JP4275772B2 - Database system, data management method, and recording medium recording data management software - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an improvement in a technique related to a database system for storing and managing data such as documents, and more specifically, management changes can be easily made by associating access rights with attributes on a user's organization. It is what you do.
[0002]
[Prior art]
In a database used by a plurality of users, it is important to manage access rights in order to prevent unauthorized reference or falsification of documents, files, data, etc. (hereinafter collectively referred to as “data”). This access right is an authority indicating what user can access what data, and is generally set for each access type such as creation, reference, editing, approval, and deletion.
[0003]
Technologies related to such access rights management include:
(1) First, passwords such as keywords and access codes are set in units of data, and a user who knows the password is allowed to access the file.
[0004]
(2) In addition, access rights are set in units of data aggregates in units of directories, etc., and restrictions are imposed on which aggregates are allowed to be accessed based on user IDs and passwords entered by users. Examples are also known.
[0005]
(3) Further, as disclosed in Japanese Patent Laid-Open No. 9-6681, a plurality of items such as which items can be operated when a user accesses a certain group of data and what kind of operations are permitted. There is also known an example in which permission / rejection is set for each type of authority, and such authority type related to each data group can be assigned to each user.
[0006]
(4) In addition, in Japanese Patent No. 2700157 (Japanese Patent Laid-Open No. 6-266591), for data management using a relational database, each version of data and each version of a page unit of data are stored in association with each other at the same time. It is disclosed. In this example, it is also possible to set a confidential type for each version or page and manage access rights based on attributes for each user.
[0007]
[Problems to be solved by the invention]
However, with the conventional technology as described above, access rights are managed for each user separately from the departments and positions in the organization, so there are more types of data and personnel changes. There was a problem that the change concerning the access right was troublesome.
[0008]
In other words, in the example (1) described above, since a password is set for data, each user who uses the data to perform a common task uses the data without being told the password. could not. For this reason, there is a problem that it takes time to inform the user of the necessary range of the password, and there are many burdens of managing the password on the user side because the types of passwords increase. In addition, when a user who knows the password loses the access right to the data due to a change or the like, a complicated procedure such as changing the password is required.
[0009]
In the example of (2) described above, the ID and password corresponding to the aggregate must be made known only to each individual user who can access, and work may change due to a change or the like. When the access right is lost, it is difficult to manage such as preventing unauthorized access by the original accessor.
[0010]
Further, in the example (3) described above, since the authority is set in relation to the individual users and the items and contents that can be operated, the setting of the access right is complicated. Especially when the user's work changes due to the movement of the department in the company and the access right changes, the access right is reset according to the relationship between the individual user and the items and contents as described above. There was a problem that it was necessary to do it, and the effort was burdened.
[0011]
In particular, with regard to access rights within an organization such as a company, it is necessary to have both the viewpoint of how many users can be accessed and the viewpoint of which department users are allowed to access. It is. However, conventionally, the viewpoints that should originally be plural in this way are unified in a table representing access rights. For this reason, if there is a change in personnel, a reorganization of a business division, or an increase in data, such a unified table must be corrected so that there is no contradiction in relation to the individual. There is also a problem that it takes a complicated work to correct correctly.
[0012]
The present invention has been proposed to solve the problems of the prior art as described above, and its purpose is to easily change the management by associating the access right with the attribute on the organization of the user. That is. Another object of the present invention is to efficiently set access rights for a plurality of documents. Another object of the present invention is to manage security finely by making it possible to set an access right for each part of a document.
[0013]
[Means for Solving the Problems]
  In order to achieve the above-described object, the invention of claim 1 is a database system for managing data, and means for specifying which data is to be accessed and whether or not there is an access right to the specified data. Determining means based on organizational attributes given in advance for each user, access means for accessing the specified data for users determined to have access rights,Means for displaying what part the specified data has when it is determined that there is access to the specified data; means for specifying which part of the data is accessed; A second judging means for judging whether or not there is an access right to the designated part with respect to an attribute on the organization given in advance for each user;WithThe access means is configured to allow a user who is determined to have access rights to a specified part to access that part.It is characterized by.
