JP2012063896A - Data access control system, data access control method and data access control program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To set access authority to a database in detail.SOLUTION: A data access control system comprises: a business database 10 storing information about multiple order acceptance slips; an access authority master part 20 storing operation access authority information set for each user; an information disclosure level master part 30 storing disclosure level information set for each of the multiple order acceptance slips; a various masters part 60 storing charge master information, department master information and base master information; and a security management server 100 controlling access to the business database 10 from terminals 5a-5c. The security management server 100 determines if the operation access authority information acquired from the access authority master part 20 permits access by disclosure level information acquired from the information disclosure level master part 30 and a business office code acquired from the base master information.

Description

  The present invention relates to a data access control system, a data access control method, and a data access control program that can set access authority in a business computer system in detail.

  In general, a business computer system according to the prior art authenticates a user who accesses a database storing business data, and accesses data according to a job authority given to the user for ensuring security. An authority is set and access to data according to the access authority is permitted.

  The user authentication is set for each user, the access authority for security is set at the organization level, and the operation access authority for operating the data is set for the organization unit or the data unit. For example, in the prior art, even if you belong to the same affiliation, various settings can be made such that the data created by a specific individual must be revised only by the person himself / herself, or anyone within the same affiliation can revise the data. Various access rights are required.

  In addition, the following Patent Document 1 is cited as a document describing the technology related to the database access authority, and this Patent Document 1 includes the designated data and the type of access (reference / creation / approval). It is described that the access authority of the corresponding user is determined based on the department to which the user belongs.

JP 2009-104646 A

  Although the technique described in Patent Literature 1 described above can determine the access authority of a user based on the department to which the user belongs, and can set the access authority in association with the department to which the user belongs, Since the determination of the level is set at the organization level, there is a problem that even if the user does not have access authority depending on the position, data correction is permitted within the same organization.

  The object of the present invention is to solve the above-mentioned problems caused by the prior art, and the operation access authority is set for each function unit of each program such as screen, inquiry, and batch for each user, and data such as orders, sales, etc. To provide a data access control system, a data access control method, and a data access control program capable of setting an access authority in detail for each type.

  In order to achieve the above object, the present invention according to claim 1 is a business database storing a plurality of order slip information including a business unit code, a factory code, a department code, a person-in-charge code, a supplier code, and an order amount. An access authority master unit for storing operation access authority information indicating an operation authority to data set for each person in charge for the business database, and disclosure level information set for each of a plurality of order slip information stored in the business database An information disclosure level master part for storing information, a master information corresponding to the name of the person in charge and various master parts for storing department master information indicating the relationship between offices, factories and departments, and base master information for departments and factories, A data access control comprising a security management server for controlling access to a business database from the plurality of terminals When the security management server is instructed to access the order receipt information stored in the business database in which the person-in-charge code is designated from the terminal, the operation access authority information set in the person-in-charge code is displayed. A first step of acquiring from the access authority master unit; a second step of acquiring disclosure level information set for each order slip information from the information disclosure level master unit; and the person in charge code using the person in charge code as a key. A third step of acquiring the department code to which the acquired department code belongs, a fourth step of acquiring the base code to which the acquired department code belongs from the department master information, and the establishment code to which the acquired base code belongs. Is acquired from the base master information and the operation access authority information acquired in the first step is It is determined whether access by the disclosure level information acquired in the second step and the establishment code acquired in the fifth step is permitted. When it is determined that access is permitted, the access to the order slip information is permitted. Six steps are performed.

