JP7328476B1 - Numerical controllers and computer-readable storage media - Google Patents

Abstract

The numerical control device includes an operation request reception unit that receives an operation request from an operator, and a classification determination unit that manages authorization information that is setting information of operation authority for data to be operated by the operation request, and the authorization information is , the classification of the operator who created the operational authority for the operator, the classification of the restricted person who is the operator who is restricted by the operational authority, and the contents of the operation that the restricted person has the authority, and the classification determination unit , if the operator who output the operation request to edit the operation authority is an administrator, and if the classification of the operator who output the operation request and the classification of the operator who created the operation authority are the same, the operation authority Allow editing.

Description

The present disclosure relates to numerical controllers and computer-readable storage media.

2. Description of the Related Art Conventionally, in industrial machines in factories, there are control devices that have a function of restricting user access according to the operator's operation authority level. For example, Patent Document 1.

Japanese Unexamined Patent Application Publication No. 2012-13731

In the manufacturing process of machine tools, for example, embedded devices such as servo motors and inverters, peripheral devices such as coolant and loaders, sensors, numerical control devices, etc. are installed, parameters are set, programs are created, and the desired functions are performed. Customize to make it happen. Moreover, even after the machine tool is completed, a plurality of workers operate the machine tool for maintenance purposes.

Workers involved in machine tools individually set parameters and create programs. Manufacturers have a need to protect data such as parameters and programs set by workers belonging to the company.
Organizations other than manufacturers, such as system integrators and vendors, also need to protect data created by workers belonging to their own companies.

In the field of numerical controllers, it is desirable to manage access rights to data associated with the creation of machine tools.

A numerical controller, which is one aspect of the present disclosure, includes an operation request reception unit that receives an operation request from an operator; , and the authorization information includes the classification of the operator who created the operation authority for the operator, the classification of the restricted person who is the operator who is restricted by the operational authority, and the details of the operation for which the restricted person has the authority. , and if the operator who outputs the operation request to edit the operation authority is an administrator, the classification determination unit determines that the classification of the operator who outputs the operation request is the same as the classification of the operator who created the operation authority. If so, allow editing of the operation authority.

4 is a data configuration diagram of operator information; FIG. FIG. 4 is a schematic diagram showing an operator associated with the machine tool; 1 is a block diagram of a numerical controller of this embodiment; FIG. 4 is a data configuration diagram of authorization information; FIG. 4 is a flow chart showing the operation of a classification determination unit; 3 is a data configuration diagram of operator information and authorization information; FIG. FIG. 11 is an explanatory diagram showing determination results of an operation request; 4 is a flow chart showing the operation of a classification determination unit; 2 is a hardware configuration diagram of a numerical controller; FIG.

The numerical controller 100 will be described below. The numerical controller 100 stores parameters, programs, and the like for causing the machine tool to perform machining. Parameters and programs are used by machine makers that manufacture machine tools, machine makers that manufacture embedded devices and peripheral devices, device makers that manufacture numerical control devices 100, system integrators, vendors, and machines that use machine tools for processing. Workers in various positions such as users perform creation/referencing/editing.

Access rights of workers are managed by administrators. Administrators have administrator privileges. In the operator information, whether or not the operator has administrator authority and the category are set. Data operation authority is set in the authorization information. Here, data means information existing in the numerical controller 100 . Data refers to files recorded in some form, data stored in memory such as RAM.
The classification indicates the position of the operator (company to which the operator belongs, etc.). In the numerical controller 100, all operators, including the manager, are classified, thereby making it possible to manage authority for each position related to the machine tool.

Conventional operator information and operator information according to the present embodiment will be described with reference to the example of FIG.
Conventional operator information classifies operators into groups. The operator group includes administrators and workers (non-administrators). An administrator can edit operator information and authorization information with administrator authority. The authority of "operator" follows the setting by the administrator.
With conventional operator information, if multiple operators belonging to an administrator group are set, there arises a problem that the operating authority of data created by an operator in one position can be changed by an administrator group in another position.
In this embodiment, the operator information is provided with an item of category. The classification enables management of operational authority for each position of the operator who created the data.