[0014]
  The invention of claim 4 is the data management method in which the invention of claim 1 is viewed from the viewpoint of a method, and the computer manages the data using the document management control device. The computer is used by the input interface. The step of accepting the specification of which data on the database the user accesses and the presence / absence of access to the specified data based on the organizational attributes given in advance for each user A step of determining, a step of accessing the specified data for a user determined to have access right, and a step of determining that the user has access right to the specified data The document management control device is a step for displaying what part the data designated by the user has. And the step of displaying what portion of the data the data has by the input interface, receiving the designation of which portion of the displayed data is to be accessed, and the data specified by the user A second determination step of determining whether or not there is an access right to the part based on a predetermined organizational attribute, and the step of accessing the specified data includes accessing the specified part Including a step for a user who is determined to have the right to access the partIt is characterized by.
[0015]
  A sixth aspect of the present invention is a recording medium in which data management software for managing data using a computer is recorded, in which the first and fourth aspects of the invention are viewed from the viewpoint of a recording medium on which computer software is recorded. In the medium, the software causes the computer to accept designation of which data is to be accessed, and whether or not there is a right to access the designated data is determined according to the organizational attribute given in advance for each user. If the user who is determined to have access rights is allowed to access the specified data and the access right is determined for the specified data, what part of the specified data is Display, and accept the specification of which part of the data is to be accessed. Whether or not the user has access rights to the specified part, the attributes of the organization given in advance for each user, and the user who is determined to have the right to access the specified part to that part. It is made to access.
[0016]
  The invention of claim 3 stores, in the database system for managing data, what type of access the user having what kind of attribute has for each type of data and its part. Access right table, means for checking whether the user has the right to use the database system, means for specifying the data to be accessed, and the user has the right to access the specified data Whether or not the data has a means for determining whether or not the user has access to the specified data, and a means for determining whether the user has access to the specified data. , Means for specifying the part to be accessed, the type of access, the specified part and the type of access Means for determining whether or not the user has an access right based on the access right table, and an access means for executing the access when the user has the access right for the designated part and the type of access; It is provided with.
[0017]
  In the first, third, fourth, and sixth inventions, in addition to the check at the time of login, only when the access right to the data can be confirmed, what part the data has such as the version and the page is presented. Further, the access right is also confirmed for the part to be accessed and the type of access. Thus, the security of the system is further improved by gradually disclosing information to the user.
[0018]
  According to a second aspect of the present invention, in the database system according to the first aspect, each data is divided into a plurality of categories in advance, and the judging means designates whether or not there is an access right to the designated data. It is characterized in that the determination is made based on the relationship between the classified data and the organizational attributes given in advance for each user.
[0019]
  The invention according to claim 5 is based on the view of the invention according to claim 2 from the viewpoint of a method. In the data management method according to claim 4, each of the data is divided into a plurality of classifications in advance, and the determination step is performed. Is characterized by determining whether or not there is an access right to the specified data based on the relationship between the classification of the specified data and the organizational attributes given in advance for each user. .
[0020]
  According to the second and fifth aspects of the present invention, it is possible to efficiently set access rights for a plurality of data having common properties by using a higher level concept such as the type of data and a higher level classification.
[0022]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention (hereinafter referred to as “embodiments”) will be described with reference to the drawings. Note that it is generally considered that the present invention is realized by controlling a computer having a peripheral device with software. In this case, the software is created by combining instructions according to the description of this specification, and the method described in the prior art is used in common with the prior art described above. The software includes not only the program code but also data prepared in advance for use when executing the program code.
[0023]
The software uses physical resources such as a processing device such as a CPU, a coprocessor, and various chip sets, an input device such as a keyboard and a mouse, a storage device such as a memory and a hard disk device, and an output device such as a display and a printer. The effect of this invention is implement | achieved.
[0024]
However, specific software and hardware configurations for realizing the present invention can be variously changed. For example, there are various types of software, such as a compiler, interpreter, and assembler. In order to exchange information with the outside, various types of media such as a removable recording medium such as a floppy disk and a network connection device are conceivable. In addition, a recording medium such as a CD-ROM in which software and programs for realizing the present invention are recorded is an embodiment of the present invention alone. Furthermore, a part of the functions of the present invention can be realized by a physical electronic circuit such as an LSI.
