JP4865642B2 - Access right setting device, access right setting method, and access right setting program - Google Patents

Description

  The present invention relates to an access right setting device, an access right setting method, and an access right setting program for setting an access right for a folder having a hierarchical structure.

  In general, in a computer system, the authority (access right) to read a folder or write to change the file contents in the folder is determined by the administrator of the system in consideration of the usage status and confidentiality of the folder. The user who can use the folder can be limited, or can be set so that it cannot be used for a specific user.

  FIG. 11 is a diagram showing a conventional system for setting access rights to a folder. The file server 1 is a server that manages a folder (file storage location) having a hierarchical structure. The user device 2 is a processing device (for example, a personal computer) operated by a user. The administrator device 3 is a processing device (for example, a personal computer) operated by a system administrator.

  Folders managed by the file server 1 have a hierarchical structure as described below. That is, as shown in FIG. 11, the shared folder A has a folder A1 and a folder A2 as folders in the immediately lower hierarchy, the folder A1 has a folder A1-1 as a folder in the immediately lower hierarchy, and the folder A1. -1 has a folder A1-1-1 and a folder A1-1-2 as folders directly below, and the folder A1-1-2 has a folder A1-1-2-1 as a folder directly below. Have. The folder A1, the folder A2, the folder A1-1, the folder A1-1-1, the folder A1-1-2, and the folder A1-1-2-1 shown in FIG. 11 are all folders under the shared folder A. .

  Conventionally, when an access right is given to a user who does not have an access right for a specific folder under the shared folder A, the administrator operates the administrator device 3 to operate the specific folder. Give access only. Specifically, the manager device 3 transmits a control signal to the file server 1 so that the user can access the specific folder.

  When the specific folder is the folder A1-1 shown in FIG. 11, the user who is given the access right (for example, the write right) operates the user device 2 to, for example, the full path name \\ file server \ shared folder. By designating the A \ folder A1 \ folder A1-1, it is possible to directly access the folder A-1 of the file server and exercise the access right (for example, the write right).

In Patent Document 1 below, when a change in access right to a folder is instructed, a document directly under the instruction folder, a folder belonging to a lower hierarchy of the instruction folder, and a part or all of a document directly under the lower hierarchy folder The document processing apparatus for selecting the batch setting change with respect to the operation input is described.
JP 2003-223363 A

  In the prior art described above with reference to FIG. 11, a user who is given access rights to a specific folder can directly access the specific folder by specifying the full path name for the specific folder.

  However, when the position of the specific folder is lower than the highest hierarchy folder (shared folder A in FIG. 11), the full path name (for example, \\ file server \ shared folder A \ folder). If access is made by designating A1 \ folder A1-1), if an intermediate folder name (eg, folder A1) is designated by mistake, the specific folder (eg, folder A1-1) is accessed. I can't.

  For example, as a method of accessing the folder A1-1 other than the method of specifying the full path name for the folder A1-1 to which the access right shown in FIG. 11 is given, the user first accesses the shared folder A. Then, a method of accessing the folder A1-1 by accessing the folders under the shared folder A can be considered. For example, it is conceivable that the user sequentially accesses the shared folder A and the folder A1 and reaches the folder A1-1 that is a folder immediately below the folder A1. However, if the access right is not given to the folder at the upper level of the folder A1-1 (the shared folder A, the folder A1, and the folder A2 in FIG. 11), the folder A1-1 cannot be processed. There is a problem.

  Further, for example, in the file server 1, when the folder access right is set so that the access right for the folder in the upper hierarchy is inherited (successed) by the folder under the folder, the folder A1 -1 gives access rights to the folders under the folder A1-1 (in FIG. 11, folder A1-1-1, folder A1-1-2, folder A1-1-2-1). Is automatically granted, but if the access right setting for the folder is set so that the access right for the upper-level folder is not inherited to the folder under the folder, the access right for the folder under the folder is set. Is not granted. Therefore, there is a problem that the user cannot know whether or not a folder in the lower hierarchy of the folder to which the access right is granted can be accessed before attempting to access the folder in the lower hierarchy.

