JP2010282298A - System, method and program for retrieving database - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a database retrieval system which can restrict a retrieval range. <P>SOLUTION: This database retrieval system includes: an application execution part 7 equipped with a user information storage part 71 for storing information on the authority and assignment of a user and a database 72 for storing data; a storage part 6 for setting a table which is retrievable from the database 72 for each piece of information on authority and assignment, items in the table and a retrievable range in the items; a log-in user information generation part 3 for reading the information on the authority and assignment of the user from the user information storage part 71; and a retrieval control part 4 for performing control to read the table of the database 72 retrievable by the user from the storage part 6, the items in the table, and the retrievable range in the items based on the read information on the authority and assignment of the user, and to generate a retrievable screen, and for executing retrieval according to retrieval conditions set by the user according to the operation of the retrieval screen. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a database search system that limits a database search target according to a user.

  Conventionally, an information system that executes various applications in a company or the like includes a database. In general, a database stores data in a table format called a table, and is composed of a plurality of tables. Here, in addition to executing applications whose operations are fixed, users who use the information system (for example, employees in a company) may wish to freely browse and search the data stored in the database. Many. However, in order to search the database, specialized knowledge such as the structure of the database and technical terms is necessary, but these are difficult to understand, and it is difficult for general users to search the database.

  Therefore, as a technique for users to search the database without using specialized knowledge, for example, the definition information is referred to in response to a search request from the user, and an input screen having an extraction condition specification column is presented and specified. A technique for extracting data from a database according to extraction conditions and displaying a search result is disclosed in Patent Document 1 below. Further, a technique for presenting a search condition setting screen with reference to a database configuration definition file and a table configuration definition file, creating a search sentence from a specified search condition, and displaying a search result is disclosed in Patent Document 2 below. Has been.

JP 2007-0945570 A JP-A-10-320247

  However, according to the above-described conventional technique, when restricting the data browsing target according to the authority of the user in order to prevent the leakage of trade secrets, the browsing of a specific database table is prohibited for a specific user at the application level. There was a problem that such fine control was not possible. There is also a tool that allows the user to browse the database table directly, but there is a problem in that the user cannot control to limit the browsing target.

  This invention is made in view of the above, Comprising: When the user searches directly the data accumulate | stored in the database, the database search system which can restrict | limit the search range according to a user's authority is obtained. Objective.

  In order to solve the above-described problems and achieve the object, the present invention provides a user information storage unit for storing user authority and affiliation information, and a database for storing data necessary for execution of an application. For each user authority or affiliation information, a table searchable from the database, items in the table, search target storage means in which a searchable range in the item is set, and Login user information generation means for reading user authority and affiliation information assigned by the application execution means from the user information storage unit, and the search based on the information read by the login user information generation means Database table that can be searched by the user from the target storage means, items in the table, items Search control means for performing a control for generating a search screen for a user to set a search condition in the searchable range, and performing a search according to the search condition set by the user by operating the search screen And.

  According to the present invention, the database search range can be limited according to the authority of the user.

FIG. 1 is a diagram illustrating a configuration example of a database search system. FIG. 2 is a flowchart showing a search control process for controlling a search target. FIG. 3 is a diagram illustrating a configuration example of a user information storage destination setting file. FIG. 4 is a diagram illustrating a configuration example of the login user information file. FIG. 5 is a diagram illustrating a configuration example of a default search target setting file. FIG. 6 is a diagram illustrating a configuration example of the authority-specific search target setting file. FIG. 7 is a diagram illustrating a configuration example of the search target setting file classified by affiliation. FIG. 8 is a diagram illustrating a configuration example of the table alias file. FIG. 9 is a diagram illustrating a configuration example of a search target table selection screen. FIG. 10 is a diagram illustrating a configuration example of the item alias file. FIG. 11 is a diagram illustrating a configuration example of a search screen. FIG. 12 is a diagram illustrating a configuration example of an electronic computer capable of executing a database search program.