[0025]
As described above, since there are various ways of realizing the present invention using a computer, the present invention and the implementation will be described below using virtual circuit blocks that implement individual functions included in the present invention and embodiments. The form will be described. In addition, in each figure used in the description, the same reference numerals are given to the same elements or the same types of elements as those described in the previous figures, and the description is omitted.
[0026]
[1. Outline of Embodiment]
First, FIG. 1 is a conceptual diagram showing an outline of this embodiment. That is, in this embodiment, as shown in FIG. 1, data such as documents is stored in the database 1, and attributes such as departments and positions for each user are stored in the attribute table H, and access rights are stored. The table T stores what kind of attribute users have access rights for reference and creation for each document stored in the database 1. Further, an output means 3a such as a CRT monitor and an input means 3b such as a keyboard and a mouse are provided as interfaces for exchanging information such as instructions and data with the user.
[0027]
Then, when the user designates a document to be accessed from the designation unit 142, the determination unit 143 refers to the attribute table H and the access right table T described above, thereby changing the attribute of the user to the organization. Based on this, it is determined whether or not the user has access rights to the specified document. When the user has an access right, the access unit 146 executes access to the designated document.
[0028]
[2. Configuration of Embodiment]
[2-1. Overall configuration)
Next, FIG. 2 is a functional block diagram showing a specific configuration of this embodiment. That is, in this embodiment, the present invention is applied to a relational database. As shown in FIG. 2, a database 1, a DBMS (database management system) 2, a display input interface unit 3, and a document management control unit 4 are used. And.
[0029]
Among these, the database 1 is a relational database and can store various data in a table format. The database 1 includes not only documents such as character string texts but also files containing modification data unique to various application programs, image files such as bitmap images, worksheets for spreadsheet programs, drawing tools and graphic software. Various types of files such as drawing data files can be stored as data.
[0030]
However, here, the database 1 stores documents as data, and, as will be described in detail later, it is assumed that a plurality of tables for managing documents and managing access rights to documents are also stored. .
[0031]
The DBMS 2 is a part that performs various operations such as creation, addition, search, update, and deletion on data such as documents stored in the database 1. The display input interface unit 3 is an interface that accepts various instructions and data input from the user and presents information such as data retrieved from the database 1 and messages such as operational prompts to the user. is there.
[0032]
Further, the document management control unit 4 refers to each table in the database 1 in accordance with an instruction from the user given through the display input interface unit 3, and sends a document in the database 1 to a user with access rights. This is the part to be accessed. Specifically, the document management control unit 4 includes a user check unit 41, a document access designation unit 42, a document creation / reference right check unit 43, a document table of contents display unit 44, and a page creation / reference right check. A unit 45 and a page display / writing unit 46.
[0033]
Among these, the user check unit 41 determines whether or not the user trying to access the database 1 is a registered regular user based on the personal ID or password input from the display input interface unit 3. In addition to checking, it is a means of fetching organizational attributes such as affiliation and job title from the table in the database 1 for use in checking access rights.
[0034]
The document access designating unit 42 is a means for designating what mode (type), such as reference, creation, approval, etc., to which document in the database 1 the user accesses. The designation unit 42 obtains the document ID number for uniquely defining which document is designated from the table in the database 1 for the document designated in this way.
[0035]
The document creation / reference right check unit 43 is a means for checking whether the user has the right to refer to, create, and approve the specified document, that is, whether or not there is an access right. You cannot go to the next stage, such as displaying the table of contents.
[0036]
Further, the document table of contents display unit 44 shows a configuration (called a table of contents) such as what version and what logical page (called a logical page or page) the specified document has in a table format. It is a means for displaying. Then, the user looks at this table of contents, specifies which part, that is, which version and which page he / she wants to access to the document table of contents display unit 44, and sets the mode such as the reference mode and the creation mode as the type of access. specify.
