JP3782270B2 - File management apparatus and program recording medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a file management apparatus that manages a file and allows a plurality of users to view or operate the file, and a program recording medium that stores a program used to realize the apparatus, The present invention relates to a file management apparatus that allows a user to view and operate a file comfortably, and a program recording medium used for realizing the apparatus.
[0002]
The Web filing system employs a configuration in which a CGI program (common gate interface program) that manages interface processing between a WWW service and a client is deployed on a server, and the CGI program controls user authentication. The access right check is controlled in accordance with the user information obtained by the user authentication.
[0003]
When performing user authentication, the user is requested to input user information, which is troublesome for the user. If user authentication is not required, this input is omitted, It is preferable to be able to view and manipulate files comfortably.
[0004]
[Prior art]
When the WWW service executes the CGI program, it is determined whether or not to perform user authentication depending on whether or not the CGI program execution (access) is restricted.
[0005]
If there is a possibility that access restrictions may be applied to files on the server, a CGI program with execution restrictions set is prepared and the user name is given to the user using this CGI program. And a password are requested to perform user authentication, and a check is made as to whether or not the user has access rights to the file according to the entered user information.
[0006]
[Problems to be solved by the invention]
However, according to such a conventional technique, there is a problem that the user cannot comfortably view or operate the file.
[0007]
That is, according to the prior art, even when access restrictions are not applied to files on the server, a CGI program with execution restrictions set is used. Accordingly, the user name and password must be input, and there is a problem that the user cannot view or operate the file comfortably because of an unnecessary operation.
[0008]
Using a CGI program with no execution restrictions, users can browse and manipulate files without access restrictions without entering a user name and password. When the access restriction is applied to the file, the user authentication is not performed, so that a user having an access right cannot view or operate the file.
[0009]
The present invention has been made in view of such circumstances, and has a configuration in which files are managed so that a plurality of users can browse and operate the files, and the user can comfortably file the files. An object of the present invention is to provide a new file management device that enables browsing and operation of the program, and to provide a new program recording medium used for realizing the device.
[0010]
[Means for Solving the Problems]
To achieve this object, in the file management apparatus of the present invention, when there is a processing request for a folder or file, interface processing for the processing request is performed after obtaining user information and checking the access right. A first interface means for executing the process, a second interface means for executing interface processing for the processing request without obtaining user information when there is a processing request for the folder or file, and screen operation When the access restriction is set for the processing request destination with the display control file described in the tagged language for use and used for displaying information necessary for the processing request for the folder or file as the processing target, Display control file so that one interface means is called With rewritten, when the setting of the access restriction to the processing request destination is released, configured to and a rewriting means for rewriting the the display control file so that a call to the second interface means.
[0011]
The function of the file management apparatus of the present invention configured as described above is specifically realized by a program, and this program is stored on a floppy disk or the like, or stored on a disk such as a server, From these, it is installed in the file management apparatus of the present invention and operates on the memory, thereby realizing the present invention.
[0012]
In the file management apparatus of the present invention, when access restriction is set for a processing request destination such as a folder, the rewriting means rewrites the display control file so as to call the first interface means. On the other hand, when the access restriction setting is cancelled, the rewriting means rewrites the display control file so as to call the second interface means.
[0013]
From now on, when the information required for the processing request is presented to the client device using the display control file, when the user performs a click operation, when the access restriction is set in the processing request destination The first interface means is called, so that the user can receive the access right check by inputting the user information, and only the user having the access right can view and operate the file. . On the other hand, when the access restriction is not set for the processing request destination, the second interface means is called, so that the user can view and operate the file immediately without inputting user information.
[0014]
As described above, according to the present invention, when a configuration is adopted in which files are managed so that a plurality of users can view and operate these files, only when access rights need to be checked. Since the user information is requested and the access right check is not required, the user information is not requested so that the user is not required to input the user information unnecessarily. You can browse and manipulate files.
[0015]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the present invention will be described in detail according to an embodiment applied to a server / client system.
[0016]
FIG. 1 shows an embodiment of a server 1 having the present invention.
[0017]
The server 1 according to this embodiment adopts a configuration for managing files, and posts the contents of those files to a plurality of clients 2 (deploying the browser 200) connected via the network 3, A process for manipulating (updating, deleting, etc.) those files in response to a request from the client 2, which includes a file management mechanism 10, an access right check CGI program 20, and an access right non-check CGI program 30. The access right setting CGI program 40 and the operating system 50 are provided.