  The invention described in claim 2 is a business database storing a plurality of order slip information including a business unit code, a factory code, a department code, a person-in-charge code, a supplier code, and an order amount, and for each person in charge of the business database. An access authority master unit for storing operation access authority information indicating an operation authority for set data, and an information disclosure level master unit for storing disclosure level information set for each of a plurality of order slip information stored in the business database And master data corresponding to the name of the person in charge, department master information indicating the relationship between offices / factories / departments, various master units for storing base master information for departments / factories, and business databases from the plurality of terminals Data access control method for computer system comprising security management server for controlling access to computer When the security management server is instructed to access the order slip information stored in the business database in which the person-in-charge code is designated from the terminal, the access information on the operation access authority set in the person-in-charge code is accessed. The first process acquired from the authority master part, the second process of acquiring the public level information set for each order slip information from the information public level master part, and the person-in-charge code to which the person-in-charge code belongs as a key A third step of acquiring a department code from the responsible master information, a fourth step of acquiring a base code to which the acquired department code belongs from the department master information, and a place of office code to which the acquired base code belongs. The fifth process acquired from the master information and the operation access authority information acquired in the first process are the second process. Determining whether or not access by the disclosure level information acquired in step 5 and the establishment code acquired in the fifth step is permitted, and when it is determined that access is permitted, the sixth step is permitted to access the order slip information. It is made to perform.

  According to a third aspect of the present invention, there is provided a business database storing a plurality of order slip information including a business unit code, a factory code, a department code, a person-in-charge code, a business partner code, and an order amount, and for each person in charge of the business database. An access authority master unit for storing operation access authority information indicating an operation authority for set data, and an information disclosure level master unit for storing disclosure level information set for each of a plurality of order slip information stored in the business database And master data corresponding to the name of the person in charge, department master information indicating the relationship between offices / factories / departments, various master units for storing base master information for departments / factories, and business databases from the plurality of terminals A data access control program for a computer system comprising a security management server for controlling access to When the security management server is instructed to access the order entry information stored in the business database in which the person-in-charge code is designated from the terminal, the operation access authority information set in the person-in-charge code is displayed. The first function acquired from the access authority master part, the second function for acquiring the disclosure level information set for each order slip information from the information disclosure level master part, and the person in charge code using the person in charge code as a key A third function for acquiring the department code to which the acquired department code belongs, a fourth function for acquiring the base code to which the acquired department code belongs from the department master information, and the establishment code to which the acquired base code belongs. Is acquired from the base master information, and the access authority information acquired in the first step is the second function. A sixth function for permitting access to the order slip information when it is determined that access is permitted by the disclosure level information acquired by the function and the establishment code acquired by the fifth function. Is executed.

  The data access control system, the data access control method, and the data access control program according to the present invention include the operation level authority information acquired by the security management server from the access authority master unit, and the disclosure level information and the site acquired from the information disclosure level master unit. By determining whether or not access by the establishment code acquired from the master information is permitted, the access authority can be set in detail for each person in charge and for each function of each program.

The figure which shows the whole structure of the data access control system by embodiment of this invention The figure which shows the control screen of the operation authority by embodiment of this invention The figure which shows the setting information of the access authority with respect to slip information by embodiment of this invention The figure which shows the input screen and operation example by embodiment of this invention The figure which shows the screen and inquiry operation | movement by embodiment of this invention The figure which shows the inquiry operation by the execution form of this invention The figure which shows the inquiry operation by the execution form of this invention The figure which shows the input screen and check execution process by embodiment of this invention The figure which shows the check execution process by embodiment of this invention The figure which shows the check execution process by embodiment of this invention The figure which shows the input screen at the time of the confirmation process by embodiment of this invention The figure which shows the input screen and input operation at the time of data quotation by embodiment of this invention The figure which shows the quotation operation | movement at the time of the data quotation by embodiment of this invention The figure which shows the inquiry screen and inquiry operation | movement by embodiment of this invention. The figure which shows the inquiry operation | movement by embodiment of this invention The figure which shows the code search screen and search operation by embodiment of this invention The figure which shows the code search screen and search operation by embodiment of this invention The figure which shows the access control master information by embodiment of this invention The figure which shows the public level master information by embodiment of this invention The figure which shows the security item definition master information by embodiment of this invention

