the group name indicated by the user name in accordance with the management data of the user information shown in FIG.
By referring to the management data of the access right restriction information shown in FIG. 2B using the group name as a search key, an access right check is performed to determine whether or not the user has the access right. Will reply.

Subsequently, in step 7, it is determined whether or not the operating system 50 has returned a response that the user has the access right, and the response that the user does not have the access right is determined. Is returned, the process proceeds to step 8, a message to that effect is displayed, and the process ends. That is, a message as shown in FIG. 12 is displayed, and the process ends.

On the other hand, when it is determined in step 7 that the operating system 50 has returned a response indicating that the user has the access right, the flow advances to step 9 to display the requested operation screen and display The user performs an operation on the file 12 (folder 11-i) by interacting with.

For example, when "text registration" is selected from the operation menu shown in FIG. 5, a text registration screen as shown in FIG. 13 used for text registration is displayed, and the user interacts with the user. , A new text is registered in the folder 11-i.

When it is determined in step 1 that this is not the first operation request for the folder 11-i displaying the operation menu, that is, when it is determined that the access right has already been checked. Immediately proceed to step 9 to display the requested operation screen,
By interacting with the user, the file 12 (folder 11
Perform the operation for -i).

As described above, the access right check CG
When the access restriction is set for the folder 11-i, the I program 20 is called by clicking an operation item from the operation menu shown in FIG. Prompt for input,
In accordance therewith, user authentication and access right check are performed by requesting the operating system 50. As a result, when it is confirmed that the user has the access right, the file 12 or the folder 11-i requested by the user is requested.
The processing is performed so as to execute the operation for.

On the other hand, when the access right non-check CGI program 30 is called according to the description of the HTML file 13-i by clicking an operation item from the operation menu shown in FIG. 5, the processing flow of FIG. As shown in (1), the requested operation screen is displayed immediately and the user interacts with the file 12 (folder 11-).
Perform the operation for i).

For example, when "text registration" is selected from the operation menu shown in FIG. 5, a text registration screen as shown in FIG. 13 used for text registration is displayed, and the user interacts with the user. , A new text is registered in the folder 11-i.

Thus, the access right non-check C
When no access restriction is set for the folder 11-i, the GI program 30 is called by clicking an operation item from the operation menu shown in FIG. The processing is performed so as to immediately execute the operation on the file 12 or the folder 11-i requested by the user without requesting the input.

The present invention has been described with reference to the illustrated embodiments.
The present invention is not limited to this. For example, in the embodiment, a specific example has been described in which the access restriction is set for the operation of the file 12 and the folder 11-i. However, the present invention sets the access restriction for the browsing of the file 12 and the like. This can be applied as it is even in the case of adopting a configuration of performing the operation.

[0062]

As described above, according to the present invention,
When adopting a configuration that manages files and allows multiple users to view and operate those files, only when it is necessary to check access rights, request entry of user information, and When the check is not necessary, the user information is not required to be input, so that the user is not required to input the user name and password unnecessarily, so that the user can view and operate the file comfortably. Become.

[Brief description of the drawings]

FIG. 1 is an embodiment of the present invention.

FIG. 2 is an explanatory diagram of user information / access right information managed by an OS.

FIG. 3 is an explanatory diagram of a display screen.

FIG. 4 is an explanatory diagram of a display screen.

FIG. 5 is an explanatory diagram of a display screen.

FIG. 6 is an explanatory diagram of an HTML file.

FIG. 7 is a processing flow of an access right setting CGI program.

FIG. 8 is an explanatory diagram of a display screen.

FIG. 9 is a processing flow of an access right check CGI program.

FIG. 10 is a processing flow of an access right non-check CGI program.

FIG. 11 is an explanatory diagram of a display screen.

FIG. 12 is an explanatory diagram of a display screen.

FIG. 13 is an explanatory diagram of a display screen.

[Explanation of symbols]

 Reference Signs List 1 server 2 client 3 network 10 file management mechanism 11 folder 12 file 13 HTML file 20 access right check CGI program 30 access right non-check CGI program 40 access right setting CGI program 50 operating system 200 browser

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B017 AA07 BA05 BA06 BB02 CA03 CA16 5B082 AA00 BA00 EA12 FA16 GA11 GC04 5E501 AC20 AC33 AC35 AC42 DA02 EA15 EB05 FA08

Claims (2)

[Claims] In a file management apparatus for managing a file accessed by a plurality of users, when there is a processing request for a folder or a file, the user information is obtained, the access right is checked, and then the processing request is made. Interface means for executing an interface process for a file or a folder or file, and second interface means for executing an interface process for the process request without obtaining user information when there is a process request for a folder or a file When an access restriction is set for the processing request destination with a display control file described in a tagged language for screen operation and used for displaying information necessary for the processing request as a processing target Prompts the user to call the first interface means. Rewriting means for rewriting the control file and rewriting the display control file so as to call the second interface means when the setting of the access restriction is released. File management device. 2. A program recording medium for storing a program used for realizing a file management device for managing a file accessed by a plurality of users, wherein user information is stored when a processing request for a folder or a file is issued. A first interface process for executing an interface process for the process request after obtaining and checking the access right; and when a process request for a folder or a file is made, the user information is obtained without obtaining user information. A second interface process for executing an interface process for a process request; and a display control file described in a tagged language for a screen operation and used for displaying information necessary for the process request. When the access restriction is set for the processing request destination, The display control file is rewritten so as to invoke the first interface processing, and the display is executed so as to invoke the second interface processing when the setting of the access restriction is released. A program recording medium storing a program for causing a computer to execute a rewriting process for rewriting a control file.