  According to the present invention, a user who is given access rights for a folder proceeds to a folder to which the access rights are given in order from a folder (for example, a shared folder) in an upper hierarchy of the folder, and accesses the folder. An object of the present invention is to provide an access right setting device and an access right setting method.

  The present invention also provides an access right setting device, an access right setting method, and an access that allow a user who is given access rights to a folder to know in advance whether the user can access a folder in a lower hierarchy of the folder. The purpose is to provide a rights setting program.

  An access right setting device according to the present invention is an access right setting device for setting an access right for a folder having a hierarchical structure, and accepts an access right setting request for the folder and sets the access right to be set. For each selected folder and user, whether to give the user the right to display a list of folders in the upper hierarchy of the folder. With reference to the access right setting request receiving means registered in the storage means as the access right setting information, and the access right setting information registered in the storage means, the access right for the selected folder and the user is set for each folder. The type and whether or not to give the user the authority to display a list of folders in the upper hierarchy of the folder And an access right setting means for constant.

  Preferably, in the access right setting device of the present invention, the type of the access right is at least a read right and a write right for the selected folder.

  Preferably, in the access right setting device of the present invention, the access right setting means further verifies whether or not the access right is succeeded to a folder in a lower hierarchy of the folder in which the access right is set. The verification result is notified to the user.

  Further, the access right setting method of the present invention is an access right setting method in an access right setting device for setting an access right for a folder having a hierarchical structure, and an access right setting request receiving means provided in the access right setting device. Receives an access right setting request for the folder, selects a folder and a user for which an access right is to be set, and sets the type of access right for the folder and the type of the folder for each selected folder and user. Whether or not to grant the right to display the list of folders in the upper hierarchy to the user is registered in the storage means as access right setting information, and the access right setting means provided in the access right setting device is stored in the storage means. With reference to the registered access right setting information, for each of the selected folder and user, the folder The type of access rights against the permission to view the list of folders of the upper hierarchy of the folder to set whether transient given to the user.

  Preferably, in the access right setting method of the present invention, the type of the access right is at least a read right and a write right for the selected folder.

  Preferably, in the access right setting method of the present invention, the access right setting means further verifies whether or not the access right is succeeded to a folder in a lower hierarchy of the folder in which the access right is set. The verification result is notified to the user.

  The access right setting program of the present invention is a program for setting an access right for a folder having a hierarchical structure. The access right setting program accepts a request for setting an access right for the folder, and sets the access right to be set. Whether or not to grant the user the authority to display the type of access right to the folder and the list of folders in the upper hierarchy of the folder for each of the selected folder and user. An access right setting request reception process for registering the heel as access right setting information in the storage means, and access to the folder for each selected folder and user with reference to the access right setting information registered in the storage means The right type and the right to display the list of folders in the upper hierarchy of the folder. To execute an access right setting process of setting a grant to whether transient.

  The present invention sets, for each folder and user, the type of access right to the folder and whether or not to give the user the right to display a list of folders in the upper hierarchy of the folder. Therefore, according to the present invention, a user who is granted the right to display the list of folders is given the access right in order from a folder (for example, a shared folder) at a higher level than the folder to which the access right is given. It is possible to access the folder by proceeding to the folder.

  Further, the present invention verifies whether or not the access right is inherited for a folder in a lower hierarchy of the folder for which the access right is set, and notifies the user of the verification result. Therefore, according to the present invention, it is possible for a user who is given access rights to a folder to know in advance whether or not a folder in a lower hierarchy of the folder can be accessed.

  Furthermore, conventionally, an administrator who can set access rights can usually freely grant access rights to folders, and the administrator does not know what the actual access rights are. However, according to the present invention, it is possible to easily manage which user is given what access right for a certain folder.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing an example of the overall configuration of the present invention. The file server 1, user device 2, and administrator device 3 shown in FIG. 1 are the same as the file server 1, user device 2, and administrator device 3 described above with reference to FIG. That is, the file server 1 is a server that manages folders having a hierarchical structure, the user device 2 is a processing device (for example, a personal computer) operated by a user, and the administrator device 3 is a system administrator. A processing device (for example, a personal computer) to be operated. The file server 1 has an access right setting information database (DB) 11 in which the setting contents of the access right for each folder of the file server 1 are stored. When the file server 1 receives an access request for a folder from the user device 2 operated by the user, the file server 1 causes the user to exercise the access right to the folder according to the access right setting contents stored in the access right setting information DB 11.

