JP4975549B2 - Workflow server, workflow server control method, program, and recording medium - Google Patents

Description

  The present invention relates to an information processing apparatus, a workflow control method, a program, and a recording medium that control a workflow in response to a request to access a workflow process.

  By introducing a workflow system that controls various business flows according to the routes and rules that define the flow of work involving multiple persons in charge, the business process is digitized, speeding decision-making, visualizing the business, and the personality of the business Business efficiency, such as eliminating

  In recent years, various business processes have been systematized in companies, and there has been a growing need for IT control, and data linkage between a workflow system and peripheral systems is required.

  For example, when approving a certain process, there is a requirement that the database of the peripheral system is updated or information is acquired from the database of the peripheral system as reference data for approving the certain process.

  In addition to access to peripheral systems, there are also requirements such as obtaining reference materials from the server's file system and recording PDF data as log information.

  When accessing the database and file data of the peripheral system, not only authentication for the workflow system but also authority check as to whether the person in charge can update or refer should be performed.

  Patent Document 1 proposes a data management device, a data management method, a program thereof, and the like that improve the convenience of a user who does not have data reference authority without sacrificing data safety.

  This Patent Document 1 determines whether or not access to data attached to a user's workflow is possible independently of whether or not the workflow system can be used, and it is determined that the workflow system can be used. When it is determined that access is impossible, information on other users who have authority to change access rights to data and information on other users who have authority to act on the workflow can be selected for each other user's information. It is to provide.

As a result, it is possible to make subsequent processing determinations when there is no access right, and as a result, the convenience of the data management apparatus can be improved.
JP 2005-259104 A

  However, the system described in Patent Document 1 has a problem in that when accessing a database or file data of a peripheral system from a workflow system, it is impossible to perform authority control according to the process position and processing status of the workflow.

  In addition, there is a problem that even in the same process, it is impossible to perform authority control such as browsing / updating and determining whether access is possible depending on processing applications.

The present invention has been made to solve the above-described problems. The object of the present invention is to perform access authority control corresponding to the process position of the workflow when accessing the database and file data of the peripheral system from the workflow system. It is to provide a mechanism to do.

  Also, even in the same process, a database of peripheral systems is defined according to the processing application for the process, such as defining a separate form screen for browsing operation information depending on the processing application, and determining whether access is possible by the form screen. And provide a mechanism to control access authority to file data.

The present invention is a workflow server that is communicably connected to a workflow client and controls the workflow in response to a request for access to the workflow process from the workflow client, the workflow process and an external resource from the workflow process storage means for storing the access setting information that associates the access method, from the workflow client, a request receiving means for receiving an access request to the workflow step to the external resource to an access request received by said request receiving means The external resource access presence / absence determining means for determining whether or not an access instruction is included, and the access requirement when the external resource access presence / absence determining means determines that an access instruction to the external resource is included. The workflow step is external when the specifying unit for specifying the workflow step and the method for accessing the external resource corresponding to the access instruction from the workflow step specified by the specifying unit can be acquired from the access setting information. An external resource access determination unit that determines that access to the resource is permitted; and the access when the workflow step determines that access to the external resource is permitted by the external resource access determination unit According to the instruction, access to the external resource is permitted.

According to the present invention, when accessing the database or file data around the system from the workflow system, it can provide a mechanism that performs access control corresponding to the step position of the workflow.

  Further, it is possible to provide a mechanism for controlling access authority to the database and file data of the peripheral system according to the processing application for the process.

[First Embodiment]
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram showing an example of a workflow system showing an embodiment of the present invention.

  As shown in FIG. 1, in the workflow system of this embodiment, at least one workflow server 101 and a workflow client 102 are connected via a network 100.

  In addition, the workflow server 101 and the external system server 103 are connected via the network 100.

  Since the configuration of the network 100 is publicly known, detailed description thereof is omitted, but a local area network (LAN), a wide area network (WAN), an intranet, the Internet, or the like can be used as the network 100.

  In such a workflow system, a user makes a workflow progress request or the like to the workflow server 101 from the workflow client 102 using, for example, a web browser or client software.

  The workflow server 101 performs processing and management in response to a request from the workflow client 102, accesses the external system server 103 for processing if necessary, and further performs results for the workflow client 102 if necessary. Send.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration of the workflow server 101, the workflow client 102, and the external system server 103 illustrated in FIG.

  In FIG. 2, the CPU 201 comprehensively controls each device connected to the system bus 204. The ROM 203 or the external memory 211 stores an operating system (OS) that is a control program of the CPU 201 and programs for realizing various functions described later of each server or each client.

  The RAM 202 functions as a main memory, work area, temporary save area, and the like for the CPU 201.

  The input controller 205 controls input from the input unit 209. Examples of the input unit 209 include a pointing device such as a keyboard and a mouse in a terminal such as a server or a client.

  The output controller 206 controls the display of the output unit 210. Examples of the output unit 210 include a CRT and a liquid crystal.

  The external memory controller 207 controls access to the external memory 211 that stores a boot program, various applications, font data, user files, edit files, printer drivers, and the like. In addition, the external memory controller 207 stores various tables and parameters for realizing various functions of each server or each client.

  Examples of the external memory 211 include a hard disk (HD), a floppy (registered trademark) disk (FD), a compact flash (registered trademark) connected to a PCMCIA card slot via an adapter, and smart media.

  The communication I / F controller 208 executes communication control processing with an external device via the network 214.

  Although 212 is illustrated as hardware, it is not hardware but a program for realizing the present invention. The program 212 is recorded in the external memory 211 and is executed by the CPU 201 by being loaded into the RAM 202 as necessary.

