OA19362A - Association information authorization method for form. - Google Patents

Abstract

A method for authorizing form-related information is disclosed in the present invention, including: selecting a grantee; selecting a form, and displaying candidate relation information of said form, wherein when there is one grantee, in said candidate relation information, items thereof that are selected and saved in the candidate relation information when the grantee is authorized at last time are automatically selected, and a corresponding item is selected from said candidate relation information; when there are two or more grantees, in said candidate relation information, no item thereof is selected, and a corresponding item is selected from said candidate relation information; and after authorizing the relation information of the form to the grantee, saving permissions of the relation information of the grantee's form. The present invention can achieve authorizing two or more grantees at the same time, thus improving the efficiency of authorizing form-related information to batch grantees with exactly or mostly the same permissions.

Description

[0035] The technical solutions of the présent invention will be further described in detail below with reference to the figures, but the protection scope of the présent invention is not limited to the following descriptions.

[0036] [Embodiment 1] As shown in FIG. 1, a method for authorizing form-related information includes: selecting a grantee. The grantee includes one or more types of a person, a user, a group, a class, and a rôle.

[0037] The rôle is an independent individual not a group/a class, one rôle can only be related to a unique user during the same period, and one user is related to one or more rôles.

[0038] The rôle belongs to a certain department, and the rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in a system. The user détermines (obtains) permissions through its relation to the rôle, one employée corresponds to one user, and one user corresponds to one employée.

[0039] Définition of a rôle: A rôle does not hâve the nature of a group/a class/a category/a post/a position/a type of work or the like, but has a non-collective nature. The rôle is unique and is an independent individual. Applied to an enterprise or an institution, the rôle is équivalent to a post number (the post number herein is not a post, and one post may hâve multiple employées at the same time, but one post number can only correspond to one employée during the same period).

[0040] For example, in a company system, the following rôles may be created: a general manager, a deputy general manager 1, a deputy general manager 2, a manager of Beijing sales department I, a manager of Beijing sales department II, a manager of Beijing sales department III, a Shanghai sales engineer 1, a Shanghai sales engineer 2, a Shanghai sales engineer 3, a Shanghai sales engineer 4, a Shanghai sales engineer 5, and so on. The relation between users and rôles is as follows: if Zhang San, the company's employée, serves as a deputy general manager 2 of the company and also serves as a manager of Beijing sales department I, the rôles to which Zhang San needs to be related are the deputy general manager 2 and the manager of Beijing sales department I, and Zhang San owns the permissions of the two rôles.

[0041] The concept of conventional rôles is a group/a class/a post/a position/a type of work in nature, and one rôle can correspond to multiple users. However, in the présent application, the concept of rôle is équivalent to a post number/a station number, and is also similar to the rôle in a film and télévision drama: one rôle (in childhood, juvénile, middle-age...) can be played by only one actor or actress during the same period, but one actor or actress may play multiple rôles.

[0042] During cross-department transfer of the user, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user,

ΙΟ or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0043] A form is selected: selecting a form and displaying the candidate relation information of the form.

[0044] The candidate relation information includes at least one of a related form and related statistics, thus achieving respective authorization of permissions to view the related forms and related statistics of the form. For example, while a customer form is authorized, the related forms/the related statistics of the customer form can be authorized at the same time, and thus it résolves authorization matching vulnerabilities between forms. The vulnerabilities possibly occur in the prior art when viewing the relation information between forms is controlled by using independent form permissions. It also résolves the problem in the prior art that relation information cannot be viewed selectively (ail relation information is viewable by default conventionally). For example, when a customer form is authorized to Zhang San, a contract form, an order form, shipping statistics, and the like related to the customer form are displayed. In this case, Zhang San can be authorized to view the contract form related to the customer form. Then, when viewing the related information of a customer (for example, the customer's relation information or the link of the customer's relation information is displayed in an interface for displaying the customer's information, so that Zhang San directly views the information or clicks the link to view the information), Zhang San can view the contract information/content related to the customer, but cannot view other information/content of the customer, such as order and shipping statistics (it is conventionally assumed by default that the customer's relation information includes contract information, order information, shipping statistics, and the like, and Zhang San can view ail the related contract information, order information, shipping statistics, and the like through the relation).

[0045] When a form is authorized, the related forms/the statistics of the form are displayed to be selected for authorization, and these related statistics are only statistics about the data information related to the contract, thus avoiding unnecessary information

H leakage of the company and possible loss.

[0046] The method for authorizing form-related information further includes a step of setting the candidate relation information, so that the candidate relation information can be set according to actual needs, thus improving the adaptability.