  The access right setting device 4 is a processing device that sets an access right for a folder having a hierarchical structure of the file server 1. Specifically, the access right setting device 4 receives a request for setting an access right for a folder from the administrator device 3, and selects a folder and a user for which the access right is to be set according to an input designated by the administrator. Then, for each selected folder and user, the access right setting device 4 grants the user the right to display the type of access right for the folder and the list of folders in the upper hierarchy of the folder. Is registered in the storage means (access right setting information table 43 and access right setting information detailed table 44 shown in FIG. 2 described later) as access right setting information.

  The folder list display authority is an authority to display on the user device 2 a list of folders in the upper hierarchy of the folder.

  Then, the access right setting device 4 sets the access right setting information indicated by the registered access right setting information in the access right setting information DB 11 provided in the file server 1 (transmits a control signal to the file server 1). Then, the setting contents of the access right are set in the file server 1). It is assumed that a user who is given access rights for a folder whose access rights are to be set is given the right to display (list display) the folders on the user device 2.

  For example, the access right setting device 4 gives a user who operates the user device 2 a write right to the folder A1-1 shown in FIG. The display authority of the shared folder A, folder A1, and folder A2, which is a folder in the upper hierarchy (the display authority of the list of folders in the upper hierarchy of the folder A1-1), is given to the user.

  When the user is given the right to display a list of folders in the upper hierarchy of the folder A1-1, the user is displayed on the user device 2 when the user device 2 accesses the file server 1. In order from the shared folder A to the folder A1-1 to which the write right is given, the folder A1-1 can be reached. That is, first, when the user device 2 accesses the file server 1 by specifying the file server name of the file server 1 and the folder name of the shared folder A, the file server 1 displays the shared folder A on the user device 2. When the user designates the displayed shared folder A by clicking or the like, the folder A1 and the folder A2, which are folders directly under the shared folder A, are displayed. When the user designates the displayed folder A by clicking or the like, the folder A1-1 that is the folder immediately below the folder A and to which the write right is given is displayed, and the user can select the folder A1- You can exercise your right to write 1.

  According to an embodiment of the present invention, when the user device 2 accesses the file server 1, the file server 1 is placed on the user device 2 above the folder A1-1 to which the write right is granted. You may make it display a hierarchy folder and this folder A1-1 at once.

  According to one embodiment of the present invention, the access right setting device 4 verifies whether or not the access right is succeeded to a folder in a lower hierarchy of the folder for which the access right is set, and displays the verification result. You may make it notify a user. Specifically, the access right setting device 4 acquires data indicating access right setting contents for each folder from the access right setting information DB 11 provided in the file server 1, and indicates the acquired access right setting contents. Based on the data, folders (eg, folder A1-1-1, folder A1-1-2, folder A1-1-2) in a lower hierarchy than the folder (for example, folder A1-1) for which the access right is set. In 1), it is verified whether or not the access right is succeeded, and the verification result is notified to the user device 2.

  The access right setting information DB 11 has, for example, a data structure having information indicating the hierarchical structure of the folder of the file server 1, and the access right setting device 4 accesses the file server 1 to set the access right. By referring to the information DB 11, a folder in the lower hierarchy of the folder for which the access right is set is recognized, and it is verified whether or not the access right is succeeded to the recognized lower hierarchy folder.

  The access right setting device 4 may notify the administrator device 3 of the verification result. Further, the access right setting device 4 notifies the verification result by e-mail or the like, for example.

  The access right setting device 4 verifies whether or not the access right is succeeded to a folder in a lower hierarchy of the folder for which the access right is set, and notifies the user of the verification result, thereby accessing the folder. It is possible to know in advance whether an authorized user can access a folder in a lower hierarchy of the folder.