  FIG. 3 is a diagram illustrating an example of a functional configuration realized in the workflow server 101 illustrated in FIG.

  As shown in FIG. 3, the workflow server 101 includes, as its functional configuration, an input / output processing unit 301, a workflow processing unit 302, a form screen specifying unit 303, an external resource access authority determining unit 304, and a form screen definition 311. A form screen / workflow process related definition 312, an external resource definition 313, and an external resource / form screen related definition 314.

  The input / output processing unit 301 performs processing for receiving input information from the input controller 205 or the communication I / F controller 208 of the workflow server 101. Further, the input / output processing unit 301 converts the received input information into a request to the workflow processing unit 302 according to the content. Further, when a result corresponding to the request is returned, the input / output processing unit 301 outputs the result to the output controller 206 or the communication I / F controller 208.

  The workflow processing unit 302 controls access to external resources in response to a request from the input / output processing unit 301. More specifically, when the request from the input / output processing unit 301 includes an external resource access request, the workflow processing unit 302 instructs the form screen specifying unit 303 to specify the form screen, and the external resource access authority determining unit 304 The external resource access authority is judged.

  The form screen specifying unit 303 specifies a form screen associated with the workflow process in response to an instruction from the workflow processing unit 302. Specifically, the form screen specifying unit 303 refers to the related information between the form screen and the workflow process stored in the form screen / workflow process relation definition 312 (FIG. 4), and is associated with the designated workflow process. Specify the form screen. Further, the form screen specifying unit 303 acquires the specified form screen information from the form screen definition 311 (FIG. 5).

  In response to an instruction from the workflow processing unit 302, the external resource access authority determining unit 304 checks whether the form screen specified by the form screen specifying unit 303 is permitted to access the external resource. Specifically, the external resource access authority determining unit 304 refers to the related information between the external resource and the form screen stored in the external resource / form screen related definition 314 (FIG. 6), and the form screen specifying unit 303 It is checked whether or not the identified form screen is associated with the designated external resource, and it is determined that the external resource access authority is obtained only when there is an association.

  If the external resource access authority determination unit 304 determines that there is an external resource access authority, the external resource access authority determination unit 304 acquires external resource information from the external resource definition 313 (FIG. 7). External resource types (not shown) are managed in the external resource definition. Examples of external resource types include a database, a PDF file format, and a CSV file format.

  The form screen / workflow process related definition 312 is a storage unit that stores information related to the form screen and the workflow process. Details of the relation information between the form screen and the workflow process stored in the form screen / workflow process related definition 312 are shown in FIG.

  The form screen definition 311 is a storage unit that stores form screen information. Details of the form screen information stored in the form screen definition 311 are shown in FIG.

  The external resource / form screen relation definition 314 is a storage unit that stores relevant information between the external resource and the form screen. Details of the related information between the external resource and the form screen stored in the external resource / form screen relation definition 314 are shown in FIG.

  The external resource definition 313 is a storage unit that stores external resource information. Details of the external resource information stored in the external resource definition 313 are shown in FIG.

  The input / output processing unit 301, the form screen specifying unit 303, and the external resource access authority determining unit 304 are loaded by the CPU 201 of the workflow server 101 by loading the program 212 stored in the external memory 211 into the RAM 202 and executing it. Corresponds to the function to be realized.

  The form screen definition 311, form screen / workflow process related definition 312, external resource definition 313, and external resource / form screen related definition 314 are implemented as storage areas in the external memory 211.

  The form screen / workflow process related definition 312, form screen definition 311, external resource definition 313, external resource / form screen related definition 314 will be described below with reference to FIGS. 4 to 7.

  FIG. 4 is a diagram showing an example of related information between the form screen and the workflow process stored in the form screen / workflow process related definition 312 shown in FIG.

  As shown in FIG. 4, the related information between the form screen and the workflow process includes a business ID 1201, a form screen ID 1202, a process ID 1203, and a usage 1204.

  For example, identification information for identifying a business process is set in the business ID 1201. In the form screen ID 1202, identification information for identifying the form screen is set. In the process ID 1203, identification information for identifying the workflow process of the business process is set.

  In the usage 1204, a processing usage when using the workflow process is set. For example, tracking, updating, and the like are set, and a form screen is associated according to the processing application for the workflow process.

  FIG. 5 is a diagram showing an example of the form screen information stored in the form screen definition 311 shown in FIG.

  As illustrated in FIG. 5, the form screen information includes a business ID 901, a form screen ID 902, and form screen design information 903. For example, identification information for identifying a business process is set in the business ID 901. In the form screen ID 902, identification information for identifying the form screen is set.

  In the form screen design information 903, design information constituting the form screen is set. For example, items, item display positions, colors, sizes, function information, and access request issue commands are set.

  FIG. 6 is a diagram showing an example of related information between the external resource and the form screen stored in the external resource / form screen relation definition 312 shown in FIG.

  As illustrated in FIG. 6, the related information between the external resource and the form screen includes a business ID 1101, a form screen ID 1102, and an external DB definition ID 1103.

  For example, identification information for identifying a business process is set in the business ID 1101. Further, identification information for identifying the form screen is set in the form screen ID 1102. In the external DB definition ID 1103, identification information for identifying an external resource is set.

  FIG. 7 is a diagram illustrating an example of the external resource information stored in the external resource definition 313 illustrated in FIG. 3 or 10.

  As shown in FIG. 7, the external resource information includes an external DB definition ID 1001, a connection method 1002, a table name 1003, and a use permission type value 1004.

  For example, identification information for identifying an external resource is set in the external DB definition ID 1001. In the connection method 1002, a connection method for connecting to an external resource, such as a JNDI name, is set. In the table name 1003, the name of the database table to be connected is set.