Hereinafter, an embodiment of a data access control system, a data access control method, and a data access control program according to the present invention will be described in detail with reference to the drawings.
As shown in FIG. 1, the data access control system according to the present embodiment stores, for example, a business in which order slip information including a business department code, a factory code, a department code, a person-in-charge code, a supplier code, and an order amount is stored. A security management server 100 for controlling access from the database 10, a terminal 5 a operated by a sales representative for the business database 10, a terminal 5 b operated by a material manager, and a terminal 5 c operated by an administrator, the terminal 5 a, the terminal An access authority master unit 20 for storing access authority information from 5b and 5c, an information disclosure level master unit 30 for storing disclosure level information for designating a level at which disclosure is permitted for each terminal, and definition of security items Security item definition information table section 40 for storing information and customization Customization citation detail table unit 50 for storing information such as the Hare field, a variety of master unit 60 for storing the charge master information and department master information and base master information consists customization citation details table unit 70.. The security management server 100 is similar to a general computer in that the CPU (Central Processing Unit), memory, storage means such as a magnetic disk device, display unit, input / output devices such as a keyboard, various interface devices, basic software (OS : Operating system) and various software.

  In the data access control system according to the present embodiment, for example, an access authority that allows a sales person to access only the order slip information of the business department / factory / sales department in charge of the business database 10 using the terminal 5a. Is set, and an access authority for the material person in charge to access only the order slip information of the business department / factory in charge of the material person in charge in the business database 10 is set using the terminal 5b, and the administrator uses the terminal 5c. The access authority for accessing all the order slip information in the business database 10 is set, the security level of the sales staff is “same department” (the sales department to which the user belongs), and the security level of the staff in charge of the material is “same” It is assumed that the “base” (the office to which the user belongs) and the security level of the administrator are set to “all permitted”.

  The access control setting provided by the security management server 100 from the terminal 5a to the terminal 5c using the browser screen is, as shown in FIG. 3A, “slip system input screen (processing selection / extraction condition screen)”, “ For the slip system input screen (slip number search screen), slip system input screen (slip system information input screen), slip system query screen (individual), slip system query screen (general purpose), and batch system, Each item information of the operation content, access control object, access control method and remarks is set. For example, the access control object whose operation content of “slip system input screen (slip system information input screen)” is “when check is executed” The “business division (header)” and the access control method are set as “access authority check”.

  As shown in FIG. 3B, the access authority master information stored in the access authority master unit 20 includes a user ID uniquely assigned to the user (identifier, the same applies hereinafter), orders / shipments / sales, etc. Specify the program ID uniquely assigned to each program, the registration permission category that specifies permission or prohibition of data registration, the correction permission category that specifies permission or prohibition of data correction, and the permission or prohibition of data deletion For example, the registration category of the order receiving program ID “JF2002FM” of the user ID “TENSEI” is “permitted”, the correction permission category is “permitted”, and the deletion permission category is “permitted”. Is set. As shown in FIG. 11, the setting items of this access authority master information are item information of field ID, field name, attribute, length, decimal number, and remarks. For example, the field name for the user ID (USR_ID) is “ “User ID”, attribute “4”, length “15”, and decimal number “0” are set. The registration permission category, correction permission category, and deletion permission category are operations on data, and are referred to as operation access authority in the present application.

  As shown in FIG. 3C, the disclosure level master information of the information disclosure level master unit 30 is “0” that specifies that the security level is inaccessible for each data type such as USR_ID (user ID) order / unit price. , "1" to specify permission in the same department, "2" to specify permission in the same department, "3" to specify permission in the same base, "4" to specify permission in the same office, all permissions For example, the user's access authority to the order slip information of USR_ID (user ID) “TENSEI” is “2” (permitted if the same department), and user ID (USR_ID) “TENSUITE”. The access authority for the user's order slip information is set to “1” (only the same person in charge is allowed). As shown in FIG. 12, the setting items of the public level master information are item information of field ID, field name, attribute, length, decimal number, and remarks. For example, the field name for the user ID (USR_ID) is “ “User ID”, attribute “4”, length “15”, and decimal number “0” are set.

  As shown in FIG. 13A, the security level information of the security item definition information table unit 40 is item information of field ID, field name, attribute, length, decimal number, and remarks. For example, for “DEN_ID” The field name is set to “customization definition ID”, the attribute is set to “4”, the length is set to “20”, and the decimal number is set to “0”, specifically, as shown in FIG.