The operator information in FIG. 1 will be specifically described. The operator information includes operator identification information, operator group, and operator classification. The operator information in FIG. 1 includes "operator A", "operator B", "operator C", and "operator D". Each operator is assigned a "group". "Operator A" and "operator C" are "administrators", and "operator B" and "operator D" are "operators". An "administrator" is given administrative privileges.
Operators are classified by category as well as by group. In the operator information of FIG. 1, the categories of "operator A" and "operator B" are "machine makers", and the categories of "operator C" and "operator D" are "machine users". A category means an operator's position (company, etc.). The destination of the data operation authority may be associated with the category. In the example of FIG. 1, a division is set for each organization (company) to which the operator belongs.

Operators can be mainly divided into three groups: superior managers, section managers, and workers (see FIG. 2). The upper manager comprehends the position of the operator involved in the machine tool (organization, where the authority to operate data belongs, etc.) and creates initial operator information. Information about the position of the operator can be obtained from machine tool design documents, specifications, contracts, production procedure manuals, and the like. Upper managers are, for example, numerical controller manufacturers, system integrators, and the like. The upper manager finds out single or multiple positions (organizations) related to the machine tool controlled by the numerical controller, and creates operator information. A category manager is set in the operator information. A division manager manages data related to his division (position).
In the example of FIG. 1, "operator A" is a section manager belonging to the section "machine manufacturer", and "operator C" is a section manager belonging to the section "machine user".
In the operator information shown in FIG. 1, there is one "machine maker", but there may be a plurality of "machine makers" when actually creating a machine tool. Further, in addition to the "machine maker", there may be various categories of operators such as "equipment makers" of numerical control devices, system integrators, and vendors.
Both upper managers and section managers have managerial authority, but the section manager's managerial authority is limited to his section.
Workers do not have administrative privileges. An operation performed by a worker is called a general operation. General operations refer to operations on data other than data restricted by administrator authority, such as operator information and authorization information.

FIG. 3 is a block diagram of the numerical controller 100 of this embodiment. The numerical control device 100 includes an operation request reception unit 11 , an authentication unit 12 , an operation request execution unit 13 , a classification determination unit 14 and an attribute management unit 15 .
The components of the numerical controller 100 are classified according to their functions, and may not be clearly classified in terms of physical configuration and program configuration.

The operation request receiving unit 11 receives an operation request from an information processing device such as a PC or a server connected to the numerical control device 100 or an input unit (described later) of the numerical control device 100 . This operation request is an operation request for accessing data in the numerical controller, such as reference, creation, and editing. The operation request includes the identification information of the operator who requested the operation, the identification information of the requested data (identification information pointing to the data, the type/path of the file containing the data, etc.), the details of the requested operation, etc. be

The authentication unit 12 authenticates the operator who requested the operation. An existing method is used for authentication. The operator inputs his own identification information and the like. The authentication unit 12 authenticates that the operator corresponds to the input identification information. By performing authentication, the operator can be uniquely identified.

The operation request execution unit 13 executes the requested operation when the classification determination unit 14 permits the operation request. Operations include data reference, creation, and editing.

The classification determination unit 14 determines whether to deny or permit an operation request based on the classification of the operator. The determination method of the classification determining unit 14 is determined according to the type of operation request [1. Editing of Authorization Information/Addition of Operation Authority], [2. Editing of Operator Information/Creation of Initial Operator Information], [3. New creation of data], [4. general operation].

[1. Edit Authorization Information/Add Operation Authority]
When the requested operation is [edit authorization information], the category determination unit 14 refers to the operator information and reads the group and category of the operator who issued the operation request. If the operator's group is "operator", the classification determination unit 14 rejects the operation request because the operator does not have the authority to edit the authorization information. If the operator's group is "administrator", the classification determination unit 14 proceeds to the next step.

The authorization information associates data with the operational authority of an operator (referred to as a restricted person). The operation authority includes the classification of the operator who set the operation authority. When receiving editing of the authorization information as an operation request, the classification determination unit 14 determines whether or not the operation authority for the data specified in the operation request has already been set. allow the creation of If the operation authority for the data specified in the operation request has already been set, the classification of the operator who set the operation authority and the classification of the operator who requested the operation are compared, and if the classifications are the same, , to allow editing of operation permissions.