  In the use permission type value 1004, an operation type value that is permitted to be used for an external resource is set. For example, a code value corresponding to an operation permitted for an external resource, such as SELECT, INSERT, UPDATE, or DELETE, or a total value is set when there are a plurality of permitted operations.

  Hereinafter, with reference to FIG. 8, the workflow process, form screen definition 311, form screen / workflow process related definition 312, external resource definition 313, external resource / form screen related definition realized by the functional configuration shown in FIG. The relationship of 314 will be described.

  FIG. 8 shows the relationship between the workflow process, form screen definition 311, form screen / workflow process related definition 312, external resource definition 313, external resource / form screen related definition 314 realized by the functional configuration shown in FIG. 3. It is a figure which shows an example.

  In FIG. 8, reference numerals 501 to 503 denote examples of workflow processes of business processes.

  The application 501 is an application process. When the application 501 is applied by the person in charge, the business starts and the process proceeds to the conference 502.

  The council 502 is a council process for deciding approval or rejection by voting by a plurality of persons in charge. When the council 502 is voted by the persons in charge and satisfies the condition for establishing the council, the process transitions to final approval 503.

  The final approval 503 is a final approval process. When the final approval 503 is approved by the person in charge, the work is completed.

  The application operation screen 511 is form screen information stored in the form screen definition 311 and indicates form screen information for updating the application 501. Further, the related information between the application 501 and the application operation screen 511 is stored in the form screen / workflow process related definition 312.

  The application browsing screen 512 is form screen information stored in the form screen definition 311 and indicates the form screen information for tracking browsing of the application 501. Further, the related information between the application 501 and the application browsing screen 512 is stored in the form screen / workflow process related definition 312.

  The meeting vote screen 513 is form screen information stored in the form screen definition 311 and indicates form screen information for updating the meeting 502. Further, the related information of the conference 502 and the conference vote screen 513 is stored in the form screen / workflow process related definition 312.

  The council browsing screen 514 is form screen information stored in the form screen definition 311 and indicates the form screen information for tracking browsing of the council 502. Further, the related information of the conference 502 and the conference browsing screen 514 is stored in the form screen / workflow process related definition 312.

  The final approval operation screen 515 is form screen information stored in the form screen definition 311 and indicates form screen information for updating the final approval 503. Further, the related information between the final approval 503 and the final approval operation screen 515 is stored in the form screen / workflow process related definition 312.

  The final approval viewing screen 516 is form screen information stored in the form screen definition 311, and indicates form screen information for tracking browsing of the final approval 503. Further, the related information of the final approval 503 and the final approval browsing screen 516 is stored in the form screen / workflow process related definition 312.

  The calculation function 521 is calculation function information embedded in the application operation screen 511. The calculation function 522 is calculation function information embedded in the application browsing screen 512.

  The accounting DB search function 523 is external resource reference function information embedded in the conference vote screen 513 and can access the expense classification table 542 of the accounting DB 531. It should be noted that the definition that allows the consultation vote screen 513 (including the accounting DB search function 523) to access the expense classification table 542 is stored in the external resource / form screen related definition 314.

  The accounting DB search function 524 is external resource reference function information embedded in the conference browsing screen 514, and can access the expense classification table 542 of the accounting DB 531. A definition that allows the consultation viewing screen 514 (including the accounting DB search function 524) to access the expense classification table 542 is stored in the external resource / form screen related definition 314.

  The accounting DB search function 525 is external resource reference function information embedded in the final approval operation screen 515 and can access the expense classification table 542 of the accounting DB 531. The definition that allows the final approval operation screen 515 (including the accounting DB search function 525) to access the expense classification table 542 is stored in the external resource / form screen related definition 314.

  The accounting DB operation function 526 is external resource update function information embedded in the final approval operation screen 515 and can access the expense table 543 of the accounting DB 531. Definitions that allow the final approval operation screen 515 (including the accounting DB operation function 526) to access the expense table 543 are stored in the external resource / form screen related definition 314.

  The accounting DB search function 527 is external resource reference function information embedded in the final approval operation screen 515 and can access the expense classification table 542 of the accounting DB 531. The final approval browsing screen 516 (including the accounting DB search function 525) is stored in the external resource / form screen related definition 314 that can access the expense classification table 542.

  The accounting DB 531 is an example of an external resource other than the workflow system, shows a relational database, and an expense table 541 and an expense classification table 542 are defined.

  Reference numerals 551 to 553 denote examples of business states that are in progress in the business processes indicated by 501 to 503.

  551 means that the application 501 is applied by the user A and the application process is completed. Since the user A is recorded as the operator of the application 501, the process access authority determination unit 401 determines that the user A can track and view the business. The application browsing screen 512 is applied to the tracking browsing form screen. Since the function for accessing the external resource is not embedded in the application browsing screen 512, the external resource access authority determining unit 304 determines that the external resource cannot be accessed. That is, when the user A tracks the application 501 for tracking, the user A cannot access an external resource.

  552 means that the conference 502 is voted by the user B, the user C, and the user D, and the conference process is completed. Since user B, user C, and user D are recorded as operators of the conference 502, the user B, user C, and user D have the authority to track and view the conference 502. The conference browsing screen 514 is applied to the tracking browsing form screen. Since the accounting DB search function 523 is associated with the conference browsing screen 514, the external resource access authority determination unit 304 determines that the expense classification table 542 of the accounting DB 531 can be searched. That is, the user B, the user C, and the user D can search the expense classification table 542 of the accounting DB 531 when tracking the conference 502.