  When the user with the user ID (USR_ID) “TENSEI” accesses the order slip, the security management server 100 (FIG. 1) according to the present embodiment refers to the access authority master information and the public level master information, and discloses the information disclosure. The security level “2” of “TENSEI” is acquired from the public level master information of the level master unit 30, the department code of “TENSEI” is acquired from the department master information (FIG. 3D), and the order received is accessed. In the case of the order slip A shown in FIG. 3F, access is permitted because the department of “TENSEI” and the department of the order slip information are the same, as shown in FIG. In the case of order slip B, since the department of “TENSEI” and the department of order slip information are different, it can operate so as not to permit access. .

  The security management server 100 (FIG. 1) according to the present embodiment, when a user accesses the business database 10, when the screen 410 is activated as shown in FIG. 4A, the access authority of the access authority master unit 20 If the correction permission category is determined to be “permitted” by referring to the information, a screen 420 that permits the use of the correction button is displayed. If the correction permission category is determined to be “prohibited”, the correction button is permitted to be used. The screen 430 that is not to be displayed is displayed. The access authority information is referred to by referring to the access authority information with the user ID and the program ID as keys as shown in FIG. 4B and acquiring the correction permission classification for these combinations.

[Inquiry processing]
As shown in FIG. 5A, the security management server 100 (FIG. 1) according to the present embodiment clicks the inquiry button on the screen 310 to display the information disclosure level master unit 30 ( Only the organization for which the access authority is permitted is displayed with reference to the public level information in FIG. 1), the security item definition information in the security item definition information table section 40 (FIG. 1), and the customization information in the customized quote information details table section 70. Operate to display at 320. As shown in FIG. 5B (a), this operation extracts the customization definition ID of the public level information, the extraction condition 1 and the extraction condition 4 using the program ID as a key, and customize information that matches the customization definition ID and the extraction condition. The extension table name and item name of the customization information are acquired, and the extension table name and item name of the customization information are used when creating a location designation (WHERE) statement to be described later.

  Next, as shown in FIG. 5B (b), the security management server 100 (FIG. 1) is set with reference to the disclosure level information of the information disclosure level master unit 30 (FIG. 1) using the user ID and table ID as keys. As shown in FIG. 5B (c), the base code of the department master unit is acquired using the department code of the master unit in charge of each master unit 60 (FIG. 1) as a key. An office code is acquired from the base master unit as a key, and a location designation (WHERE) statement shown in FIG. 5B (d) is created for each security level.

  Next, the security management server 100 (FIG. 1) according to the present embodiment performs a process of adding the location specification (WHERE) statement generated previously to the SQL (Structured Query Language) statement for data extraction generated by the inquiry process. As shown in FIG. 5C (a) to FIG. 5C (c), this additional processing is a step of acquiring a table alias and an item name from security item definition information (DFM_ACC) and customization (DFN_DTLI) information. And a step of acquiring the security level from the public level (M_ACCLEV) information, the department to which the user “TENSUITE” belongs is acquired from the staff master unit, and a location designation (WHERE) statement “J.SECTION_C =“ 101 ”” is generated. And the location specification (WHERE) statement This is performed by executing the step of adding to the SQL sentence for data extraction.

[Access permission check processing]
Furthermore, when performing the access authority check process, the security management server 100 (FIG. 1) according to the present embodiment clicks the check button on the screen 610 to display the information disclosure level master unit 30 and the security as shown in FIG. 6A. 6B (a), which checks whether or not an organization for which access authority is not permitted is specified by referring to the item definition information table unit 40, the customization information detail table unit 50, and various master units 60. 6B (c), a process for obtaining a customization ID and a sequence number (NO) from security item definition (DFN_ACC) information using a program ID at startup as a key, and a public level based on the user ID and table ID (M_ACCLEV) Obtain security level by referring to information The department code is obtained with reference to the master in charge (M_STAF) information, the department code is obtained from the department master (M_SECTION) information using this department code as a key, and the base master (M_SITE) using this department code as a key The error message shown in FIG. 6B (d) is created for each security level by executing the process of acquiring the base code from the information.