[0018]
Here, the access right check CGI program 20, the access right non-check CGI program 30, and the access right setting CGI program 40, which are prepared to realize the present invention, are suitable recording media such as a semiconductor memory readable by a computer. Will be stored.
[0019]
The file management mechanism 10 employs a configuration in which a plurality of folders 11-i (i = 1 to n) are prepared and a file 12 to be posted to the client 2 is stored therein. Further, an HTML file 13-i (i = 1 to n) describing screen data for displaying a list of files 12 stored in the folder and an operation menu for the file 12 is provided in association with each folder 11-i. The composition is taken.
[0020]
The access right check CGI program 20 is an interface for processing requests issued by the browser 200 on condition that the access right check CGI program 20 is called from the HTML file 13-i and satisfies the access right restriction set in the folder 11-i. Execute the process.
[0021]
The access right non-checking CGI program 30 is called from the HTML file 13-i and performs interface processing for processing requests issued by the browser 200 without considering the restriction of the access right set in the folder 11-i. Execute.
[0022]
The access right setting CGI program 40 allows each user's folder 11-i to have an access right that allows the user 12 to operate the file 12 and does not allow the user 12 to operate the file 12. A process for setting a restriction or releasing the restriction of the set access right is performed.
[0023]
Here, when the access right restriction for at least one user group is set for a certain folder 11-i, this means that the folder 11-i enters a state in which the access restriction is set. .
[0024]
As shown in FIG. 2A, the operating system 50 manages user information (information on the correspondence between a user name, a password of the user, and a group name to which the user belongs), and FIG. ), The access right restriction information set by the access right setting CGI program 40 is managed.
[0025]
Next, the display screen displayed by the HTML file 13-i will be described in detail.
[0026]
When a browsing request from the browser 200 deployed on the client 2 is issued, according to the HTML file 13-i provided in association with each folder 11-i, first, the display shown in FIG. In this way, a folder tree (a list of names of folders 11-i having a hierarchical structure described in a tree structure) is displayed.
[0027]
Subsequently, when a folder name is selected from the folder tree, a list of names of files 12 stored in the folder 11-i, as shown in FIG. An “operation menu” button and a “search” button are displayed.
[0028]
Subsequently, when an “operation menu” button provided in the display screen is clicked, a file 12 stored in the folder 11-i is displayed according to the HTML file 13-i as shown in FIG. The operation menu will be displayed.
[0029]
When an operation item is clicked from the operation menu displayed in this way, the access right check CGI program 20 or the access right non-check CGI program 30 is called, and the process for specifying the clicked operation is entered. .
[0030]
At this time, whether the access right check CGI program 20 is called or whether the access right non-check CGI program 30 is called depends on the description of the HTML file 13-i.
[0031]
That is, as a description of the HTML file 13-i called when the operation item is clicked from the operation menu, as shown in FIG. 6A, the path to the folder storing the access right non-check CGI program 30 "/Scripts/Pragma/Filer/ShowFmCGI.exe"
Is described, the access right non-check CGI program 30 is called.
[0032]
On the other hand, as a description of the HTML file 13-i called when an operation item is clicked from the operation menu, as shown in FIG. 6B, to a folder storing the access right check CGI program 20. Path /Scripts/Pragma/Filer/Secure/ShowFmCGI.exe
Is described, the access right check CGI program 20 is called.
[0033]
Here, according to the value of “Command.value” included in this description, information indicating which operation item is clicked is notified to the access right check CGI program 20 and the access right non-check CGI program 30.
[0034]
On the other hand, when “Folder access right setting” in the display screen shown in FIG. 5 is clicked, the access right setting CGI program 40 is called.
[0035]
When started in this way, the access right setting CGI program 40, as shown in the processing flow of FIG. 7, first, in step 1, on the display of the client 2, as shown in FIG. An access right setting screen for the folder 11-i is displayed.
[0036]
That is, an access right setting that allows any user group to operate the file 12 stored in the folder 11-i and does not allow any user group to operate the file 12 stored in the folder 11-i; Then, an access right setting screen used to cancel the setting is displayed.
[0037]
Subsequently, in step 2, an input data value to the access right setting screen is acquired to acquire a setting value of the access right for the folder 11-i. In the subsequent step 3, according to the acquired setting value. The operating system 50 is requested to set / cancel access rights.
[0038]
In response to this request, the operating system 50 performs a process of updating the access right restriction information shown in FIG.