  553 means that the final approval 503 is assigned to the user E, and the final approval process is being processed. Since the user E is recorded as the person in charge of the final approval 503, the user E holds the update authority for the final approval 503. Note that the final approval operation screen 515 is applied to the update form screen definition. Further, since the accounting DB search function 525 and the accounting DB operation function 526 are associated with the final approval operation screen 515, the external resource access authority determination unit 304 searches the expense classification table 542 of the accounting DB 531, and It is determined that the expense table 541 of the accounting DB 531 can be updated. That is, when operating the final approval 503, the user E can search the expense classification table 542 of the accounting DB 531 and update the expense table 541 of the accounting DB 531.

  Hereinafter, an access process to an external resource in the present invention will be described with reference to FIG.

  FIG. 9 is a flowchart showing an example of a first control processing procedure in the present invention, and corresponds to an access process to an external resource executed by the workflow processing unit 302 or the like with the functional configuration shown in FIG. That is, the processing of this flowchart is realized by the CPU 201 of the workflow server 101 loading the program 212 stored in the external memory 211 into the RAM 202 and executing it.

  In step S <b> 601, the workflow processing unit 302 receives an access request to the workflow process via the input / output processing unit 301. The access request includes information such as a business ID, a process ID, and a processing application.

  In step S602, the workflow processing unit 302 determines whether an external resource access instruction is included in the access request to the workflow process.

  If it is determined in step S602 that an instruction to access an external resource is not included, the external resource access process is completed.

  On the other hand, if it is determined in step S602 that an instruction to access an external resource is included, the workflow processing unit 302 advances the process to step S603.

  In step S <b> 603, the workflow processing unit 302 instructs the form screen specifying unit 303 to specify the form screen. The specific instruction includes information such as a work ID, a process ID, and a processing application using the workflow process as an acquisition condition.

  The form screen specifying unit 303 acquires the information stored in the form screen / workflow process related definition 312 using the requested workflow process as an acquisition condition, and specifies the form screen associated with the instructed workflow process. Then, the process proceeds to step S604.

  In the present embodiment, the form screen / workflow process related definition 312 includes a processing application such as an update application or a tracking browsing application. Therefore, the process application included in the access request to the workflow process is added to the acquisition condition, and the workflow process The form screen corresponding to the processing usage is specified. As processing uses, for example, “tracking”, “update”, etc. may be stored as in the use 1204 of FIG.

  Next, in step S604, the form screen specifying unit 303 determines whether the related information (1201 to 1204 in FIG. 4) between the form screen and the workflow process has been acquired in step S603.

  If it is determined in step S604 that the related information between the form screen and the workflow process cannot be acquired (No in S604), the process proceeds to step S605.

  In step S605, the form screen specifying unit 303 returns error information to the request issuer as an authority error, and completes the external resource access process.

  On the other hand, if it is determined in step S604 that the related information between the form screen and the workflow process can be acquired in step S603 (Yes in S604), the related information between the identified form screen and the workflow process (1201 in FIG. 4). 1204) to the workflow processing unit 302, and the process proceeds to step S606. At this time, the specified form screen information may be acquired from the form screen definition 311 and returned to the request issuer.

  In step S606, the workflow processing unit 302 instructs the external resource access authority determining unit 304 to determine external resource access authority.

  The external resource access authority determination unit 304 uses the form screen identified in step S603 and the information (business ID) for which access is instructed as the acquisition condition to store information (1101-1103) stored in the external resource / form screen relation definition 314. And the process proceeds to step S607.

  Next, in step S607, the external resource access authority determination unit 304 determines whether or not related information (1101 to 1103) between the external resource and the form screen has been acquired in step S606. Thereby, it is possible to check whether or not the form screen corresponding to the workflow process requested to be accessed (that is, the workflow process requested to be accessed) is permitted to access the external resource.

  If it is determined in step S607 that the related information between the external resource and the form screen cannot be acquired, the external resource access authority determining unit 304 determines that the workflow process form is not authorized for the external resource for which access is instructed. The request is regarded as a request from the screen (determination), and the process proceeds to step S608.

  In step S608, the external resource access authority determination unit 304 returns error information to the request issuer as an authority error, and completes the external resource access process.

  On the other hand, if it is determined in step S607 that the related information between the external resource and the form screen has been acquired, the external resource access authority determining unit 304 determines that the workflow process form screen has an authority for the external resource instructed to access. The process proceeds to step S609. At this time, the external resource access authority determination unit 304 acquires from the external resource definition 313 definition information (1001 to 1004) of the external resource for which access is instructed.

  In step S609, the workflow processing unit 302 accesses an external resource in accordance with the access instruction received in step S601. In other words, the workflow processing unit 302 accesses the external resource specified by the acquired external resource definition information using the function included in the acquired form screen in accordance with the access instruction received in S601.

  At this time, it is determined whether or not the operation content of the access instruction received in S601 is within the range of the use permission type value defined in the external resource definition 313. For example, as the use permission type value, there are a plurality of code values corresponding to operations permitted for the external resource, such as SELECT, INSERT, UPDATE, and DELETE, such as the use permission type value 1004 in FIG. In such a case, the total value is stored and compared with the operation content of the access instruction. If it is out of the range, it may be configured to return an error information to the request issuer without accessing the external resource as an authority error.

  As described above, by accessing the database and file data of the peripheral system from the workflow system by executing the processing shown in FIG. 9, the process position (specified by the work ID and process ID) and the processing status ( It is possible to realize access authority control corresponding to processing purposes.

  Further, it is possible to provide a mechanism for controlling access authority to the database and file data of the peripheral system according to the processing application for the process.