  In addition, the types of access rights for folders registered in the storage means by the access right setting device 4 described above are at least read rights and write rights for folders. That is, the type of access right is, for example, read right, write right, or no access right for the folder.

  FIG. 2 is a diagram showing a detailed configuration example of the present invention. The file server 1, user device 2, administrator device 3, and access right setting device 4 are connected to each other via a network 5. As shown in FIG. 2, the access right setting device 4 includes an access right setting request receiving unit 41, an access right setting unit 42, an access right setting information table 43, and an access right setting information detail table 44.

  The access right setting request receiving unit 41 receives an access right setting request for a folder from the administrator device 3. In addition, the access right setting request receiving unit 41 selects a folder and a user for which an access right is to be set according to a designation input by an administrator who operates the administrator device 3, and for each selected folder and user, A storage means (access right setting information table 43, access right) indicating the type of access right to the folder and whether or not to give the user the right to display a list of folders in the upper hierarchy of the folder. It is registered in the setting information detail table 44).

  The access right setting unit 42 refers to the access right setting information registered in the access right setting information table 43 and the access right setting information detail table 44 and accesses the right to the folder for each of the selected folder and user. And whether or not to give the user the authority to display the list of folders in the upper hierarchy of the folder is set in the file server 1 (set in the access right setting information DB 11 provided in the file server 1). )

  The access right setting information table 43 stores information (for example, a full path name for the folder) that is selected in accordance with the administrator's designated input and identifies a folder to which an access right is to be granted. The access right setting information detail table 44 includes the type of access right to be assigned for each user to which the access right is to be granted and each folder to which the access right is to be assigned, selected according to the designation input by the administrator, Information indicating whether or not to give a user the authority to display a list of folders at a higher hierarchy than the folder to which access rights are to be granted is stored.

  According to one embodiment of the present invention, the access right setting unit 42 acquires the setting contents of the access right from the access right setting information DB 11 provided in the file server 1 via the network 5, and the access right setting unit 42 Based on the setting contents, it is verified whether or not the access right is succeeded to a folder in a lower hierarchy of the folder for which the access right is set, and the verification result is notified to the user apparatus 2 via the network 5. .

  Note that the functions of the access right setting device 4 and each unit described above are realized by a CPU and a program executed thereon. The program for realizing the present invention can be stored in a computer-readable recording medium such as a semiconductor memory, a hard disk, a CD-ROM, a DVD, or the like, provided by being recorded in these recording media, or communication. It is provided by transmission / reception using a network via an interface.

  FIG. 3 is a diagram illustrating an example of a hierarchical structure of folders managed by the file server. For example, the file server 1 shown in FIG. 3 has a file server name “filesv”. Also, as shown in FIG. 3, the shared folder with the folder name a0 has a folder with the folder name a0-1 and a folder A2 with the folder name a0-2 as the folders immediately below, and the a0- A folder with a folder name of 1 has a folder with a folder name of a0-1-1 as a folder in the immediately lower hierarchy, and a folder with a folder name of a0-1-1 has as a folder of the immediately lower hierarchy as a0-1 -1-1 and a0-1-1-2, and the folder a 0-1-1-2 is designated as a0-1 It has a folder with a folder name of -1-2-1.

  FIG. 4 is a diagram illustrating an example of a data configuration of the access right setting information table. The access right setting information table 43 shown in FIG. 4 has a data structure such as ID, target folder, and status. In the ID, identification information for uniquely identifying a record (data for one line) in the access right setting information table is registered. In the item of the target folder, the full path name for the folder (target folder) to which the access right is given is registered. For example, when the folder whose folder name is a0-1-1-2 shown in FIG. 3 is selected as the access right grant target folder, the access right setting information table 43 includes the access right shown in FIG. As shown in the first record of the setting information table, the full path name of \\ filesv \ a0 \ a0-1 \ a0-1-1 \ a0-1-1-2 is registered in the target folder item. . The status indicates the access right setting status. For example, “initial state” registered in the state item indicates that the access right is not set.