  Next, when the user “TENSUITE” performs the sales input check process, the security management server 100 (FIG. 1), as shown in FIGS. 6C (a) to 6C (c), the security item definition (DFN_ACC) information and A first step of obtaining a Bean (software component) name from customization (DFN_DTLI) information, a second step of obtaining the security level of the user “TENSUITE” from the public level (M_ACCLEV) information, and a SECTN_C of the user “TENSUITE” ( By executing the third step of acquiring the department) from the staff master unit and the fourth step of comparing the Bean name acquired in the first step with the SECTN_C (department) acquired in the third step. , Move to check the value of Bean To.

[Confirmation processing]
When performing the confirmation process, the security management server 100 (FIG. 1) according to the present embodiment clicks the confirmation button on the screen 710 as shown in FIG. Operates to display the presence / absence of access authority by referring to the master information.

[Input screen processing]
When the security management server 100 (FIG. 1) according to the present embodiment performs the process of shifting to the input screen, as shown in FIG. 8A, the disclosure level information of the information disclosure level master unit 30 and the security of the security item definition information table unit 40 In the case of an organization for which access authority is not permitted with reference to the customization information in the item definition information and the customization citation information detail table section 70, an operation is performed so as to display an error on the screen 820. As shown in FIG. 8B (a) to FIG. 8B (c), the process of shifting to this input screen acquires the customization definition ID and the extraction condition 4 from the security item definition (DFN_ACC) information using the program ID at startup as a key. A process, a process of acquiring a customization definition ID and a sequence number (NO) from customization (DFN_DTLI) information using the acquired customization definition ID and extraction condition 4 as a key, and a public level (M_ACCLEV) using a user ID and a table ID as a key ) Obtaining the security level from the information, obtaining the department code from the master (M_SATFF) information in charge, obtaining the base code from the department master (M_SECTION) information using this department code as a key, and using the base code as a key Master (M_SIT ) When the establishment code is obtained from the information, and the organization (office, base, department, charge) information of the slip information does not match the organization to which the user belongs, for each security level shown in FIG. 8B (d) Works to display error messages.

[Query processing]
When the inquiry button displayed on the screen 910 shown in FIG. 9A is clicked, the security management server 100 (FIG. 1) according to the present embodiment displays the disclosure level information and the security item definition information table unit of the information disclosure level master unit 30. 40, the inquiry information 920 is displayed with reference to the customization information of the security item definition information 40 and the customization citation information detail table section 70. When another PDF button is clicked, a PDF (Portable Document Format) screen 930 is displayed and printed. When the button is clicked, the sales unit price list 940 is printed, and when the CSV (Comma Separated Values) output button is clicked, the CSV data is output.

  As shown in FIGS. 9B (a) to 9B (c), this inquiry processing includes a step of obtaining a customization definition ID and extraction conditions 1 and 4 from security item definition (DFN_ACC) information using a program ID at startup as a key. The process of acquiring the extension table name (alias) and the item name from the customization (DFN_DTLI) information using the acquired customization definition ID and extraction condition as a key, and the security from the public level (M_ACCLEV) information using the user ID and table ID as a key The process of acquiring the level, the department code is obtained from the master (M_SATFF) information in charge, the base code is obtained from the department master (M_SECTION) information using the department code as a key, and the base master (M_SITE) using the base code as a key Office code from information Perform a step of acquiring, it operates to generate a WHERE sentence shown in FIG. 9B (d) the security level for each.

[Voucher search processing]
The security management server 100 (FIG. 1) according to the present embodiment, when a slip search process is designated, enters a sales number in the screen 110 shown in FIG. 10A, and clicks the inquiry button on the screen 111. FIG. 10B shows the case where the disclosure level information of the disclosure level master unit 30 and the slip data of the business database 10 are referred to, the contents of the designated slip are displayed on the screen 120, and the item search process is designated. When the user name is entered on the screen 140 and the item search button is clicked, the access level is granted to the user by referring to the disclosure level information of the information disclosure level master unit 30 and the various master units 60. The displayed item content is displayed on the screen 150.

  As described above, the data access control system, the data access control method, and the data access control program according to the present embodiment set the operation access authority for each function unit of screen, inquiry, and batch for each user, The security can be improved by setting the access authority in detail for each data type.