[Second Embodiment]
In the first embodiment, an external resource / form screen relation definition 314 that associates an external resource definition and a form screen definition, and a form screen / workflow process relation definition 312 that associates the form screen definition and a workflow process are used. The configuration for associating resource definitions and determining whether the workflow process requested to access is permitted to access an external resource has been described. In this embodiment, an external resource / function relation definition 412 that associates an external resource definition with a function definition, a function / form screen relation definition 413 that associates a function with a form screen definition, and a form screen / workflow that associates a form screen definition with a workflow process. The process-related definition 312 is used to associate the workflow process with the external resource definition, and it is configured to determine whether the access-requested workflow process is permitted to access the external resource. Hereinafter, this embodiment will be described.

  FIG. 10 is a diagram illustrating an example of a functional configuration realized in the workflow server 101 illustrated in FIG. 1 according to the second embodiment of the present invention. In addition, the same code | symbol is attached | subjected to the same thing as FIG.

  As shown in FIG. 10, the workflow server 101 includes, as its functional configuration, an input / output processing unit 301, a workflow processing unit 302, a form screen specifying unit 303, an external resource access authority determining unit 304, and a process access authority determining Unit 401, form screen definition 311, form screen / workflow process relation definition 312, external resource definition 313, function definition 411, external resource / function relation definition 412, external resource / function relation definition 412, function A form screen related definition 413 is included.

  In this embodiment, the external resource / function relation definition 412 and the function / form screen relation definition 413 are referred to in the judgment process performed by the external resource access authority judgment unit 304.

  Specifically, the external resource access authority determination unit 304 includes information related to the external resource and function stored in the external resource / function relation definition 412, and the function stored in the function / form screen relation definition 413. With reference to the information related to the form screen, it is checked whether the form screen specified by the form screen specifying unit 303 is associated with the designated external resource, and it is determined that there is an external resource access authority only when there is an association.

  If the external resource access authority determination unit 304 determines that there is an external resource access authority, the external resource access authority determination unit 304 acquires function information from the function definition 411 and acquires external resource information from the external resource definition 313.

  In response to an instruction from the workflow processing unit 302, the process access authority determining unit 401 checks whether the access request is made by a user who has access authority to the workflow process.

  The function / form screen relation definition 413 is a storage unit that stores relation information between a function and a form screen. Details of the relation information between the function and the form screen stored in the function and form screen relation definition 413 are shown in FIG.

  The external resource / function relation definition 412 is a storage unit that stores relation information between an external resource and a function. Details of information related to external resources and functions stored in the external resource / function relation definition 412 are shown in FIG.

  The function definition 411 is a storage unit that stores function definition information. Details of the function information stored in the function definition 411 are shown in FIG.

  The input / output processing unit 301, the form screen specifying unit 303, the external resource access authority determining unit 304, and the process access authority determining unit 401 store a program 212 stored in the external memory 211 by the CPU 201 of the workflow server 101 in the RAM 202. Corresponds to the function realized by loading and executing the program.

  Further, the form screen definition 311, the form screen / workflow process related definition 312, the external resource definition 313, the function definition 411, the external resource / function related definition 412, and the function / form screen related definition 413 are stored in the external memory 211. This is realized as an internal storage area.

  The function / form screen relation definition 413, the external resource / function relation definition 412, and the function definition 411 will be described below with reference to FIGS.

  FIG. 11 is a diagram illustrating an example of related information between a function and a form screen stored in the function / form screen relation definition 413 illustrated in FIG. 10.

  As shown in FIG. 11, the related information between the function and the form screen includes a business ID 1401, a form screen ID 1402, and a function ID 1403.

  For example, identification information for identifying a business process is set in the business ID 1401. Further, identification information for identifying the form screen is set in the form screen ID 1402. The function ID 1403 is set with identification information for identifying the function.

  FIG. 12 is a diagram illustrating an example of information related to an external resource and a function stored in the external resource / function relation definition 412 illustrated in FIG.

  As shown in FIG. 12, the related information between the external resource and the function includes a business ID 1501, a function ID 1502, and an external DB definition ID 1503.

  For example, identification information for identifying a business process is set in the business ID 1501. The function ID 1502 is set with identification information for identifying the function. In the external DB definition ID 1503, identification information for identifying an external resource is set.

  FIG. 13 is a diagram showing an example of function information stored in the function definition 411 shown in FIG.

  As illustrated in FIG. 13, the function information includes a business ID 1301, a function ID 1302, a function type 1303, and function data 1304.

  For example, identification information for identifying a business process is set in the business ID 1301. The function ID 1302 is set with identification information for identifying the function. In the function type 1303, a value indicating the function type is set. For example, it is a value indicating calculation, external DB search, external DB operation, and the like. In the function data 1304, function logic information is set. For example, when the type is calculation, an item to be calculated and a calculation method are set, and when the type is external DB search, an external DB definition to be accessed is set.

  Referring to FIG. 8, the workflow process, form screen definition 311, form screen / workflow process related definition 312, external resource definition 313, function definition 411, external resource The relation between the function relation definition 412 and the function / form screen relation definition 413 will be described.

  In the present embodiment, the calculation function 521 is calculation function information stored in the function definition 411 and indicates that it is associated with the application operation screen 511. Information related to the application operation screen 511 and the calculation function 521 is stored in the function / form screen related definition 413.

  The calculation function 522 is calculation function information stored in the function definition 411 and indicates that the calculation function 522 is associated with the application browsing screen 512. Information related to the application browsing screen 512 and the calculation function 522 is stored in the function / form screen related definition 413.

  The accounting DB search function 523 is external resource reference function information stored in the function definition 411, is associated with the conference vote screen 513, and indicates that the expense classification table 542 of the accounting DB 531 can be accessed.