  Embodiments of a database search system according to the present invention will be described below in detail with reference to the drawings. Note that the present invention is not limited to the embodiments.

Embodiment.
FIG. 1 is a diagram illustrating a configuration example of a database search system according to the present embodiment. The database search system includes an input unit 1, an authentication unit 2, a login user information generation unit 3, a search control unit 4, a display unit 5, a storage unit 6, and an application execution unit 7.

  The input unit 1 receives a user ID and password from a user. The authentication unit 2 performs user authentication based on the input user ID and password. The login user information generation unit 3 generates a login user information file for the authenticated user. The search control unit 4 acquires tables and items that can be searched in the database for the authenticated user, and outputs and stores them. The display unit 5 displays a search screen showing tables and items that can be searched by the user. The storage unit 6 is a memory for storing information necessary for authentication and search condition setting. The application execution unit 7 is an existing execution unit that provides an application.

  In addition, the storage unit 6 includes a user information storage destination setting file 61, a login user information file 62, a default search target setting file 63, an authority-specific search target setting file 64, an affiliation-specific search target setting file 65, and a table. An alias file 66, an item alias file 67, a table list storage unit 68, and a search condition storage unit 69 are provided.

  The user information storage destination setting file 61 is a setting information file indicating in which table item and in which table the application execution unit 7 stores the user ID, password, authority information, and affiliation information. The log-in user information file 62 is a file indicating information on a user ID, authority, and affiliation necessary for setting a searchable table or the like generated after log-in for an authenticated user.

  The default search target setting file 63 is a file that sets a table, target items, and condition ranges that can be searched regardless of the user ID, authority, and affiliation by default. The authority-specific search target setting file 64 is a file for setting a searchable table, target items, and condition ranges according to user authority. The affiliation-specific search target setting file 65 is a file for setting a table, target items, and condition ranges that can be searched by user affiliation.

  The table alias file 66 is a file for setting an “alias” of the table. When a search screen or the like is displayed, an “alias” of a table that is easy to understand for general users is displayed. The item alias file 67 is a file for setting an “alias” of an item. When the search screen is displayed, “alias” of an item that is easy to understand for general users is displayed.

  The table list storage unit 68 is a memory for storing information on tables that can be searched by the user. The search condition storage unit 69 is a memory for storing a search condition when a user actually searches as a file. By starting the stored file, the search conditions at the time of storage can be reproduced.

  The application execution unit 7 includes a user information storage unit 71 and a database 72. The user information storage unit 71 is a storage unit that stores a user ID and password required for authentication in the application execution unit 7. The database 72 is a storage unit for storing data necessary for executing the application.

  Next, a process for controlling a search target to automatically generate a search screen and executing a search in the database search system will be described with reference to a flowchart. FIG. 2 is a flowchart showing a search control process for controlling a search target. First, in the database search system, the authentication unit 2 displays a login screen on the display unit 5 (step S1). When the input unit 1 acquires the user ID and password from the user (step S2: Yes), the authentication unit 2 is notified of the user ID and password. If the user has not obtained the user ID and password (step S2: No), the login screen continues to be displayed (step S1).

  When the authentication unit 2 acquires the user ID and password from the input unit 1 (step S2: Yes), the user can use this system by referring to the user information storage destination setting file 61 in order to perform user authentication. The information of the table storing the user ID and password information is acquired.

  FIG. 3 is a diagram illustrating a configuration example of the user information storage destination setting file 61. The user information storage location setting file 61 records the storage location table name, the storage location item name (user ID), and the storage location item name (password) for the storage location of the user ID and password. This indicates which item of which table of the user information storage unit 71 storing user information (user ID / password) in the application execution unit 7 is stored with the user ID and password. The authentication unit 2 can easily acquire information necessary for authentication from the user information storage unit 71 by referring to the user information storage destination setting file 61.