[0037]
The page creation / reference right check unit 45 is a means for checking whether or not the user has the right to refer to, create, and the like for the part specified by the document table of contents display unit 44 and the type of access. If you do not have access, you cannot proceed to the next stage. The document creation / reference right check unit 43 and the page creation / reference right check unit 45 determine whether or not each user is permitted to access the specified data. In particular, the page creation / reference right check unit 45 corresponds to the second determination means in the claims.
[0038]
The page display / write unit 46 is means for displaying a page of a designated document. In the page display / writing unit 46, when the document is opened in the creation mode, the document can be written or rewritten on the display screen, and the written content can be registered in the database 1. It is. On the other hand, in the page display / writing unit 46, when the document is opened in the reference mode, the document cannot be written or rewritten. The page display / write unit 46 corresponds to an access means referred to in the claims.
[0039]
[2-2. (Table structure)
In the database 1, the following tables necessary for document management and access right management are registered. First, a table A shown in FIG. 3 is a table storing names, symbols, and document types for individual documents. Further, in this table A, a unique document ID uniquely assigned so as not to overlap each other and each document type to which the document belongs are registered in the table A. Since the documents are mutually identified by the document ID, the document name does not have to be unique (unique) and can be freely named according to the use of the document.
[0040]
Further, the table B shown in FIG. 4 indicates how many and what versions (document Ver) of the entire document are issued and stored for each document specified by the document ID. For example, the document with the document ID “A001” includes two versions of versions 1 and 2 created on different dates.
[0041]
In addition, the table C shown in FIG. 5 stores what logical page each version of the document specified by the document ID in the table B shown in FIG. This version indicates what version (called page version) of this page.
[0042]
The table D shown in FIG. 6 is the table C shown in FIG. 5, which department (creating department) created each logical page and its page version that constitute each document, A security level, which is information that restricts access rights to some departments, is associated.
[0043]
Further, the table E shown in FIG. 7 classifies the document types associated with each document in the table A shown in FIG. As will be described in detail later, this makes it possible to easily set an access right for creating and referring to a higher level concept of major classification. The table A and the table E shown in FIG. 3 are used for classifying individual documents in two layers, and correspond to the above-described classification table.
[0044]
Further, a table F shown in FIG. 8 represents a correspondence relationship indicating what kind of logical page should be included for each document type, and a necessary page by referring to this table when a new document is created. Is configured.
[0045]
Further, the contents of the individual logical pages described above are stored in a separate table, and the table G shown in FIG. 9 shows in which table the contents of each logical page are stored. Yes. In this way, by storing the contents of individual logical pages in a table, the data itself and the data management table can be configured in the same table format that can be handled on a relational database, which facilitates implementation. .
[0046]
Further, the tables TBL01 and TBL02 shown in FIG. 10 constitute the logical page PS01 as shown in the table G of FIG. 9 (FIG. 9). Actual data is divided into two according to the properties of the data. Are stored in the table. Similarly, the tables TBL31 and TBL32 shown in FIG. 11 are tables that store actual data constituting another certain logical page PF01 (FIG. 9). The contents of these pages differ depending on the specific use of the document and the application program to be used. Therefore, it is not necessary to limit to a certain format (format) and can be freely determined.
[0047]
In addition, the document reference right table shown in FIG. 12 is registered based on the major classification and document type of the document to determine which department or position user has access right to access in the reference mode. It is a table that has been. Similarly, in the document creation right table shown in FIG. 13, for each major classification or document type, what kind of department or job user has access rights to access in the creation mode? It is a registered table.
[0048]
Further, the page reference right table shown in FIG. 14 is a table in which, for each logical page of a document, what kind of department or title user has access right to access in the reference mode. In the same page creation right table shown in FIG. 14, for each logical page of a document, what kind of department or title user has access rights to access in the creation mode is registered. It is a table.
[0049]
Each of the tables shown in FIGS. 12 to 14 stores whether or not there is an access right to data based on organizational attributes such as a department and a post, and corresponds to the access right table described above. Further, as described above for each table, these access right tables store whether or not there is an access right for each type of access.
[0050]
In particular, the page reference right table and the page creation right table shown in FIG. 14 set an access right for each page included in the data, but the access right table has a document version and a page version. You can also set access rights for.