  FIG. 5 is a diagram illustrating an example of a data configuration of the access right setting information detail table. The access right setting information detailed table shown in FIG. 4 has a data structure such as ID, item number, target user, access right, and higher setting flag. ID indicates a record of the access right setting information table 43 corresponding to the same ID as the ID. That is, the ID registered in the access right setting information detail table 44 indicates a target folder corresponding to the ID in the access right setting information table 43. Of the records in the access right setting information detail table 44, the record in which the same ID is registered is a group of records indicating the setting contents of the access right for the same target folder indicated by the ID.

  In the item number, identification information for uniquely identifying a record of the access right setting information detail table 44 is registered. The item number having the largest value corresponding to the same ID indicates the number of users who are given access rights to the target folder indicated by the ID.

  In the target user item, user account information that can be recognized by the file server 1 and that is information for identifying a user to whom an access right for the target folder indicated by the value registered in the ID item is given is registered. The

  In the access right item, information indicating the type of access right to be given to the target user for the target folder is registered. For example, information indicating the type of access right such as read right, write right, and no access right is registered. The read right is a right to read a file in the target folder. According to an embodiment of the present invention, a user who is given the read right has the right to display a list of target folders and the right to refer to files in the target folder.

  The write right is a right to write to a file in the target folder. According to an embodiment of the present invention, a user who has been given the write right has the right to display a list of target folders, the right to refer to files in the target folder, the right to add files in the target folder, Have the authority to update the file and delete the file in the target folder. “No access right” indicates that the access right is lost to the user who had the access right.

  In the upper setting flag item, there is information indicating whether or not to grant the display right of the list of folders in the upper hierarchy of the folder to which the access right is granted to the user registered in the target user item. be registered. TRUE registered in the upper setting flag item indicates that the right to display the list is given to the user, and FALSE registered in the upper setting flag item indicates the right to display the list to the user. Indicates that it will not be granted.

  That is, the registered contents in the access right setting information table 43 described with reference to FIG. 4 and the registered contents in the access right setting information detailed table 44 described with reference to FIG. Access right setting information indicating whether or not to give the user the right to display a list of folders in the upper hierarchy of the folder.

  FIG. 6 is a data configuration example in the access right setting information DB provided in the file server. In the access right setting information DB 11, for each folder, data including a folder main body and a security information section for the folder as shown in FIG. 6A is stored.

  In the data configuration example shown in FIG. 6A, the access right setting information DB 11 also stores information indicating the hierarchical structure of folders. For example, a dotted connection line in FIG. 6A indicates a relationship between a folder and a folder immediately below (belonging to) the folder.

  In the security information section, as shown in FIG. 6B, information indicating the type of access right (write right, read right, no access right) assigned to the folder for each user, and list display right ( Information indicating whether or not the right to display a list of the folders has been granted for the folder is set. When the access right setting device 4 is set to give the user the right to display a list of folders in the upper hierarchy of the target folder to which the access right is given, the security corresponding to the folder in the upper hierarchy is set. Information indicating that a list display right is given to the user is set in the information section.

  The access right setting unit 42 included in the access right setting device 4 refers to, for example, the security information part of the data corresponding to the folder under the target folder to which the access right is granted in the access right setting information DB 11. It is verified whether or not the subordinate folder has inherited the access right to the target folder.

  FIG. 7 is a diagram showing an example of an access right setting request receiving process flow by the access right setting device. First, when the access right setting request receiving unit 41 receives an access right setting request transmitted from the administrator device 3 (step S1), the administrator device 3 is notified of the target folder as shown in FIG. A selection screen is displayed (step S2). Note that the target folder selection screen is not limited to the screen shown in FIG. When the administrator designates a target folder for which access right grant is requested on the screen shown in FIG. 8 and presses an “OK” button, the access right setting request receiving unit 41 selects the target folder (step S3). .