  In addition, the user information storage destination setting file 61 includes a storage destination table name, a storage destination item name (authority type), a storage destination item name (authority level), a search key item name, and a search key as authority storage destinations. And recorded. By referring to these pieces of information, information regarding the user authority can be easily obtained from the application execution unit 7 as in the case of the authentication. The user information storage location setting file records a storage location table name, a storage location item name (affiliation), a search key item name, and a search key as the affiliation storage location. By referring to these pieces of information, information related to user affiliation can be easily obtained from the application execution unit 7 as in the case of the authentication. In this system, since the read destination can be changed by changing the storage destination information in the user information storage destination setting file 61, it is possible to easily cope with different applications.

  The authentication unit 2 searches the corresponding table in the user information storage unit 71 based on the storage location information acquired by referring to the user information storage destination file 61, and is specified by the user ID and password acquired by the input unit 1. The user who authenticates whether or not the system can be used (step S3). In the case of authentication NG (step S3: NG), the database search system ends the authentication process and returns to the login screen state (step S1). If the authentication is OK (step S3: OK), the login user information generation unit 3 generates a login user information file 62 (step S4).

  Specifically, the login user information generation unit 3 first refers to the authority storage destination of the user information storage destination setting file 61 and acquires information (authority type, authority level) related to authority from the user information storage unit 71. Next, the affiliation storage location of the user information storage location setting file 61 is referred to, and information related to affiliation is acquired from the user information storage unit 71. Then, the user ID, authority, and affiliation are collected as a login user information file 62. FIG. 4 is a diagram illustrating a configuration example of the login user information file 62. The login user information file 62 records information on user ID, authority, and affiliation. This file is used to select a table, items, etc. that can be searched by the user.

  In the database search system, after the login user information file 62 is generated, the search control unit 4 acquires information about tables and items that can be specifically searched by the user. First, the default search target setting file 63 is referred to, and as a default setting, a searchable table and item information searchable by all users are acquired (step S5).

  FIG. 5 is a diagram illustrating a configuration example of the default search target setting file 63. The default search target setting file 63 sets a target table, target items, and condition ranges that can be searched by all users. For example, in TABLE1, KOU1 to KOU3 can be searched for the target item, and the condition range of KOU1 and KOU2 is also limited. On the other hand, in TABLEs 2 to 5, all item images can be searched, but for TABLE 4, the condition range is limited to the user's affiliation range. Note that the searchable table and items that can be searched by all users may not be set.

  Next, the search control unit 4 refers to the authority-specific search object setting file 64 and acquires information on searchable items and ranges based on authority (authority type, authority level) (step S6). FIG. 6 is a diagram illustrating a configuration example of the authority-specific search target setting file 64. The authority-specific search target setting file 64 is a file in which authority types, authority levels, target tables, target items, and condition ranges are set. For example, when the authority type “customer master browsing authority” of the logged-in user is “1”, the search target table is “MST_CUSTOMER”, the target item is “ALL”, and the condition range is “TANTOU”. However, in the case of the authority level “2”, the condition range is “ALL”. Regarding the authority type “employee master browsing authority”, the target items and condition ranges differ depending on the authority level.

  Here, according to the example of the login user information file 62 of FIG. 4, the authority type “customer master viewing restriction” is set at the authority level “1”, and the authority type “employee master viewing authority” is set at the authority level “2”. Search for items by range.

  Next, the search control unit 4 refers to the affiliation-specific search target setting file 65 and acquires information about searchable items and ranges based on the affiliation (step S7). FIG. 7 is a diagram illustrating a configuration example of the affiliation-specific search target setting file 65. The affiliation search target setting file 65 is set for affiliation, target table, target item, and condition range. For example, if the logged-in user's affiliation is “Headquarters / Human Resources Department”, the target table “MST_EMPLOYEE” can be searched for all target items and condition ranges (“ALL”), but if the affiliation is other, the target Items and condition ranges will be limited.

  Here, according to the example of the log-in user information file 62 in FIG. 4, it is possible to search for items within the range set by the affiliation “Tokyo branch / HR department” and “Tokyo branch / general affairs department”. In addition, when there are a plurality of affiliations and the target items and condition ranges that can be searched for are different, the search is made possible in the widest range permitted by the affiliations.