[0047] The relation information of a form is authorized to the grantee. When there is one grantee, in the candidate relation information, items thereof that are selected and saved when the grantee is authorized at last time are automatically selected, and a corresponding item is selected from the candidate relation information. As shown in FIG. 2, a clerk 1 has been selected as a grantee and in the candidate relation information, items 10 thereof that are selected and saved when the clerk 1 is authorized at last time are a contract form and shipping statistics, and in this case, the contract form and the shipping statistics are selected automatically. The last authorization is completed by Zhang Er at 15:00 on May 6, 2017. When there are two or more grantees, in the candidate relation information, no item thereof is selected, and a corresponding item is selected from the candidate relation information. As shown in FIG. 3, a clerk 1 and a clerk 2 are selected as grantees at the same time, and in this case, in the candidate relation information, no item thereof is selected.

[0048] When there is one grantee, after the grantee and the form are selected, an authorization operator and an authorization time that the grantee's form is authorized at last time are displayed, which helps to détermine whether the grantee needs to be authorized.

For example, an operator needs to authorize 100 rôles; however, the operator only finished authorizing 70 rôles on that day. When the operator continued to authorize the rôle on the next day, a rôle to be authorized can be found by screening the authorization operators or the time of the last authorization of the relation information of the form. For another example, by viewing the last time when a rôle is authorized, it can be known how long the 25 permissions of the rôle hâve remained unchanged, which helps to détermine intuitively whether to re-authorize the rôle.

[0049] After the relation information of the form is authorized to the grantee, the permissions of the relation information of the grantee's form are saved.

[0050] It should be noted that a grantee may be selected before a form is selected, or a grantee may be selected after a form is selected, or a grantee and a form may be selected simultaneously.

[0051] [Embodiment 2] As shown in FIG. 4, a method for authorizing form-related 5 information includes: selecting a grantee. The grantee includes one or more types of a person, a user, a group, a class, and a rôle.

[0052] The rôle is an independent individual not a group/a class, one rôle can only be related to a unique user during the same period, and one user is related to one or more rôles.

[0053] The rôle belongs to a certain department, and the rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in a system. The user détermines (obtains) permissions through its relation to the rôle, one employée corresponds to one user, and one user corresponds to one employée.

[0054] During cross-department transfer of the user, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation 20 between the user and another rôle may be created at any time.

[0055] A form is selected: selecting a form and displaying candidate relation information of the form. The candidate relation information includes at least one of a related form and related statistics.

[0056] A field is selected: selecting a field that needs to operate a permission in the 25 form (that is, the field, the value of which can be used for authorization), where the selected field should be the field, the value of which of is determined by sélection (for example, the field values of the industry field of a customer form include options such as a manufacturing industry, a financial industry, and an aircraft industry, and is not filled manually) or determined automatically (for example, for the fields such as a form creator, a form recorder, a form making rôle, a form making person, and a department, these options/field values are automatically determined according to a related rule once the form data is determined/saved).

[0057] The relation information of the form is authorized to the grantee, where a corresponding item is selected from ail items that correspond to ail field values of the selected field respectively in said candidate relation information. As shown in FIG. 5, the selected field is the industry to which the customer belongs; ail field values of the field include a manufacturing industry, a financial industry, and an aircraft industry; ail items in 10 the candidate relation information that correspond to ail the field values are a contract form of the manufacturing industry, an order form of the manufacturing industry, shipping statistics ofthe manufacturing industry, receiving statistics ofthe manufacturing industry, a contract form of the financial industry, an order form of the financial industry, shipping statistics of the financial industry, receiving statistics of the financial industry, a contract 15 form ofthe aircraft industry, an order form of the aircraft industry, shipping statistics of the aircraft industry, and receiving statistics of the aircraft industry.

[0058] After the relation information of the form is authorized to the grantee, the permissions of the relation information of the grantee's form are saved.

[0059] When there is one grantee, in the candidate relation information, items 20 thereof that are selected and saved when the grantee is authorized at last time are automatically selected; and when there are two or more grantees, in the candidate relation information, no item thereof is selected.

[0060] When there is one grantee, after the grantee and the form are selected, an authorization operator and an authorization time that the grantee's form is authorized at last 25 time are displayed, which helps to détermine whether the grantee needs to be authorized.

[0061] It should be noted that, the sequence of selecting a grantee, selecting a form, and selecting a field is not limited in this embodiment, and any sequence can be used for implémentation.

[0062] [Embodiment 3] As shown in FIG. 6, a method for authorizing form-related information includes: selecting a grantee. The grantee includes one or more types of a person, a user, a group, a class, and a rôle.

[0063] The rôle is an independent individual not a group/a class, one rôle can only 5 be related to a unique user during the same period, and one user is related to one or more rôles.

