OA19399A - Method for configuring operating time period for mailbox content and instant messaging content in system. - Google Patents

Abstract

A method for setting an operation time range of mailbox content and instant messaging content in a system is disclosed in the present invention, wherein a method for setting an operation time of mailbox content includes: selecting a role, a user or an employee as a mailbox user; setting a permission time range for each mailbox user, wherein said permission time range includes one or more of the following types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline; and the content within the permission time range of the mailbox user in a mailbox account used by the mailbox user being operated by said mailbox user. In the present invention, by setting a permission time range, only the content set within the permission time range in the mailbox account or the instant messaging account can be operated, thus improving the security of data information in the mailbox account and the instant messaging account.

Description

[0063] The technical solutions of the présent invention will be further described in detail below with reference to the figures, but the protection scope of the présent invention is not limited to the following descriptions.

[0064] [Embodiment 1] As shown in FIG. 1, a method for setting an operation time range of mailbox content in a system includes the following steps. S001: selecting a rôle, a user or an employée as a mailbox user.

[0065] After the relation between a rôle and a mailbox account is created, during the same period, one rôle can only be related to one mailbox account, and one mailbox 10 account can only be related to one rôle. After the relation between a user and a mailbox account is created, during the same period, one user can only be related to one mailbox account, and one mailbox account can only be related to one user. After the relation between an employée and a mailbox account is created, during the same period, one employée can only be related to one mailbox account, and one mailbox account can only be 15 related to one employée.

[0066] As shown in FIG. 2, the rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to 20 the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0067] Définition of a rôle: A rôle does not hâve the nature of a group/a class/a category/a post/a position/a type of work or the like, but has a non-collective nature. The 25 rôle is unique and is an independent individual. Applied in an enterprise or an institution, the rôle is équivalent to a post number (the post number herein is not a post, and one post may hâve multiple employées at the same time, but one post number can only correspond to one employée during the same period).

[0068] For example, in a company system, the following rôles may be created: a general manager, a deputy general manager 1, a deputy general manager 2, a manager of Beijing sales department I, a manager of Beijing sales department II, a manager of Beijing sales department III, a Shanghai sales engineer 1, a Shanghai sales engineer 2, a Shanghai sales engineer 3, a Shanghai sales engineer 4, a Shanghai sales engineer 5, and the like. The relation between users and rôles is as follows: if Zhang San, the company's employée (the system sets a user Zhang San for Zhang San), serves as a deputy general manager 2 of the company and also serves as a manager of Beijing sales department I, the rôles to which Zhang San needs to be related are the deputy general manager 2 and the manager of Beijing sales department I, and Zhang San owns the permissions of the two rôles.

[0069] The concept of conventional rôles is a group/a class/a post/a position/a type of work in nature, and one rôle can correspond to multiple users. However, in the présent application, the concept of rôle is équivalent to a post number/a station number, and is also similar to the rôle in a film and télévision drama: one rôle (in childhood, juvénile, middle-age...) can be played by only one actor or actress during the same period, but one actor or actress may play multiple rôles.

[0070] When a user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0071] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0072] S002: setting a permission time range for each mailbox user, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline.

[0073] Furthermore, the permission time range further includes a time range from a system initial time to a current time.

[0074] The unit for setting the permission time range may be year, month, day, hour, minute, second, and the like.

[0075] The above five types of time ranges are described in the following examples:

a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time. For example, on June 20, 2017, an employée A is authorized to view email data/content within a time range from a time point, which is determined by going backwards 6 days from June 20, 2017, to June 20, 2017 10 (which is the current time, what is authorized is till the current time not a spécifie time point) in a mailbox account used by the employée A. That is, on June 20, 2017, the employée A can view email data/content from June 15, 2017 to June 20, 2017 in the mailbox account used by the employée A; on June 21, 2017, the employée A can view email data/content from June 16, 2017 to June 21, 2017 in the mailbox account used by the 15 employée A; on June 22, 2017, the employée A can view email data/content from June 17, 2017 to June 22, 2017 in the mailbox account used by the employée A, and so on. That is, the time length of the time range is fixed, and the start time and the deadline are both variable automatically.