  Next, when there is no searchable table, the search control unit 4 ends the process (step S8: No). When one or more searchable tables exist (step S8: Yes), the table alias is acquired based on the table alias file, and the name is converted (step S9). FIG. 8 is a diagram illustrating a configuration example of the table alias file 66. Normally, the name of each table in the database is difficult to understand for general users, and is therefore converted to an easy-to-understand name. For example, the table name “MST_EMPLOYEE” is converted to “employee master” and displayed as “employee master” on the search screen.

  After converting the table name, the search control unit 4 displays the searchable table on the display unit 5 (step S10). FIG. 9 is a diagram illustrating a configuration example of a searchable table selection screen. When there are a plurality of searchable tables, a table to be searched can be selected by selecting one table and pressing a selection button.

  Here, the display is continued until the table is selected (step S11: No), and when the table is selected (step S11: Yes), the search control unit 4 can search for the selected table. Items and condition ranges are acquired (step S12). Specifically, it is the contents shown in the target item and the condition range in each table shown in the files of FIGS. Further, the search control unit 4 acquires an item alias based on the item alias file 67, and converts the name (step S13). FIG. 10 is a diagram illustrating a configuration example of the item alias file 67. For example, when the employee master table is selected in step S12, each item of MST_EMPLOYEE is displayed as an alias. Specifically, the item “ID” is converted into a name that is easy for a general user to understand so as to be displayed as an alias “employee number”.

  After converting the item name, the search control unit 4 displays a search screen for the table selected in step S11 (step S14). FIG. 11 is a diagram illustrating a configuration example of a search screen. Here, as search conditions, searchable items can be added under the Or condition. If the search range is limited, the condition is automatically set as And in the searchable condition range at the bottom of the search screen. And the search control part 4 searches the database 72 based on the designated conditions (step S15). The search method is the same as a general database search method except that items and ranges are automatically limited.

  By limiting the target items and condition ranges in this way, even when the user directly searches the database 72, the search target can be limited according to the user. Further, by displaying a search screen within a searchable range, the user can be instructed to perform an operation within the searchable range.

  In this system, specific search conditions set on the search screen can be stored in a file format (step S16). Specifically, the search screen shown in FIG. 11 is stored when the user presses a search condition save button. Thus, by starting the file, the set time can be shortened when searching frequently under the same conditions. Further, by distributing the file, the same search condition can be shown to other users.

  As described above, according to the present embodiment, when a user directly searches a database, a table and items to be searched are finely divided based on user authority and affiliation information defined at an existing application level. It was decided that it could be restricted. Thereby, leakage of information can be prevented by limiting the disclosure of unnecessary information. It is also possible to store search conditions when the user searches the database. Thereby, it is possible to shorten the set time when the search is frequently performed under the same conditions.

  FIG. 12 is a diagram illustrating a configuration example of an electronic computer that has a function as a search screen automatic generation system according to the present embodiment and can execute the database search program according to the present embodiment.

  The electronic computer includes, for example, a control unit 101 including a CPU (corresponding to the authentication unit 2, the login user information generation unit 3, and the search control unit 4), a memory unit 102 (corresponding to the storage unit 6), a display unit, and the like. 103 (corresponding to the display unit 5), an input unit 104 (corresponding to the input unit 1), a CD-ROM drive unit 105, a disk unit 106, and an external I / F unit 107. The units are connected to each other via a system bus A.

  In FIG. 12, the control unit 101 executes the database search program. The memory unit 102 includes various memories such as RAM and ROM, and stores programs to be executed by the control unit 101, necessary data obtained in the course of processing, and the like. The display unit 103 is composed of a CRT, LCD (liquid crystal display panel), or the like, and displays various screens to the user of the electronic computer. The input unit 104 includes a keyboard, a mouse, and the like, and is used by a user of an electronic computer to input various information. The illustrated CD-ROM 200 stores a database search program that describes the processing of the present embodiment.