Operation authority is set in the authorization information. The configuration of authorization information will be specifically described with reference to FIG. The authorization information in Fig. 4 includes the categories of the sectioned administrators who set the operation authority, the categories and groups of the operators subject to the restriction of the operation authority (restricted persons), and the information specifying the data subject to the restriction (data type, data identification information, data path, folder containing data, etc.), operation details, and operation authority of restricted users are set.
The classification of the classification manager in the operation authority on the first line of the table in FIG. 4 is "machine maker". In this operation authority, an operator whose group is "Administrator" and who is classified as "Machine User" is a restricted person. be done.
The category of the category manager in the operation authority on the second line is "machine maker". In this operation authority, the operator whose group is "operator" and whose category is "machine user" is the restricted person. Rejected.
The classification of the classification manager in the operation authority on the third line is "machine user". With this operation authority, the operator whose group is "operator" and whose category is "machine user" is the restricted person, and the operation "view" of the data "parameter" is permitted, and the operation "edit" is permitted. be done.

The operation authority of the 4th to 6th lines is different from that of the 1st to 3rd lines. The operational authority on the fourth to sixth lines is affected by the category of the operator who created the data, the "machine user."
The classification of the classification manager in the operation authority on the fourth line is "machine user". In this operation authority, the operator whose group is "administrator" and whose operator category is "machine maker" is the restricted person, and the operation "view" and the operation "edit" of the data "machining user created machining program" are restricted. ” is rejected.
The classification of the classification manager in the operation authority on the fifth line is "machine user". In this operation authority, the operator whose group is "operator" and whose operator category is "machine maker" is the restricted person, and the operation "refer" and "operate" of the data "machine user created machining program" are restricted. Edit" is rejected.
The classification of the classification manager in the operation authority on the sixth line is "machine user". With this operation authority, for restricted users whose group is "administrator" and who is classified as "machine user", the operation "view" of the data "machine user created machining program" is permitted, and the operation "edit" is denied. be done.

The operation of the segment determining unit 14 will be described with reference to FIGS. 5 to 7. FIG. FIG. 5 is a flowchart showing the operation of the classification determination unit 14, FIG. 6 is an example of operator information and authorization information, and FIG. In the following description, it is assumed that a request for editing authorization information has been accepted as an operation request.
The operation request reception unit 11 receives the operation request (step S1), and the authentication unit 12 authenticates the operator (step S2). The operator information is referred to using the identification information of the operator acquired at the time of authentication, and if the operator is a "section manager" (step S3; is used as a key to retrieve authorization information.
If the operation authority is set in the data specified by the operation request (step S4; Yes), the classification determination unit 14 distinguishes between the classification of the operator who created the operation authority and the classification of the operator who made the operation request. compare. If the category of the operator who created the operation authority matches the category of the operator who requested the operation (step S5; Yes), the operator permits editing of the operation authority for the data specified in the operation request (step S6). If the category of the operator who set the existing operating authority and the category of the operator who output the operation request do not match (step S5; No), the editing of the operating authority is rejected (step S7).
In step S4, if no operation authority is set in the data for which the operator requests setting of operation authority (step S4; No), the classification determination unit permits addition of new operation authority to the data. (Step S8).
Also, in step S3, if the operator is not the section manager (or the upper manager) (step S3; No), the section determination unit 14 refuses to edit the operation authority (step S7).

The operation of the segment determination unit 14 will be specifically described with reference to FIGS. 6 and 7. FIG.
FIG. 6 shows an example of operator information and authorization information, and FIG. 7 shows a determination result for an operation request for editing operation authority by operator A and operator B. FIG.
First, the group of operator A is "manager" and the classification is "machine maker". In the operator information, operator A is defined as a 'section manager' of the section 'machine maker'. Assume that the operator A requests editing of the operation authority of the data "ladder program" as an operation request. On the other hand, the classification determination unit 14 searches for authorization information using the data "ladder program" as a key. In the authorization information of FIG. 6, the operation authority for the data "ladder program" has already been set, and the classification of the section manager who set the operation authority for the data "ladder program" is "machine manufacturer". The classification determination unit 14 compares the classification "machine maker" of the operator who set the operation authority for the data "ladder program" with the classification "machine maker" of the operator A who requested the operation. As a result of the comparison, the two partitions match. Therefore, the classification determination unit 14 rejects the editing of the operation authority of the data "ladder program" by the operator A.