[0051]
Further, a table H shown in FIG. 15 is a table storing information related to individual users who use the system. Specifically, it is confirmed whether or not the user is a registered regular user. In addition to the login name and password for this, it includes the department code of the department to which it belongs, the post code representing the post, etc. for use in determining access rights. These departments and positions are attributes of the user's organization, and this table H corresponds to the attribute table described above.
[0052]
[3. Operation of the embodiment]
This embodiment configured as described above operates as follows. Here, FIG. 16 is a flowchart showing a processing procedure in this embodiment.
[3-1. (User authentication and document specification)
First, the user inputs his login name and password from the display input interface unit 3 (step 1). When the data related to the user is input in this way, the user check unit 41 is activated in the document management control unit 4, and the user check unit 41 enters the table H in the database 1 through the DBMS 2 (FIG. 15). Access and check whether the user corresponding to the entered login name or password is registered.
[0053]
As a result, if the corresponding user is registered (step 2), the user check unit 41 reads out the department code and post code of the logged-in user from the table H and stores them in the document management control unit 4. Then, the document access designation unit 42 is activated.
[0054]
If the login is successful in this way, the document access designating unit 42 displays on the display input interface unit 3 what kind of document is stored in the database 1 based on the table A in the database 1 (FIG. 3). A list is displayed on the screen, and the user designates a document he wants to access from a list of documents displayed in this way (step 3). In this designation, the document ID specifies which document the user wants to see, and specifies whether the user simply wants to refer to the document (reference mode) or wants to edit (creation mode).
[0055]
It should be noted that the format in which the document is specifically displayed is arbitrary and not shown again, but may be simply displayed in a list based on, for example, the document name order, last update date order, For example, a tree may be displayed for each document type or directory, or may be displayed for each access right level.
[0056]
[3-2. (Determining access rights per document)
Subsequently, the document access designating unit 42 specifies the document type corresponding to the designated document by searching the table A (FIG. 3) in the database 1 based on the document ID of the designated document ( Step 4) Further, the table E (FIG. 7) in the database 1 is searched to obtain a large classification corresponding to the document type (Step 5).
[0057]
Next, the document creation / reference right check unit 43 of the document management control unit 4 stores the document type and major classification acquired in this way and the user's department and title obtained from the table H in the database 1. The document reference right table (FIG. 12) and the document creation right table (FIG. 13) are checked to determine whether the user has the access right to refer to and create the designated document (step 6).
[0058]
For example, how the access right is set by taking the document reference right table shown in FIG. 12 as an example.
(1) For the document type TS01, a user whose first three characters of the department code are BUA has a reference right.
(2) As for the document type TS02, there is a reference right if the title is A or B, regardless of the user in which department.
(3) For documents belonging to the major classification TS-B, for example, documents of document types TS04 and TS05, users of any post in any department have a reference right regardless of the type of document.
The “*” mark (asterisk) in the document reference right table (FIG. 12) and the document creation right table (FIG. 13) indicates that there is no limitation on the item, that is, a so-called wild card. If it is determined in step 6 that there is an access right, the next document table of contents display unit 44 is activated.
[0059]
[3-3. (Determining access rights for each page)
The document table of contents display unit 44 searches the tables A, B, C, and D (FIGS. 3 to 6) in the database 1 based on the document ID of the document designated by the user, and how the document is displayed. Information indicating whether it is made up of a specific version, page, page version, etc., and what version, page or page version exists in the specified document based on this information, and each security level The created department is displayed (step 7).
[0060]
Then, based on this display, the user designates which page or version the user wants to access, and what mode the user wants to access such as reference or creation, that is, the type of access (step 7). Here, it is assumed that the user designates an access target based on a logical page.
[0061]
Then, the page creation / reference check unit 45 further determines whether the user has the creation right or the reference right for the specified part and the type of access. A search is made by searching the right table (FIG. 14) (step 8). Here, the format in which the access right is set in the page reference right table or the page creation right table is the same as that described above for the document reference right table (FIG. 12).
[0062]
Further, the page creation / reference right checking unit 45 refers to the security level stored in the table D (FIG. 6) in the database 1 for the specified page version of the specified logical page (step 9). This item of confidentiality level temporarily limits the access right to the logical page of each document to some departments and titles. For example, the logical level set as “J” in FIG. Only users in the department registered as the creation department of the logical page can refer to and create the page.