  Next, the access right setting request receiving unit 41 displays a selection screen for the target user and the access right on the user device 2 as shown in FIG. 9 (step S4). The screen shown in FIG. 9 shows the type of access right to be granted for the target folder selected in step S2, the target user to whom the access right is given, and the folders in the upper hierarchy of the target folder for the target user. It is a screen for registering whether or not to grant the right to display the list. As for the type of access right, a type such as read right, write right and no access right is displayed on the screen in a pull-down format, and the administrator can select the type of access right according to the screen display. Good.

  When the administrator specifies on the screen shown in FIG. 9 whether or not the target user, the type of access right, and whether or not to give the target user the right to display a list of folders in the hierarchy above the target folder, the access right The setting request receiving unit 41 selects the target user (step S5), selects the type of access right (step S6), and grants the display right to the list of folders in the upper hierarchy of the target folder to the target user. Is selected (step S7).

  Next, the access right setting request receiving unit 41 determines whether to add a target user (step S8). If the access right setting request receiving unit 41 determines to add the target user, the process returns to step S5. When the access right setting request receiving unit 41 determines not to add the target user, the access right setting request receiving unit 41 stores the target folder selected in step S2 and the target folder in the access right setting information table 43. Is registered (adds a record corresponding to the target folder) (step S9).

  In addition, the access right setting request accepting unit 41 adds the ID corresponding to the target folder registered in step S9 and the target user selected in step S5 to the access right setting information detailed table 44 in step S6. The type of access right selected and information indicating whether or not to grant the right to display the list of folders in the upper hierarchy of the target folder to the target user selected in step S7 (access right A record of the setting information detail table 44 is added) (step S10).

  FIG. 10 is a diagram illustrating an example of an access right setting process flow by the access right setting device. First, the access right setting unit 42 extracts a record in which the initial state is registered in the state item from the access right setting information table 43 (step S11). Next, it is determined whether the access right setting processing for the target folder corresponding to the record whose initial state is registered in the state item has been completed for all of the records (step S12). If the access right setting unit 42 determines that the access right setting process for the target folder has been completed for all the records in which the initial state is registered in the state item, the process ends. When the access right setting unit 42 determines that there is a record for which the access right setting process for the target folder has not been completed, the access right setting unit 42 refers to the access right setting information detailed table 44 and changes the above state. The target user corresponding to the target folder in the record of the access right setting information table 43 whose initial state is registered in the item is extracted from the access right setting information detailed table 44 (step S13).

  Then, the access right setting unit 42 sets an access right for the extracted target user (step S14). Specifically, the access right setting unit 42 refers to the access right setting information detailed table 44 and acquires information indicating the type of access right corresponding to the target folder and the target user. Then, the access right setting unit 42 transmits a control signal to the file server 1, and the data acquired by the target user in the data corresponding to the target folder in the access right setting information DB 11 provided in the file server 1 is acquired. Set to grant access rights according to the type of access rights.

  Next, the access right setting unit 42 refers to the access right setting information detailed table 44 and determines whether or not it is necessary to set display authority for the list of folders in the upper hierarchy of the target folder for the target user. (Step S15). If the access right setting unit 42 determines that it is not necessary to set the display authority for the list of folders in the upper hierarchy of the target folder for the target user, the process proceeds to step S17.

  When the access right setting unit 42 determines that it is necessary to set display authority for a list of folders in a hierarchy higher than the target folder for the target user, the access right setting unit 42 sets the target folder for the target user. The authority to display the list of folders in the upper hierarchy is set (step S16). Specifically, the access right setting unit 42 transmits a control signal to the file server 1 and data corresponding to a folder in the upper hierarchy of the target folder in the access right setting information DB 11 provided in the file server 1. In FIG. 5, it is set that the right to display a list of folders of the higher hierarchy is given to the target user.

  Next, the access right setting unit 42 verifies the access right of the folder in the lower hierarchy of the target folder (step S17). Specifically, the access right setting unit 42 refers to the security information part of the data corresponding to the folder in the lower hierarchy of the target folder in the access right setting information DB 11 provided in the file server 1, and refers to the lower hierarchy. Verify that the access right is set for the folder. For example, when the target folder is a folder having the folder name a0-1-1 shown in FIG. 3, the access right setting unit 42 sets all folders (a0-1-1 under the folder). -1, a0-1-1-2, folders with folder names a0-1-1-2-1), it is checked whether the access right is set.