[0064] The rôle belongs to a certain department, and the rôle is authorized according to work content of the rôle; a name of the rôle is unique under the department, and a number of the rôle is unique in a system. The user détermines (obtains) permissions 10 through its relation to the rôle, one employée corresponds to one user, and one user corresponds to one employée.

[0065] During cross-department transfer of the user, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, 15 or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0066] A form is select: selecting a form, and displaying the candidate relation information of the form; the candidate relation information includes at least one of a related 20 form and related statistics.

[0067] An authorization template is selected, where an existing rôle or a created template is selected as an authorization template; form-related information is authorized to a grantee, where in the candidate relation information, items thereof that are selected and saved when the authorization template is authorized at last time are automatically selected, 25 and a corresponding item is selected from the candidate relation information. As shown in FIG. 7, a clerk 1 is a grantee, and in the candidate relation information, items thereof that are selected and authorized when a created template 1 is authorized at last time are automatically selected.

[0068] After the relation information of the form is authorized to the grantee, the permissions of the relation information of the grantee's form are saved.

[0069] It should be noted that, the sequence of selecting a grantee, selecting a form, and selecting an authorization template is not limited in this embodiment, and any sequence 5 can be used for execution.

[0070] The above is only a preferred embodiment of the présent invention, and it should be understood that the présent invention is not limited to the forms disclosed herein, and is not to be construed as being limited to the other embodiments, but may be used in various other combinations, modifications and environments. Modification can be made by 10 the techniques or knowledge of the above teachings or related art within the scope of the teachings herein. Ail changes and modifications made by those skilled in the art without departing from the spirit and scope of the présent invention are intended to be within the protection scope of the appended claims.

Claims (10)

1. A method for authorizing form-related information, comprising:

selecting a grantee;

5 selecting a form, wherein a form is selected, and candidate relation information of said form is displayed;

authorizing the relation information of the form to the grantee, wherein when there is one grantee, in said candidate relation information, items thereof that are selected and saved in the candidate relation information when the grantee is authorized at last time are 10 automatically selected, and a corresponding item is selected from said candidate relation information; when there are two or more grantees, in said candidate relation information, no item thereof is selected, and a corresponding item is selected from said candidate relation information; and after authorizing the relation information of the form to the grantee, saving the 15 permissions of the relation information of the grantee's form.

2. The method for authorizing form-related information according to claim 1, wherein said grantee comprises one or more types of a person, a user, a group, a class, and a rôle.

3. The method for authorizing form-related information according to claim 2, wherein said rôle is an independent individual not a group/a class, one rôle can only be related to a 20 unique user during the same period, and one user is related to one or more rôles.

4. The method for authorizing form-related information according to claim 3, wherein said rôle belongs to a certain department, and the rôle is authorized according to the work content of the rôle; a name of the rôle is unique under the department, and a number of the rôle is unique in a system; and during cross-department transfer of said user, the user's 25 relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department.

5. The method for authorizing form-related information according to claim 1, wherein said candidate relation information comprises at least one of a related form and related statistics.

6. The method for authorizing form-related information according to claim 1, wherein said method for authorizing form-related information further comprises a step of setting the 5 candidate relation information.

7. The method for authorizing form-related information according to claim 1, wherein when there is one grantee, after the grantee and the form are selected, an authorization operator and an authorization time that the grantee's form is authorized at last time are displayed.

10

8. A method for authorizing form-related information, comprising:

selecting a grantee;

selecting a form, wherein a form is selected, and candidate relation information of said form is displayed;

selecting a field, wherein a field that needs to operate a permission is selected in the 15 form, and the selected field should be the field of which value is determined by sélection or determined automatically;

authorizing relation information of the form to the grantee, wherein a corresponding item is selected from ail items that correspond to ail field values of the selected field respectively in said candidate relation information; and

20 after authorizing the relation information of the form to the grantee, saving permissions of the relation information of the grantee's form.

9. The method for authorizing form-related information according to claim 8, wherein when there is one grantee, in said candidate relation information, items thereof that are selected and saved when the grantee is authorized at last time are automatically selected;

25 and when there are two or more grantees, in said candidate relation information, no item thereof is selected.

10. A method for authorizing form-related information, comprising:

selecting a grantee;

selecting a form, wherein a form is selected, and candidate relation information of said form is displayed;

selecting an authorization template, wherein an existing rôle or a created template is 5 selected as an authorization template;

authorizing form-related information to a grantee, wherein in the candidate relation information, items thereof that are selected and saved when the authorization template is authorized at last time are automatically selected, and a corresponding item is selected from said candidate relation information; and

10 after authorizing the relation information of the form to the grantee, saving permissions of the relation information of the grantee's form.