[0076] The time range from a start time to a current time (the current time is 20 dynamic). For example, on May 1, 2015, the employée A is authorized to view email data/content from February 1, 2015 to the current date (current time) in the mailbox account used by the employée A. Then, the employée A can view email data/content from February 1, 2015 to May 1, 2015 in the mailbox account used by the employée A; on May 2, 2015, the employée A can view email data/content from February 1, 2015 to May 2, 25 2015 in the mailbox account used by the employée A (further, the start time can be defined as excluding the start time, and when the start time is excluded, the employée A cannot view email data/content on February 1, 2015 in the mailbox account used by the employée A, and can only view email data/content after February 1, 2015 in the mailbox account used by the employée A; further, other time ranges in the présent application, if related to the 30 définition of the start time, may also exclude the start time).

[0077] The time range from a deadline to a system initial time. For example, the employée A is authorized to view email data/content from February 1, 2015 to the system initial time in the mailbox account used by the employée A. Then, the employée A can view email data/content from February 1, 2015 to the system initial time in the mailbox account used by the employée A (that is, the employée A can view email data/content on and before February 1, 2015 in the mailbox account used by the employée A in the system); (further, the deadline can be defined as excluding the deadline, and when the deadline is excluded, the employée A cannot view email data/content on February 1, 2015 in the mailbox account used by the employée A, but can only view email data/content before

February 1, 2015 in the mailbox account used by the employée A; furthermore, the system initial time may not be set and only the deadline is set, and in this case, the employée A can view email data/content on and before the deadline in the mailbox account used by the employée A, or the employée A can view email data/content before the deadline in the mailbox account used by the employée A).

[0078] The time range from a start time to a deadline. For example, the employée A is authorized to view email data/content from February 1, 2015 to June 1, 2015 in the mailbox account used by the employée A. Then, the employée A can view email data/content from February 1, 2015 to June 1, 2015 in the mailbox account used by the employée A.

[0079] The time range from a system initial time to a current time (the current time is dynamic). For example, on June 1, 2017, the employée A is authorized to view email data/content from the system initial time to the current time in the mailbox account used by the employée A. Then, on June 1, 2017, the employée A can view email data/content from the system initial time to June 1, 2017 in the mailbox account used by the employée A; on

June 2, 2017, the employée A can view email data/content from the system initial time to June 2, 2017 in the mailbox account used by the employée A, and so on. Further, the system initial time may not be set, and in this case, the time range from the system initial time to the current time is a time range including all time. Further, if other time ranges in the present application relate to the définition of the system initial time, the system initial time may not be set either.

[0080] Both the deadline and the start time are set manually.

[0081] In the above description, the permission time range is set for the employée A rather than the mailbox account. After the permission time range is set for the employée A, the employée A can only operate the content within the permission time range set for the 5 employée A in the mailbox used by himself/herself. The employée A uses a mailbox A now, and later the employée A uses a mailbox B instead of the mailbox A. In this case, the employée A can only operate the content within the permission time range set for the employée A in the mailbox B.

[0082] The mailbox user opérâtes the content within the permission time range of 10 the mailbox user in the mailbox account used by the mailbox user. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0083] Further, the mailbox user can and is only allowed to operate the content within the permission time range (or within the permission time range of the mailbox user) in the mailbox account used by the mailbox user.

[0084] When the mailbox user is a rôle, the mailbox account used by the mailbox user includes a mailbox account related to the rôle; when the mailbox user is a user, the mailbox account used by the mailbox user includes a mailbox account related to the user, a mailbox account related to an employée corresponding to the user, and a mailbox account related to a rôle which is related to the user; when the mailbox user is an employée, the mailbox account used by the mailbox user includes a mailbox account related to the employée, a mailbox account related to a user corresponding to the employée, and a mailbox account related to a rôle which is related to the user corresponding to the employée.