  In step S <b> 17, the access right setting unit 42 notifies the user device 2 of the access right verification result of the folder in the lower hierarchy.

  The access right setting unit 42 determines whether the target user remains (step S18). If the access right setting unit 42 determines that the target user remains, the process returns to step S14. If the access right setting unit 42 determines that no target user remains, the process returns to step S12.

It is a figure which shows the example of whole structure of this invention. It is a figure which shows the detailed structural example of this invention. It is a figure which shows an example of the hierarchical structure of the folder which a file server manages. It is a figure which shows an example of a data structure of an access right setting information table. It is a figure which shows an example of a data structure of an access right setting information detailed table. It is an example of a data structure in access right setting information DB with which a file server is provided. It is a figure which shows an example of the access right setting request reception process flow by an access right setting apparatus. It is a figure which shows an example of the selection screen of an object folder. It is a figure which shows an example of the selection screen of an object user and an access right. It is a figure which shows an example of the access right setting process flow by an access right setting apparatus. It is a figure which shows the conventional system which sets the access right with respect to a folder.

Explanation of symbols

1 File Server 2 User Device 3 Administrator Device 4 Access Right Setting Device 5 Network 11 Access Right Setting Information DB
41 Access Right Setting Request Reception Unit 42 Access Right Setting Unit 43 Access Right Setting Information Table 44 Access Right Setting Information Detail Table

Claims (7)

An access right setting device for setting an access right for a folder having a hierarchical structure,
An access right setting request for the folder is received, a folder and a user for which an access right is to be set are selected, and for each selected folder and user, the type of access right for the folder and the upper level of the folder are selected. An access right setting request receiving means for registering in the storage means as access right setting information whether or not to give the user the authority to display the list of folders in the hierarchy;
With reference to the access right setting information registered in the storage means, for each of the selected folder and user, the type of access right to the folder and the right to display a list of folders in the upper hierarchy of the folder An access right setting device comprising: access right setting means for setting whether or not to grant to a user. In the access right setting device according to claim 1,
The access right setting device, wherein the access right type is at least a read right and a write right for the selected folder. In the access right setting device according to claim 1 or 2,
The access right setting means further verifies whether or not the access right is succeeded to a folder in a lower hierarchy of the folder for which the access right is set, and notifies the user of the verification result. Access right setting device. An access right setting method in an access right setting device for setting an access right for a folder having a hierarchical structure,
The access right setting request accepting means provided in the access right setting device accepts an access right setting request for the folder, selects a folder and a user for which an access right is to be set, and for each of the selected folder and user , Registering the type of access right for the folder and whether or not to give the user the right to display a list of folders in the upper hierarchy of the folder in the storage means as access right setting information
The access right setting means included in the access right setting device refers to the access right setting information registered in the storage means, and for each of the selected folder and user, the type of access right to the folder, and the folder An access right setting method, comprising: setting whether or not to give the user the right to display a list of folders in a higher hierarchy. In the access right setting method according to claim 4,
The access right setting method, wherein the type of the access right is at least a read right and a write right for the selected folder. In the access right setting method according to claim 4 or 5,
The access right setting means further verifies whether or not the access right is succeeded to a folder in a lower hierarchy of the folder for which the access right is set, and notifies the user of the verification result. Access right setting method. A program for setting access rights for a folder having a hierarchical structure,
On the computer,
An access right setting request for the folder is received, a folder and a user for which an access right is to be set are selected, and for each selected folder and user, the type of access right for the folder and the upper level of the folder are selected. An access right setting request accepting process for registering in the storage means as access right setting information whether or not to give the user the authority to display the list of folders in the hierarchy;
With reference to the access right setting information registered in the storage means, for each of the selected folder and user, the type of access right to the folder and the right to display a list of folders in the upper hierarchy of the folder An access right setting program for executing an access right setting process for setting whether or not to grant to a user.

Images