  It should be noted that the related information of the consultation vote screen 513 and the accounting DB search function 523 is stored in the function / form screen related definition 413, and the definition that the accounting DB search function 523 can access to the expense classification table 542 is related to the external resource / function. Stored in the definition 412.

  The accounting DB search function 524 is external resource reference function information stored in the function definition 411, is associated with the conference browsing screen 514, and indicates that the expense classification table 542 of the accounting DB 531 can be accessed.

  Note that the related information of the consultation browsing screen 514 and the accounting DB search function 524 is stored in the function / form screen related definition 413, and the definition that the accounting DB search function 524 can access the expense classification table 542 is related to the external resource / function. Stored in the definition 412.

  The accounting DB search function 525 is external resource reference function information stored in the function definition 411, is associated with the final approval operation screen 515, and indicates that the expense classification table 542 of the accounting DB 531 can be accessed.

  Information related to the final approval operation screen 515 and the accounting DB search function 525 is stored in the function / form screen related definition 413, and the definition that allows the accounting DB search function 525 to access the expense classification table 542 is an external resource / function. Stored in the association definition 412.

  The accounting DB operation function 526 is function information for external resource update stored in the function definition 411, is associated with the final approval operation screen 515, and indicates that the expense table 543 of the accounting DB 531 can be accessed.

  Information related to the final approval operation screen 515 and the accounting DB operation function 526 is stored in the function / form screen related definition 413, and the definition that the accounting DB operation function 526 can access the expense table 543 is related to the external resource / function. Stored in the definition 412.

  The accounting DB search function 527 is external resource reference function information stored in the function definition 411, is associated with the final approval browsing screen 516, and indicates that the expense classification table 542 of the accounting DB 531 can be accessed.

  The related information of the final approval browsing screen 516 and the accounting DB search function 527 is stored in the function / form screen related definition 413, and the definition by which the accounting DB search function 525 can access the expense classification table 542 is an external resource / function. Stored in the association definition 412.

  Further, in the process access authority determination unit 401, since the user A is recorded as the operator of the application 501, it is determined that the user A can track and browse the business.

  Hereinafter, with reference to FIG. 14, the access processing to the external resource in the second embodiment of the present invention will be described.

  FIG. 14 is a flowchart showing an example of a second control processing procedure in the present invention, and corresponds to an access process to an external resource executed by the workflow processing unit 302 or the like with the functional configuration shown in FIG. That is, the processing of this flowchart is realized by the CPU 201 of the workflow server 101 loading the program 212 stored in the external memory 211 into the RAM 202 and executing it.

  Steps S701 to S705 are the same as steps S601 to S605 in FIG.

  In step S706, the workflow processing unit 302 instructs the external resource access authority determining unit 304 to determine the external resource access authority.

  The external resource access authority determination unit 304 uses the form screen specified in step S703 and the information (operation ID) for which access is instructed as an acquisition condition, from the function / form screen relation definition 413 (1401 to related information between the function and the form screen). 1403), and the related information (1501-1503) between the external resource and the function is acquired from the external resource / function relation definition 412 using the function of the acquired related information (1401, 1403) as an acquisition condition.

  Next, in step S707, the external resource access authority determination unit 304 can acquire related information (1401-1403) between the function and the form screen and related information (1501-1503) between the external resource and the function in step S706. Judge whether or not. Thereby, it is possible to check whether or not the form screen corresponding to the workflow process requested to be accessed (that is, the workflow process requested to be accessed) is permitted to access the external resource.

  If it is determined in step S707 that the relation information between the function and the form screen and the relation information between the external resource and the function cannot be acquired, the external resource access authority determination unit 304 determines whether the access is instructed to the external resource. Therefore, the request is regarded (determined) from the form screen of the unauthorized workflow process, and the process proceeds to step S708.

  In step S708, the external resource access authority determination unit 304 returns error information to the request issuer as an authority error, and completes the external resource access process.

  On the other hand, if it is determined in step S707 that the relation information between the function and the form screen and the relation information between the external resource and the function have been acquired, the external resource access authority determination unit 304 determines the access to the external resource for which access is instructed. The request is regarded (determined) from the form screen of the authorized workflow process, and the process proceeds to step S709. At this time, the external resource access authority determination unit 304 acquires from the external resource definition 313 definition information (1001 to 1004) of the external resource for which access is instructed. Furthermore, function information is acquired from the function definition 411.

  In step S709, the workflow processing unit 302 accesses an external resource in accordance with the access instruction received in step S701. In other words, the workflow processing unit 302 accesses the external resource specified by the acquired external resource definition information using the acquired function information in accordance with the access instruction received in S701.

  At this time, it is determined whether or not the operation content of the access instruction received in S701 is within the range of the use permission type value defined in the external resource definition 313. For example, as the use permission type value, there are a plurality of code values corresponding to operations permitted for the external resource, such as SELECT, INSERT, UPDATE, and DELETE, such as the use permission type value 1004 in FIG. In such a case, the total value is stored and compared with the operation content of the access instruction. If it is out of the range, it may be configured to return an error information to the request issuer without accessing the external resource as an authority error.

  As described above, by executing the process as shown in FIG. 14, when accessing the database and file data of the peripheral system from the workflow system, the process position (specified by the work ID and process ID) and the process status ( It is possible to realize access authority control corresponding to processing purposes.

  Further, it is possible to provide a mechanism for controlling access authority to the database and file data of the peripheral system according to the processing application for the process.

  Hereinafter, the access process to the workflow process executed by the process access authority determining unit 401 or the like with the functional configuration shown in FIG. 10 will be described with reference to FIG.