  Here, an operation example of the electronic computer until the database search program becomes executable will be described. First, in the electronic computer configured as described above, a database search program is installed in the disk unit 106 from the CD-ROM 200 set in the CD-ROM drive unit 105. Then, the program read from the disk unit 106 is stored in the memory unit 102 when the electronic computer is activated or when the program is executed. In this state, the control unit 101 executes database search processing according to a program stored in the memory unit 102.

  In the present embodiment, the database search program is provided by the CD-ROM 200. However, the recording medium of the program is not limited to this, and may be, for example, according to the computer constituting the system. Other recording media such as a floppy (registered trademark) disk and DVD can also be used. Moreover, it is good also as using the program provided by transmission media, such as an email and the internet.

  As described above, the database search system according to the present invention is useful for searching a database, and is particularly suitable for a search system that can limit the search range of a database according to a user.

DESCRIPTION OF SYMBOLS 1 Input part 2 Authentication part 3 Login user information generation part 4 Search control part 5 Display part 6 Storage part 7 Application execution part 61 User information storage location setting file 62 Login user information file 63 Default search object setting file 64 Search object setting by authority File 65 Search target setting file by affiliation 66 Table alias file 67 Item alias file 68 Table list storage unit 69 Search condition storage unit 71 User information storage unit 72 Database

Claims (7)

Application execution means comprising: a user information storage unit for storing user authority and affiliation information; and a database for storing data necessary for execution of the application;
A search target storage unit in which a table that can be searched from the database, items in the table, and a searchable range in the items are set for each user authority or affiliation information;
Login user information generation means for reading out user authority and affiliation information assigned by the application execution means from the user information storage unit,
Based on the information read by the login user information generating means, the database table that can be searched by the user, the items in the table, the searchable range in the items are read from the search target storage means, and the search is possible Search control means for performing a control for generating a search screen for a user to set a search condition in a range, and executing a search according to the search condition set by operation of the search screen;
A database search system comprising: further,
User information storage destination storage means for storing information of table names and item names in the table storing user authority and affiliation information provided in the user information storage unit,
With
The login user information generation means includes:
From the user information storage destination storage means, the table name storing the authority and affiliation information of the user and the item name in the table are read, and based on the read table name and item name, the user information storage unit Read user authority and affiliation information,
The database search system according to claim 1. further,
Search condition storage means for storing search conditions set by a user;
With
The search control means reads the search condition stored in the search condition storage means, and enables the search screen to be reproduced based on the read search condition.
The database search system according to claim 1, wherein the database search system is a database search system. A database search method for a database search system,
The database search system is
Application execution means comprising: a user information storage unit for storing user authority and affiliation information; and a database for storing data necessary for execution of the application;
A search target storage unit in which a table that can be searched from the database, items in the table, and a searchable range in the items are set for each user authority or affiliation information;
Control means for searching the database;
With
A log-in user information generation step for reading out the authority and affiliation information of the user assigned by the application execution unit from the user information storage unit;
Based on the information read in the logged-in user information generation step, the control means stores a database table, items in the table, and searchable ranges in the items that can be searched by the user from the search target storage means. A search control step for performing a control to generate a search screen for the user to set a search condition in the searchable range, and to execute a search according to the search condition set by operating the search screen;
A database search method comprising: The database search system further comprises:
User information storage destination storage means for storing information of table names and item names in the table storing user authority and affiliation information provided in the user information storage unit,
With
In the login user information generation step, the control means reads out the table name storing the user's authority and affiliation information and the item name in the table from the user information storage destination storage means, and the read table name And based on the item name, read the authority and affiliation information of the user from the user information storage unit,
The database search method according to claim 4. The database search system further comprises:
Search condition storage means for storing search conditions set by a user;
With
A search condition storage step in which the control means stores a search condition set by a user in the search condition storage means;
A search screen reproduction step in which the control means reads the search condition stored in the search condition storage means, and reproduces the search screen based on the read search condition;
The database search method according to claim 4, further comprising:   A database search program for causing a computer to execute the database search method according to claim 4, 5 or 6.

Images