[0063]
In addition, when a department code other than “J” described above, for example “BUA02” (FIG. 6), is set, it can be referred to and created only by the same department or created department as the set code. Show. Although an example in which the confidential level is set for the data page and its version is shown here, the confidential level may be set in units of the entire document or the version of the document.
[0064]
[3-4. (Access to page)
The page display / writing unit 46 displays the substance of the page specified by the user only when all the checks as described above are determined to have access rights, and the type of access specified by the user. Accordingly, it is possible to only refer to the content or to edit the content (step 10). On the other hand, if it is determined in step 2, 6, 8 or 9 that there is no access right, access is denied.
[0065]
Specifically, the page display / write unit 46 searches the table G (FIG. 9) in the database 1 for the table name in which table the data corresponding to the designated logical page is stored, Data corresponding to the designated document ID and logical page is acquired and displayed from the tables having the table names determined by the above, for example, the tables TBL01 and TBL02 (FIG. 10) and the tables TBL31 and TBL32 (FIG. 11).
[0066]
For example, as a result of referring to the table G, it is found that the data representing the contents of the logical page PS01 is included in the tables TBL01 and TBL02. By searching, the data of the page specified by the user can be acquired and displayed on the display input interface unit 3.
[0067]
If the user has designated the “create” mode as the type of access to the logical page, for example, a blinking cursor appears in the editable character string portion on the display screen, and the user moves the cursor. When the contents are edited and the end operation is performed, the edited contents are written back to the corresponding table again, whereby the document in the database 1 is updated.
[0068]
When a new version of a document, a new logical page, or a new version of a logical page is created by such creation, the tables B, C, etc. are updated accordingly, and the newly created part is appropriate. It is added to the table and should be available for subsequent access.
[0069]
[4. Effects of the embodiment
As described above, in this embodiment, it is determined whether access to each data is permitted based on the organizational attribute of the user stored in the table H, that is, the department or job title. For this reason, if the department or position changes due to transfer between departments, joining, retirement, etc., only the information indicating those attributes for each user needs to be maintained, and the contents of the access right automatically change accordingly. become.
[0070]
This eliminates the need for troublesome operations such as inputting a password for each data to be accessed, changing a password when changing data, and resetting the access right for each data. That is, for each user, a department or position registered in the table H (FIG. 15) can use the information file in the HR department as it is, or the HR department without the need for the information processing department. It can be configured to change directly.
[0071]
For this reason, when there is a change in department or position, there is no need to re-set the access right from the viewpoint of access right, and the access right can be easily managed without contradiction even in relation to other personnel information. . That is, according to this embodiment, labor saving can be achieved overwhelmingly compared with the case where all the information related to the access right of each individual is changed and created as in the prior art.
[0072]
On the other hand, for example, when the division of work for a department is changed and the document creation and reference rights are changed, only the access right table such as the reference right table or the creation right table needs to be changed. Since it is not necessary to change the related information, the access right can be managed very easily in this respect.
[0073]
In this embodiment, the document type shown in the table A (FIG. 3) and the higher-level concept such as the higher-level major classification as shown in the table E (FIG. 7), that is, the unit of the unit indicating a plurality of documents is used. Thus, it is possible to efficiently set access rights for a plurality of data having common properties.
[0074]
In particular, in this embodiment, since the presence / absence of the access right is determined based on both the department and the post, it is easy to apply to many organizations that are organized by department and have a hierarchical post system.
[0075]
Further, in this embodiment, the access right can be set as shown in FIGS. 12 to 14 according to the type of access such as reference only for viewing the document, creation of the document, and approval of the contents of the document. Security can be finely managed according to the scope of authority.
[0076]
In this embodiment, access rights can be set for data such as documents in units of versions or pages. For this reason, if even one data has different characteristics depending on the part, it is not necessary to forcefully decide whether or not to permit access as the whole data. Accordingly, it is possible to finely set whether to give priority to use of information by granting access or to give priority to security without granting access according to the nature of the part.