  FIG. 15 is a flowchart showing an example of the third control processing procedure in the present invention, corresponding to the access processing to the workflow process executed by the process access authority determining unit 401 or the like with the functional configuration shown in FIG. . That is, the processing of this flowchart is realized by the CPU 201 of the workflow server 101 loading the program 212 stored in the external memory 211 into the RAM 202 and executing it.

  First, in step S <b> 801, the workflow processing unit 302 receives a request to access a workflow process via the input / output processing unit 301.

  In step S802, the workflow processing unit 302 instructs the process access authority determining unit 401 to determine access authority to the workflow process.

  The process access authority determining unit 401 determines whether or not the access request is made by a user who has access authority to the workflow process. For example, it is determined that a user who approves the corresponding workflow process has the tracking authority, or a user who belongs to the department or role in charge of the workflow process defined in the business process has the update authority. Etc.

  If the process access authority determination unit 401 determines in step S802 that the access request is not made by a user who has access authority to the workflow process, the workflow processing unit 302 advances the process to step S804.

  In step S804, the workflow processing unit 302 returns error information to the request issuer as an authority error, and completes the access process to the workflow process.

  On the other hand, if the process access authority determining unit 401 determines in step S802 that the access request is made by a user who has access authority to the workflow process, the workflow processing unit 302 advances the process to step S803.

  In step S803, the workflow processing unit 302 performs workflow processing according to the access request. Note that by executing the process as shown in FIG. 14 (or FIG. 9) as the workflow process in step S803, the access authority control of the external resource linked to the access authority of the workflow process can be realized.

  As described above, by executing the process as shown in FIG. 15, it is possible to determine the access authority to the workflow process and execute the access control to the workflow process.

  As described above, according to the present embodiment, when accessing the database and file data of the peripheral system from the workflow system, access is permitted only during the operation of a certain process or after completion of a certain process. It is possible to provide a mechanism for performing access authority control corresponding to the workflow process position and processing status.

  For example, it is possible to perform control such that the database of the accounting system can be referred only when operating the accounting approval process.

  Further, it is possible to provide a mechanism for controlling access authority to the database and file data of the peripheral system according to the processing application for the process.

  For example, only the person in charge who can approve the accounting approval process can use the update form screen, and only when requested from the update form screen, permits the update of the database of the peripheral system. It is possible to strengthen.

  As a result, the data linkage between the workflow system and the information of the peripheral system and the file system can be performed in conjunction with the business process defined in the workflow without impairing the safety of the data.

  It should be noted that the configuration and contents of the various data described above are not limited to this, and it goes without saying that the various data and configurations are configured according to the application and purpose.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, apparatus, method, program, or recording medium, and specifically includes a plurality of devices. The present invention may be applied to a system including a single device.

  The configuration of a data processing program that can be read by the information processing apparatus (workflow server 101) according to the present invention will be described below with reference to the memory map shown in FIG.

  FIG. 16 is a diagram illustrating a memory map of a recording medium (storage medium) that stores various data processing programs readable by the information processing apparatus (workflow server 101) according to the present invention.

  Although not specifically shown, information for managing a program group stored in the recording medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.

  Further, data depending on various programs is also managed in the directory. In addition, when a program or data to be installed is compressed, a program to be decompressed may be stored.

  The functions shown in FIG. 9, FIG. 14, and FIG. 15 in this embodiment may be performed by a host computer by a program installed from the outside. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a recording medium such as a CD-ROM, a flash memory, or an FD, or from an external recording medium via a network. Is.

  As described above, a recording medium in which a program code of software for realizing the functions of the above-described embodiments is recorded is supplied to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus is stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by reading and executing the program code.

  In this case, the program code itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program code constitutes the present invention.

  As a recording medium for supplying the program code, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, A silicon disk or the like can be used.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.

  Furthermore, after the program code read from the recording medium is written in a memory provided in a function expansion board inserted in the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program represented by software for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading out a program represented by software for achieving the present invention from a server, database, etc. on a network using a communication program, the system or apparatus can enjoy the effects of the present invention. It becomes.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

It is a system configuration figure showing an example of a workflow system showing one embodiment of the present invention. FIG. 2 is a block diagram illustrating an example of a hardware configuration of a workflow server 101, a workflow client 102, and an external system server 103 illustrated in FIG. It is a figure which shows an example of the function structure implement | achieved in the workflow server 101 shown in FIG. FIG. 4 is a diagram showing an example of related information between a form screen and a workflow process stored in a form screen / workflow process related definition 312 shown in FIG. 3. FIG. 4 is a diagram showing an example of form screen information stored in a form screen definition 311 shown in FIG. 3. FIG. 4 is a diagram illustrating an example of related information between an external resource and a form screen stored in an external resource / form screen relation definition 312 illustrated in FIG. 3. It is a figure which shows an example of the external resource information stored in the external resource definition 313 shown in FIG. 3 or FIG. The figure which shows an example of the relationship of the workflow process, the form screen definition 311, the form screen / workflow process related definition 312, the external resource definition 313, and the external resource / form screen related definition 314 realized by the functional configuration shown in FIG. It is. It is a flowchart which shows an example of the 1st control processing procedure in this invention. It is a figure which shows an example of the function structure implement | achieved in the workflow server 101 shown in FIG. 1 in 2nd Embodiment of this invention. FIG. 11 is a diagram illustrating an example of information related to a function and a form screen stored in a function / form screen relation definition 413 illustrated in FIG. 10. FIG. 11 is a diagram illustrating an example of relation information between external resources and functions stored in an external resource / function relation definition 412 illustrated in FIG. 10. It is a figure which shows an example of the function information stored in the function definition 411 shown in FIG. It is a flowchart which shows an example of the 2nd control processing procedure in this invention. It is a flowchart which shows an example of the 3rd control processing procedure in this invention. It is a figure explaining the memory map of the recording medium (storage medium) which stores the various data processing program which can be read by the information processing apparatus (workflow server 101) which concerns on this invention.