When the operator A requests the setting of the operation authority for the data "machine user-created machining program" as an operation request, the classification determination unit 14 searches for the authorization information using the data "machine user-created machining program" as a key. In the authorization information in Fig. 6, the operation authority for the data "Machine User Created Machining Program" has already been set, and the classification of the section manager who set the operation authority for the data "Machine User Created Machining Program" is "Machine User". be. The classification determination unit 14 compares the classification "machine user" of the operator who set the operation authority for the data "machine user created machining program" with the classification "machine manufacturer" of the operator A who requested the operation. As a result of the comparison, the two partitions do not match. Therefore, the classification determination unit 14 rejects the editing of the operation authority of the data "Machine user created machining program" by the operator A.

When the operator A requests the setting of the operation authority for the data "machining program created by the machine maker" as an operation request, the classification determination unit 14 searches for authorization information using the data "machining program created by the machine maker" as a key. As a result of the search, the operation authority for the data "machining program created by the machine maker" has already been set, and the classification of the section manager who set the operation authority for the data "machining program created by the machine user" is "machine maker". The classification determination unit 14 compares the classification "machine manufacturer" of the operator who set the operation authority for the data "machine user created machining program" with the classification "machine manufacturer" of the operator A who requested the operation. As a result of the comparison, the two partitions match. Therefore, the classification determination unit 14 permits the operator A to edit the operation authority of the data "machining program created by the machine manufacturer".

When the operator A requests the setting of the operation authority for the data "error correction" as an operation request, the classification determination unit 14 searches for authorization information using the data "error correction" as a key. As a result of the search, the operation authority for the data "error correction" is not set. Therefore, the classification determination unit 14 permits the operator A to add the operation authority for the data "error correction".
The operation of the classification determination unit 14 in response to the operator A's operation request (editing of authorization information) has been described above. The operation request (editing of authorization information) of operator C is the same as that of operator A, so the explanation is omitted.

[2. Edit operator information/Create initial operator information]
Before describing the operation of the operator information, it is assumed that the initial operator information is stored in the numerical controller 100 by some means. The initial operator information is created by the upper administrator. The upper manager grasps the operator's standpoint related to the machine tool controlled by the numerical controller 100 . The upper manager creates operator information in which operators are classified into categories according to their positions. The first operator information created by the upper manager is called initial operator information. Superior administrators and section administrators shall have the authority to edit operator information.

When the section manager instructs the addition of an operator to the operator information, the section determining unit 14 assigns the section of the section manager as the section of the operator. For example, when the classification of the section manager is "machine manufacturer", the classification determination unit 14 determines that the classification of the operator added to the operator information is "machine manufacturer", which is the same as the section manager who added the operator. set to be

Upon receiving the operation request for the operator information, the classification determination unit 14 determines whether or not the operator has the authority to operate the operator information. The classification determination unit 14 reads the operator's group and classification, and if the operator is a classification manager, permits the operation of the operator information of the same classification as the classification manager.

[3. Create new data]
The new data created by the operator may be associated with the category of the operator who created the data. Linking is performed by the attribute management unit 15 . The attribute management unit 15 refers to the operator information, acquires the classification of the operator who created the data, and associates the classification of the operator who created the data with the data.
For example, in the "machining program created by machine user" in FIG. 6, the data "machining program" and the "classification (machine user)" of the operator who created the data are linked. As a result, the operation authority can be limited by using the "classification (machine user)" of the operator who created the data. For example, it is possible to manage data created by a certain "machine maker" so that other "machine makers" do not "reference" it.
The classification may be added to the data as attribute information, or may be collectively managed in a table or the like. Alternatively, the operator and the data may be linked instead of the data and the classification. If the operator and the data are linked, the classification of the operator who created the data can be determined from the operator information.

[4. General operation]
Here, general operations mean operations on data other than data restricted by administrator authority, such as operator information and authorization information. Examples of such data include "machining programs" and "parameters." These are the data for realizing the performance/function/usage of the machine tool. These data are generated by operators in positions related to machine tools.
If the operation request is a general operation, the classification determination unit 14 determines the classification of the operator who requested the operation (referred to as a restricted person). As described above, the permission information includes the classification of restricted persons. The classification determination unit 14 reads the operation authority of the restricted person set in the data for which the operation request is received from the authorization information. The classification determination unit 14 determines whether to permit or deny the data operation by the restricted person according to the read operation authority of the restricted person.