[0077]
Further, in this embodiment, the table D (FIG. 5) is used for data related to confidential matters that must be kept secret from other departments within the organization, and data that is in the process of being created and is not yet disclosed to other departments. As shown in 6), access can be limited only to users in some departments, such as the department that created the data, and security is further improved.
[0078]
In this embodiment, the contents of the page are also stored in an easy-to-handle table format on the relational database as shown in FIGS.
[0079]
That is, in this embodiment as described above, the setting of the access right to data can be performed collectively by a high-level concept such as data type or major classification, or can be performed in units of data such as version or page. You can also. In addition, access rights can be set based on these units and departments.
[0080]
For this reason, it is possible to easily achieve both information sharing and security by disclosing appropriate types of data and appropriate portions of data to appropriate managers of related departments. In particular, in this embodiment, in addition to the check at the time of login, only when the access right to the data can be confirmed by the document creation / reference right check unit 43, what kind of part the data has such as version and page is stored in the document table of contents. Presented by the display unit 44. Further, the page creation / reference right check unit confirms the access right for the part to be accessed and the type of access. Thus, the security of the system is further improved by gradually disclosing information to the user.
[0081]
As specific contents of the document in this embodiment, for example, a document describing technical contents such as a standard document, a standard document, and a standard project document can be cited. In such a document, for example, An example of configuring a logical page for each unit that is organized as in product specifications, standards, and handling rules, increasing the version each time the content is revised, and saving both the previous version and the revised version Can be considered.
[0082]
By applying the present invention to such an example, for example, the latest version of a document or page that is disclosed to each department in the document is accessed, and the older version of the document or page is accessed only by the person in charge. By doing so, it is possible to prevent unnecessary disclosure of information and improve security while promoting information sharing.
[0083]
[5. Other Embodiments]
The present invention is not limited to the embodiment described above, and includes other embodiments as exemplified below. For example, in the embodiment described above, a department or job title is stored as an organizational attribute in the form of a code. However, for example, only one of the department or job title may be used. You can also determine whether you have access rights based on organizational attributes other than departments and positions, such as regular employees, contract employees, and temporary employees. It may be stored as a character string such as “section manager”.
[0084]
In addition, various tables as described above may be integrated by increasing the number of items per table and may be subdivided. In the above-described embodiment, an example is shown in which each document is divided into two layers of document type and major classification. However, the document can be divided into three or more layers.
[0085]
In the embodiment described above, the presence / absence of the access right is determined in two stages, that is, the document unit and the page unit. However, the determination can be performed all at once. In the above-described embodiment, three types of data, that is, a data version, a page included in the data, and a page version are shown. However, it is not always necessary to determine the access right for each of these parts. Also, only one or two of these can be introduced.
[0086]
Further, it is not essential to limit access to only a part of users in the department depending on the confidentiality level, and it is not essential to store the contents of each page in the table. In addition, for example, when the system itself is in a safe place and can only be operated by authorized users, means and processing for checking whether the user has the right to use the database system are not essential.
[0087]
【The invention's effect】
As described above, according to the present invention, it is possible to easily change the management by associating the access right with the attribute on the user's organization.
[Brief description of the drawings]
FIG. 1 is a conceptual diagram showing an outline of an embodiment of the present invention.
FIG. 2 is a functional block diagram showing a specific configuration of the embodiment of the present invention.
FIG. 3 is a diagram exemplifying contents of a table A for comparing document IDs and document types in the embodiment of the present invention.
FIG. 4 is a diagram exemplifying contents of a table B for comparing document IDs and versions in the embodiment of the present invention.
FIG. 5 is a view exemplifying contents of a table C for comparing a document ID with a logical page in the embodiment of the present invention.
FIG. 6 is a diagram exemplifying the contents of a table D for comparing logical pages with security levels in the embodiment of the present invention.
FIG. 7 is a diagram illustrating the contents of a table E for comparing document types and major classifications in the embodiment of the present invention.
FIG. 8 is a diagram exemplifying contents of a table F for comparing document types and logical pages in the embodiment of the present invention.
FIG. 9 is a diagram exemplifying the contents of a table G for comparing logical pages with table names in the embodiment of the present invention.