Explanation of symbols

100 Network 101 Workflow Server 102 Workflow Client 103 External System Server 201 CPU
202 RAM
211 External Memory 212 Program 301 Input / Output Processing Unit 302 Workflow Processing Unit 303 Form Screen Identification Unit 304 External Resource Access Authority Judgment Unit 311 Form Screen Definition 312 Form Screen / Workflow Process Related Definition 313 External Resource Definition 314 External Resource / Form Screen Related Definition 401 Process access authority determination unit 411 Function definition 412 External resource / function related definition 413 Function / form screen related definition

Claims (9)

A workflow server that is communicably connected to a workflow client and controls the workflow in response to an access request to the workflow process from the workflow client,
Storage means for storing access setting information associating the workflow process with an access method to an external resource from the workflow process ;
Request accepting means for accepting an access request to the workflow process from the workflow client;
External resource access presence / absence determining means for determining whether an access instruction to the external resource is included in the access request received by the request receiving means ;
When the external resource access presence / absence determining unit determines that an instruction to access the external resource is included, a specifying unit that specifies a workflow process of the access request;
When the access method to the external resource corresponding to the access instruction can be acquired from the access setting information from the workflow step specified by the specifying unit, the workflow step is permitted to access the external resource. An external resource access determination means for determining;
A workflow server characterized by permitting access to the external resource in accordance with the access instruction when the external resource access determination means determines that the workflow step is permitted to access the external resource. The access setting information further stores information associating the workflow process with an access method to an external resource corresponding to a processing application in the workflow process ,
The request accepting unit accepts an access request including a processing application to the workflow process from the workflow client,
The specifying unit specifies a workflow step and a processing application included in the request receiving unit when the external resource access presence / absence determining unit determines that an instruction to access the external resource is included,
The external resource access determination unit determines that the workflow step is permitted to access the external resource when the access method to the external resource can be acquired from the workflow step and processing application specified by the specifying unit. ,
2. The workflow server according to claim 1 , wherein, when it is determined by the external resource access determination means that access to the external resource is permitted, access to the external resource is permitted according to the access instruction. . The storage means includes a form screen / workflow process related definition for associating the workflow process with a form screen definition having form screen design information capable of issuing an access instruction to an external resource, and an access method to the external resource. An external resource definition and a form screen related definition for associating the external resource definition with the form screen definition are stored.
When the external resource access determination unit determines that the external resource access presence / absence determination unit includes an instruction to access the external resource, the external resource access determination unit refers to the form screen / workflow process related definition and is requested to access. When the form screen associated with the identified workflow screen is identified and the external resource definition associated with the identified form screen definition can be acquired by referring to the external resource / form screen related definition, the workflow process is external Determine that access to the resource is allowed,
3. The access to the external resource is permitted according to the access instruction when the external resource access determination unit determines that access to the external resource is permitted . Workflow server.   Provided with a process access authority judging means for checking whether or not the access request to the workflow process is made by a user who has an access authority to the workflow process, and the access to the workflow process is permitted. The workflow server according to any one of claims 1 to 3, wherein access to the workflow process is permitted when the determination is made. Store the form screen definition for each processing application in the storage means,
With the form screen / workflow process related definition, the form screen definition for each processing application is associated with the workflow process,
The external resource access determination means uses the processing application included in the access request, refers to the form screen / workflow process related definition, and identifies the form screen for the specific processing application of the workflow process requested for access. The workflow server according to claim 3, wherein the workflow server is characterized in that   The workflow server according to any one of claims 1 to 5, wherein the external resource access determination unit notifies a determination result of an access right to an external resource to the request source that has requested the access. Access setting information that is communicably connected to the workflow client, controls the workflow in response to an access request to the workflow process from the workflow client, and associates the workflow process with an access method to the external resource from the workflow process A method for controlling a workflow server having storage means for storing
A request acceptance step for accepting an access request to the workflow process from the workflow client;
An external resource access presence / absence determination step for determining whether an access instruction to the external resource is included in the access request received by the request reception step ;
When it is determined that the external resource access presence / absence determination step includes an instruction to access the external resource, a specifying step of specifying a workflow process of the access request;
The workflow process is permitted to access the external resource when the access method to the external resource corresponding to the access instruction can be acquired from the access setting information from the workflow process specified by the specifying step. An external resource access determination step for determining;
An access to the external resource is permitted according to the access instruction when the external resource access determination step determines that the workflow step is permitted to access the external resource. Control method. A workflow server that is communicably connected to the workflow client and controls the workflow in response to an access request to the workflow process from the workflow client.
Storage means for storing access setting information associating the workflow process with an access method to an external resource from the workflow process ;
Request accepting means for accepting an access request to the workflow process from the workflow client;
External resource access presence / absence determining means for determining whether an access instruction to the external resource is included in the access request received by the request receiving means ;
When the external resource access presence / absence determining unit determines that an instruction to access the external resource is included, a specifying unit that specifies a workflow process of the access request;
When the access method to the external resource corresponding to the access instruction can be acquired from the access setting information from the workflow step specified by the specifying unit, the workflow step is permitted to access the external resource. An external resource access determination means for determining;
When the external resource access determining means determines that the workflow step is permitted to access the external resource, the workflow server is characterized in permitting access to the external resource according to the access instruction. A program to make it work.   A recording medium storing the program according to claim 8 in a computer-readable manner.

Images