10 business database, 20 access authority master part,
30 information disclosure level master part, 40 security item definition information table part,
50 customization information details table section, 60 various master sections,
70 Customized quotation information details table section, 100 Security management server

Claims (3)

  Business database that stores multiple order slip information consisting of division code, factory code, department code, person-in-charge code, supplier code, and order value, and operation authority to the data set for each person in charge of the business database Corresponding to the name of the person in charge, an access authority master part for storing operation access authority information indicating information, an information release level master part for storing release level information set for each of a plurality of order slip information stored in the business database, and Various master units that store department master information indicating the relationship between the master information in charge and the office / factory / department, and the base master information for the department / factory, and security management that controls access to the business database from the plurality of terminals A data access control system comprising a server, wherein the security management server comprises: A first step of obtaining operation access authority information set in the person-in-charge code from the access authority master unit when an instruction to access the order slip information stored in the business database in which the person-in-charge code is designated from the terminal A second step of obtaining the disclosure level information set for each order slip information from the information disclosure level master unit, and the department code to which the person-in-charge code belongs using the person-in-charge code as a key from the person-in-charge master information A third step of acquiring, a fourth step of acquiring the base code to which the acquired department code belongs from the department master information, and a fifth step of acquiring the office code to which the acquired base code belongs from the base master information; The operation access authority information acquired in the first step is the public level information acquired in the second step, and the 5 step determination whether to permit access by office code obtained by then, when it is determined to be acceptable, the data access control system that executes a sixth step of allowing access to the sales order information.   Business database that stores multiple order slip information consisting of division code, factory code, department code, person-in-charge code, supplier code, and order value, and operation authority to the data set for each person in charge of the business database Corresponding to the name of the person in charge, an access authority master part for storing operation access authority information indicating information, an information release level master part for storing release level information set for each of a plurality of order slip information stored in the business database, and Various master units that store department master information indicating the relationship between the master information in charge and the office / factory / department, and the base master information for the department / factory, and security management that controls access to the business database from the plurality of terminals A data access control method for a computer system comprising a server, comprising: When the access management server is instructed to access the order receipt information stored in the business database in which the person-in-charge code is designated from the terminal, the operation access authority information set in the person-in-charge code is obtained from the access authority master unit. A first step of acquiring, a second step of acquiring the disclosure level information set for each order slip information from the information disclosure level master unit, and a department code to which the person-in-charge code belongs using the person-in-charge code as a key The third step of acquiring from the master information in charge, the fourth step of acquiring the base code to which the acquired department code belongs from the department master information, and acquiring the office code to which the acquired base code belongs from the base master information. The fifth step to be performed and the operation access authority information acquired in the first step are disclosed in the second step Data access for determining whether access by the bell information and the establishment code acquired in the fifth step is permitted, and executing the sixth step allowing access to the order slip information when it is determined that access is permitted. Control method. Business database that stores multiple order slip information consisting of division code, factory code, department code, person-in-charge code, supplier code, and order value, and operation authority to the data set for each person in charge of the business database Corresponding to the name of the person in charge, an access authority master part for storing operation access authority information indicating information, an information release level master part for storing release level information set for each of a plurality of order slip information stored in the business database, and Various master units that store department master information indicating the relationship between the master information in charge and the office / factory / department, and the base master information for the department / factory, and security management that controls access to the business database from the plurality of terminals A computer system data access control program comprising: a server; When the security management server is instructed to access the order receipt information stored in the business database in which the person-in-charge code is designated from the terminal, the operation access authority information set in the person-in-charge code is obtained from the access authority master unit. A first function to be acquired; a second function to acquire the disclosure level information set for each order slip information from the information disclosure level master unit; and a department code to which the person-in-charge code belongs using the person-in-charge code as a key A third function acquired from the master information in charge, a fourth function to acquire a base code to which the acquired department code belongs from the department master information, and a business office code to which the acquired base code belongs from the base master information. And the access authority information acquired by the first step is the public function acquired by the second function. Data access for determining whether or not access by the business location code acquired by the level information and the fifth function is permitted, and executing the sixth function permitting access to the order slip information when it is determined to be permitted Control program.

Images