The operation of the division determination unit 14 described above will be described with reference to FIG.
The operator outputs an operation request. The authentication unit 12 authenticates the operator who requested the operation.
If the operation request is [edit authorization information] (step S11), the operation request includes the identification information of the data to be operated. The classification determination unit 14 determines whether or not the operation authority for the data specified by the operation request has already been set (step S12). Further, the classification determination unit 14 refers to the operator information and determines whether or not the operator is the classification manager. If the data operation authority has already been set (step S12; Yes) and the classification of the operator who created the operation authority is the classification of the operator who output the operation request, the classification determination unit 14 determines the operation authority. Editing is permitted (step S13). If the classification of the operator is different, the editing of the operation authority is rejected (step S14).
If the operation authority for the data specified by the operation request is not set (step S12; No), the classification determination unit 14 adds the operation authority for the data specified by the operation request if the operator is a classification administrator. is permitted (step S15). The classification determination unit 14 assigns the classification of the operator who is the creator to the operation authority of the added data.

If the operation request is "edit operator information" (step S21), the category determination unit 14 determines whether the operator who has output the operation request is a category manager. If the operator is a section manager, he is permitted to operate the operator information of the same section (step S22). Also, if the operator is a high-ranking administrator, the operation of the operator information may be permitted regardless of the category. The authority with which the upper manager can operate the operator information may change depending on the setting.

When the operation request is [create new data] (step S31), the attribute management unit 15 refers to the operator information and determines the category of the operator who output the operation request. The attribute management unit 15 associates the classification of the operator who created the data with the data (step S32).

When the operation request is [general operation] (step S41), the category determining unit 14 refers to the operator information and determines the group and category of the operator who output the operation request. Operation authority for general operations is set in the authorization information. The classification determination unit 14 reads the data to be operated, the classification and group of the operator who made the operation request, and the details of the requested operation from the authorization information, and determines whether to permit or reject the operation request (step S42). ).

As described above, the numerical control device 100 of the present embodiment classifies the operator who operates the data of the numerical control device 100 according to the category. A manager classified into a section is called a section manager. Compartment administrators are given administrator privileges for the compartment. The authority of the division manager is restricted to the same division by the division determination unit 14 . The section manager uses the operator information to manage the operators in the same section, and the authorization information is used to manage the operation authority of the same section manager.

Further, the attribute management unit 15 associates the data created by the operator with the classification of the operator. As a result, the "classification" of the operator who created the data can be used as a condition for the operation authority. In the example of FIG. 6, the data to be operated can be limited by using the "classification (machine user)" of the operator who created the data (machining program), such as "machining program created by machine user". This makes it possible to manage data created by a certain "machine maker" so that other "machine makers" do not "reference" it. It is also possible to set the operation authority for each folder. For example, it is possible to manage a folder created by a certain "machine maker" so that other "machine makers" do not "reference" it.

The initial operator information is created by the upper administrator. The upper manager grasps the positions of the operators involved in the machine tool (organization, where the data belongs, etc.), and sets managers (division managers) who manage the information of each position.

The hardware configuration of the numerical controller 100 to which the present disclosure is applied will be described below. FIG. 9 is a hardware configuration diagram of the numerical controller 100. As shown in FIG. As shown in FIG. 9, the numerical controller 100 includes a CPU 111 that controls the entire numerical controller 100, a ROM 112 that records programs and data, and a RAM 113 that temporarily expands data. A system program recorded in the ROM 112 is read out via the system program, and avoidance is executed according to the system program.

The non-volatile memory 114 is, for example, backed up by a battery (not shown), so that the memory state is maintained even when the power of the numerical controller 100 is turned off. The nonvolatile memory 114 stores various data such as programs read from the external device 120 via the interfaces 115 , 118 , and 119 and user operations input via the input unit 30 . The nonvolatile memory 114 may store programs and data for executing the numerical controller 100 of this embodiment. Further, the display unit 70 displays various data, measurement results, causes of incorrect data, and the like.

The interface 115 is an interface for connecting the numerical controller 100 and an external device 120 such as an adapter. Programs, various parameters, and the like are read from the external device 120 side.
The interface 118 is an interface for connecting the numerical controller 100 and the display unit 70 such as a liquid crystal display. The display unit 70 displays each data read into the memory, data obtained as a result of execution of the program, and the like.
The interface 119 is an interface for connecting the numerical controller 100 and the input unit 30 such as a keyboard or pointing device. The input unit 30 transfers commands, data, etc. based on operations by the operator to the CPU 111 via the interface 119 .