FIG. 10 is a diagram illustrating contents of tables TBL01 and TBL02 in the embodiment of the present invention.
FIG. 11 is a diagram illustrating contents of tables TBL31 and TBL32 in the embodiment of the invention.
FIG. 12 is a diagram exemplifying contents of a document reference right table for setting an access right related to reference in units of documents in the embodiment of the present invention.
FIG. 13 is a diagram exemplifying contents of a document creation right table for setting an access right related to creation in units of documents in the embodiment of the present invention;
FIG. 14 illustrates contents of a page reference right table for setting an access right related to reference in units of pages and a page creation right table for setting an access right related to generation in units of pages in the embodiment of the present invention. To do.
FIG. 15 is a diagram exemplifying the contents of a table H for comparing departments for each user in the embodiment of the present invention.
FIG. 16 is a flowchart showing a processing procedure in the embodiment of the present invention.
[Explanation of symbols]
1 ... Database
2 ... DBMS
3. Display input interface
3a ... Output means
3b: Input means
4. Document management control unit
41 ... User check section
42 ... Document access specification section
142 ... designation means
43 ... Document creation / reference right check section
143 ... Judgment means
44. Document table of contents display section
45 ... Page creation / reference right check part
46 ... Page display / writing section
146 ... access means
H ... Attribute table
T ... Access right table

Claims (6)

In a database system that manages data,
A means for specifying which data to access;
A determination means for determining whether or not there is an access right to the designated data based on organizational attributes given in advance for each user;
An access means for accessing the specified data for a user who is determined to have access rights;
A means for displaying what part the specified data has when it is determined that the user has access to the specified data;
Means for specifying which part of the data to access;
A second judging means for judging whether or not there is an access right to the designated part with respect to an attribute on the organization given in advance for each user ;
The database system characterized in that the access means is configured to allow a user who is determined to have an access right to a specified part to access that part . Divide each data into multiple categories beforehand,
The determination means determines whether or not there is an access right to the specified data based on the relationship between the classification of the specified data and the attribute on the organization given in advance for each user. The database system according to claim 1 , wherein the database system is configured. In a database system for managing data, an access right table storing what kind of access a user having what organizational attribute has for each data and each part thereof, and
Means to check if the user has the right to use the database system;
Means for designating data to be accessed, and means for judging whether or not the user has access rights to the designated data based on attributes of the user's organization and the access right table When,
When the user has access to the specified data, a means of presenting what part the data has;
Means for specifying the part to be accessed and the type of access;
Means for determining, based on the access right table, whether the user has access rights for the specified part and access type;
A database system comprising: access means for executing access when a user has an access right for a designated part and an access type. In a data management method in which a computer manages data,
The computer
Accepting a specification of what data on the database the user will access via the input interface;
Determining the presence or absence of access to specified data based on organizational attributes given in advance for each user;
Allowing a user determined to have access rights to access the specified data;
Displaying what part the specified data has for the user determined to have access to the specified data; and
Receiving a designation of which part of the displayed data is to be accessed by the step of displaying what part the data has by the input interface ;
A second determination step of determining whether there is an access right to the portion of the data designated by the user based on an attribute on the organization given in advance,
The step of accessing the designated data includes the step of allowing a user who is determined to have access rights to the designated portion to access that portion . Divide each data into multiple categories beforehand,
The step of determining the presence or absence of the access right determines whether or not there is an access right to the designated data based on the relationship between the classification of the designated data and the organizational attribute given in advance for each user. 5. The data management method according to claim 4 , wherein the determination is based on the determination. In a recording medium recording data management software for managing data using a computer,
The software is on the computer,
Accept the specification of which data to access,
Whether each user has access to the specified data based on organizational attributes given in advance for each user,
For users who are determined to have access rights, access the specified data,
If it is determined that you have access to the specified data, you can display what part the specified data has,
Allows you to accept which part of the data you want to access,
To determine whether or not you have access to the specified part, for each user attribute in the organization attribute given in advance,
A recording medium on which data management software is recorded , wherein a user who is determined to have access rights to a specified part is allowed to access the part .

Images