[0039]
Subsequently, in step 4, as a result of the processing in step 3, a folder 11-i with no access restriction is changed to a folder 11-i with access restriction (access right restriction for at least one user group is set. When it is determined whether or not it has been changed to the folder 11-i), and when it is determined that such a change has been made, the process proceeds to step 5 to call the access right check CGI program 20, and that folder. The description of the HTML file 13-i prepared in association with 11-i is rewritten, and the process ends.
[0040]
That is, the path to the folder storing the CGI program described in the HTML file 13-i is
"/Scripts/Pragma/Filer/ShowFmCGI.exe"
From the description,
"/Scripts/Pragma/Filer/Secure/ShowFmCGI.exe"
It is rewritten to the description.
[0041]
On the other hand, when it is determined in step 4 that the folder 11-i without access restriction has not been changed to the folder 11-i with access restriction, the process proceeds to step 6 to access the folder 11- with access restriction. If it is determined whether or not the folder 11-i has been changed from i to an unrestricted folder 11 and it is determined that such a change has been made, the process proceeds to step 7 to call the access right non-check CGI program 30. As described above, the description of the HTML file 13-i prepared in association with the folder 11-i is rewritten, and the process ends.
[0042]
That is, the path to the folder storing the CGI program described in the HTML file 13-i is
"/Scripts/Pragma/Filer/Secure/ShowFmCGI.exe"
From the description,
"/Scripts/Pragma/Filer/ShowFmCGI.exe"
It is rewritten to the description.
[0043]
On the other hand, when it is determined in step 6 that the folder 11-i with access restriction has not been changed to the folder 11-i with no access restriction, that is, the folder with the same access restriction as before. When it is determined that the folder is 11-i or the folder 11-i without the same access restriction as before, the process is terminated without rewriting the HTML file 13-i.
[0044]
In this way, when the access restriction is set for the folder 11-i, the access right setting CGI program 40 checks the access right by checking the HTML file 13-i prepared in association with the folder 11-i. When the CGI program 20 is called, the description of the HTML file 13-i is rewritten, and when the access restriction on the folder 11-i is released, it is prepared in association with the folder 11-i. When the HTML file 13-i calls the access right non-check CGI program 30, processing is performed so that the description of the HTML file 13-i is rewritten.
[0045]
Next, processing executed by the access right check CGI program 20 will be described according to the processing flow of FIG. 9, and processing executed by the access right non-checking CGI program 30 will be described according to the processing flow of FIG.
[0046]
When the access right check CGI program 20 is called according to the description of the HTML file 13-i by clicking an operation item from the operation menu shown in FIG. 5, first, as shown in the processing flow of FIG. First, in step 1, it is determined whether or not this is the first operation request for the folder 11-i displaying the operation menu.
[0047]
When it is determined by this determination processing that this is the first operation request for the folder 11-i, the process proceeds to step 2 to display a user information input screen as shown in FIG. 11 on the display of the client 2. Enter the user name and password.
[0048]
Subsequently, in step 3, the input user name and password are designated and a user authentication request is issued to the operating system 50.
[0049]
In response to this request, the operating system 50 performs user authentication as to whether or not the user is a legitimate user according to the management data of the user information shown in FIG. 2A, and returns the result.
[0050]
Subsequently, in step 4, when it is determined whether or not a reply indicating that the user is a regular user is returned from the operating system 50, and when it is determined that a reply that the user is not a regular user is returned, Proceeding to step 5, requesting re-input of the user name and password, re-entering the user name and password, and then returning to step 3.
[0051]
On the other hand, when it is determined in step 4 that a reply indicating that the user is a legitimate user is returned from the operating system 50, the process proceeds to step 6 to specify the entered user name and access the operating system 50. Issue a rights check request.
[0052]
In response to this request, the operating system 50 specifies the group name indicated by the user name in accordance with the management data of the user information shown in FIG. 2A, and uses the group name as a search key in FIG. 2B. By referring to the management data of the access right restriction information shown in (1), an access right check is performed as to whether or not the user has an access right, and the result is returned.
[0053]
Subsequently, in step 7, it is determined whether or not a response indicating that the user has an access right is returned from the operating system 50, and a response indicating that the user does not have the access right is returned. If it is determined, the process proceeds to step 8 to display a message to that effect, and the process ends. That is, a message as shown in FIG. 12 is displayed and the process is terminated.
[0054]
On the other hand, when it is determined in step 7 that a reply indicating that the user has an access right is returned from the operating system 50, the process proceeds to step 9 to display a requested operation screen and interact with the user. As a result, the file 12 (folder 11-i) is operated.
[0055]
For example, when “text registration” is selected from the operation menu shown in FIG. 5, a text registration screen as shown in FIG. 13 used for text registration is displayed and the user interacts with the folder 11. Process to register new text for -i.