Although the disclosure has been described in detail, the disclosure is not limited to the specific embodiments described above. These embodiments include various additions, replacements, modifications, Partial deletion etc. are possible. Also, these embodiments can be implemented in combination. For example, in the above-described embodiments, the order of each operation and the order of each process are shown as an example, and are not limited to these.

The following additional remarks are disclosed regarding the above-described embodiment and modifications.
(Appendix 1)
The numerical control device (100) includes an operation request reception unit (11) that receives an operation request from an operator, and a classification determination unit ( 14), wherein the authorization information includes a category of an operator who created an operation authority for the operator, a category of a restricted person who is an operator who is restricted by the operation authority, and a person who is a restricted person. When an operator who outputs an operation request to edit the operation authority is an administrator, the classification determination unit (14) determines the classification of the operator who outputs the operation request. , if the category of the operator who created the operation authority is the same, the editing of the operation authority is permitted.
(Appendix 2)
In the numerical control device (100), the classification determination unit (14) determines that an operator who has output an operation request for the operation authority included in the authorization information is an administrator, and that the operator has the operation authority. When editing is requested, if the category of the operator who output the operation request is different from the category of the operator who created the operation authority, the editing of the operation authority is rejected.
(Appendix 3)
In the numerical control device (100), the classification determination unit (14) manages operator information, and the operator information includes the operator, whether or not the operator has administrator authority, and the position of the operator. It is associated with the category that indicates
(Appendix 4)
In the numerical controller (100), the classification determining section (14) manages the operator added to the operator information and the classification of the operator who added the operator to be the same.
(Appendix 5)
The numerical controller (100) includes the author of the data as information specifying the data in the authorization information.
(Appendix 6)
The computer-readable storage media (112, 113, 114) receive an operation request from an operator and provide setting information for operation authority for data to be operated by the operation request to one or more processors (111). A storage medium storing computer-readable instructions for executing a process for managing authorization information, wherein the authorization information includes a classification of an operator who created an operation authority for the operator, and the operation authority If the operator who outputs the operation request to edit the operation authority is an administrator, If the category of the operator who output the operation request and the category of the operator who created the operation authority are the same, the operator who made the operation request is allowed to edit the operation authority, and the process is executed. memorize the instructions.

REFERENCE SIGNS LIST 100 numerical controller 11 operation request reception unit 12 authentication unit 13 operation request execution unit 14 classification determination unit 15 attribute management unit 111 CPU
112 ROMs
113 RAM
114 non-volatile memory

Claims (6)

an operation request reception unit that receives an operation request from an operator;
a classification determination unit that manages authorization information, which is setting information of operation authority for data to be operated by the operation request,
The authorization information includes the classification of the operator who created the operation authority for the operator, the classification of the restricted person who is the operator who is restricted by the said operational authority, and the details of the operation for which the restricted person has the authority. including
When an operator who outputs an operation request to edit the operation authority is an administrator, the classification determination unit sets the classification of the operator who outputs the operation request to the same classification of the operator who created the operation authority. If so, a numerical control device that permits editing of the operation authority. The classification determination unit outputs the operation request when an operator who outputs an operation request for the operation authority included in the authorization information is an administrator and the operator requests editing of the operation authority. 2. The numerical controller according to claim 1, wherein the editing of the operation authority is rejected if the classification of the operator who created the operation authority is different from the classification of the operator who created the operation authority. 2. The classification determining unit manages operator information, and the operator information associates an operator, whether or not the operator has administrator authority, and a classification indicating the position of the operator. Numerical controller as described. 4. The numerical control apparatus according to claim 3, wherein said classification determination unit manages such that the classification of the operator added to said operator information and the classification of the operator who added said operator are the same. 5. The numerical controller according to claim 4, wherein said authorization information includes a creator of said data as information specifying said data. to one or more processors;
Receiving an operation request from an operator,
managing authorization information, which is setting information of operation authority for data to be operated by the operation request;
A storage medium storing computer readable instructions for performing a process,
The authorization information includes the classification of the operator who created the operation authority for the operator, the classification of the operator who is subject to the restriction on the operation authority, and the contents of the operation for which the restriction subject has the authority. including
When the operator who outputs the operation request to edit the operation authority is an administrator, if the classification of the operator who outputs the operation request and the classification of the operator who created the operation authority are the same, A computer-readable storage medium storing a command for executing a process that permits an operator who has made an operation request to edit the operation authority.

Images