[0056]
When it is determined in step 1 that it is not the first operation request for the folder 11-i displaying the operation menu, that is, when it is determined that the access right has already been checked, the step is immediately performed. Proceeding to 9, the requested operation screen is displayed, and the user interacts with the user 12 to operate the file 12 (folder 11-i).
[0057]
In this way, the access right check CGI program 20 is called when an operation item is clicked from the operation menu shown in FIG. 5 when access restrictions are set for the folder 11-i. When the user is requested to input the user information and the operating system 50 is requested accordingly, the user authentication and the access right check are performed. As a result, it is confirmed that the user has the access right. The processing is performed so as to execute the operations on the file 12 and the folder 11-i requested by the user.
[0058]
On the other hand, when the access right non-check CGI program 30 is called according to the description of the HTML file 13-i by clicking an operation item from the operation menu shown in FIG. 5, as shown in the processing flow of FIG. Then, immediately, the requested operation screen is displayed, and the user interacts with the user 12 to operate the file 12 (folder 11-i).
[0059]
For example, when “text registration” is selected from the operation menu shown in FIG. 5, a text registration screen as shown in FIG. 13 used for text registration is displayed and the user interacts with the folder 11. Process to register new text for -i.
[0060]
In this way, the access right non-check CGI program 30 is called when an operation item is clicked from the operation menu shown in FIG. 5 when access restrictions are not set for the folder 11-i. Then, without requesting the user to input user information, processing is performed so as to immediately execute an operation on the file 12 or the folder 11-i requested by the user.
[0061]
Although the present invention has been described with reference to the illustrated embodiments, the present invention is not limited thereto. For example, in the embodiment, the description has been made by setting the access restriction for the operation of the file 12 and the folder 11-i, but the present invention sets the access restriction for the browsing of the file 12 and the like. The present invention can be applied as it is even in the case of adopting the configuration of doing.
[0062]
【The invention's effect】
As described above, according to the present invention, when a file is managed so that a plurality of users can view or operate the file, the access right needs to be checked. Since the user information is only requested and the access right check is not required, the user information is not requested, so the user is not required to enter the user name and password unnecessarily. , You will be able to view and manipulate files comfortably.
[Brief description of the drawings]
FIG. 1 is an embodiment of the present invention.
FIG. 2 is an explanatory diagram of user information / access right information managed by the OS;
FIG. 3 is an explanatory diagram of a display screen.
FIG. 4 is an explanatory diagram of a display screen.
FIG. 5 is an explanatory diagram of a display screen.
FIG. 6 is an explanatory diagram of an HTML file.
FIG. 7 is a processing flow of an access right setting CGI program.
FIG. 8 is an explanatory diagram of a display screen.
FIG. 9 is a processing flow of an access right check CGI program.
FIG. 10 is a processing flow of an access right non-check CGI program.
FIG. 11 is an explanatory diagram of a display screen.
FIG. 12 is an explanatory diagram of a display screen.
FIG. 13 is an explanatory diagram of a display screen.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Server 2 Client 3 Network 10 File management mechanism 11 Folder 12 File 13 HTML file 20 Access right check CGI program 30 Access right non-check CGI program 40 Access right setting CGI program 50 Operating system 200 Browser

Claims (2)

In a file management device that manages files accessed by multiple users,
First interface means for obtaining user information and checking an access right when there is a processing request for a folder or file, and executing interface processing for the processing request;
Second interface means for executing interface processing for a processing request without obtaining user information when there is a processing request for a folder or a file;
When an access restriction is set for the processing request destination with a display control file described in a tagged language for screen operation and used for display of information necessary for the processing request as a processing target, The display control file is rewritten to call the first interface means, and the second interface means is called when the access restriction setting is released. Comprising a rewriting means for rewriting the display control file,
Feature file management device. A program recording medium storing a program used to realize a file management apparatus that manages files accessed by a plurality of users,
When there is a processing request for a folder or a file, after obtaining user information and checking an access right, a first interface processing for executing an interface processing for the processing request;
A second interface process for executing an interface process for the processing request without obtaining user information when there is a processing request for a folder or a file;
When an access restriction is set for the processing request destination with a display control file described in a tagged language for screen operation and used for display of information necessary for the processing request as a processing target, The display control file is rewritten so as to call the first interface process, and the second interface process is called when the access restriction setting is released. A program for causing a computer to execute a rewriting process for rewriting the display control file is stored.
A program recording medium.

Images