[0085] The source of the mailbox account includes one or two of the following two 25 types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox account is further included in this case. 2. The mailbox account is a mailbox account of a mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the main part of the system.

[0086] [Embodiment 2] A method for setting an operation time range of mailbox content in a System includes the following steps. SOI 1: setting a permission time range for a 5 mailbox account (rather than setting a time range for a mailbox user), wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline;

[0087] Furthermore, the permission time range further includes a time range from a system initial time to a current time.

[0088] The unit for setting the permission time range may be year, month, day, hour, minute, second, and the like.

[0089] The source of the mailbox account includes one or two of the following two 15 types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox account is further included in this case. 2. The mailbox account is a mailbox account of a mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an 20 enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the absolute main part of the system.

[0090] SOI2: the content within the permission time range of the mailbox account in the mailbox account being operated by ail rôles, users and employées using the mailbox account. The operation herein specifically includes one or more types of viewing 25 data/content, and deleting data/content.

[0091] Further, ail rôles, users and employées using the mailbox account can and are only allowed to operate the content within the permission time range (or within the permission time range of the mailbox account) in the mailbox account.

[0092] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0093] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0094] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0095] [Embodiment 3] A method for setting an operation time range of mailbox content in a system includes the following steps. S021: selecting a rôle, a user or an employée as a supervisor.

[0096] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0097] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0098] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0099] S022: setting one or more supervisées for each supervisor, wherein the supervisée is a rôle, a user or an employée; and S023: setting a permission time range for each supervisor, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline.

[0100] Furthermore, the permission time range further includes a time range from a system initial time to a current time.

[0101] The unit for setting the permission time range may be year, month, day, hour, minute, second, and the like.

[0102] Each supervisor opérâtes the content within the permission time range of the supervisor in a mailbox account used by the corresponding supervisée. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0103] Further, each supervisor can and is only allowed to operate the content within the permission time range of the supervisor in the mailbox account used by the corresponding supervisée.

[0104] When the supervisée is a rôle, the mailbox account used by the supervisée includes a mailbox account related to the rôle; when the supervisée is a user, the mailbox account used by the supervisée includes a mailbox related to the user, a mailbox account related to an employée corresponding to the user, and a mailbox account related to a rôle which is related to the user; when the supervisée is an employée, the mailbox account used by the supervisée includes a mailbox account related to the employée, a mailbox account related to a user corresponding to the employée, and a mailbox account related to a rôle which is related to the user corresponding to the employée.

[0105] The source of the mailbox account includes one or two of the following two types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox account is further included in this case. 2. The mailbox account is a mailbox account of a 5 mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the absolute main part of the system.

[0106] [Embodiment 4] A method for setting an operation time range of mailbox 10 content in a system includes the following steps. S031: selecting a rôle, a user or an employée as a supervisée.

[0107] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is 15 created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0108] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new 20 department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0109] One employée corresponds to one user, one user corresponds to one 25 employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0110] S032: setting a permission time range for each supervisée, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline.

[OUI] Furthermore, the permission time range further includes a time range from a system initial time to a current time.

[0112] The unit for setting the permission time range may be year, month, day, hour, minute, second, and the like.

[0113] Ail supervisors corresponding to each supervisée operate the content within the permission time range of the supervisée in a mailbox account used by the supervisée. The operation herein specifically includes one or more types of viewing data/content, and 10 deleting data/content.

[0114] Further, ail the supervisors corresponding to each supervisée can and are only allowed to operate the content within the permission time range of the supervisée in the mailbox account used by the supervisée.

[0115] When the supervisée is a rôle, the mailbox account used by the supervisée 15 includes a mailbox account related to the rôle; when the supervisée is a user, the mailbox account used by the supervisée includes a mailbox account related to the user, a mailbox account related to an employée corresponding to the user, and a mailbox account related to a rôle which is related to the user; when the supervisée is an employée, the mailbox account used by the supervisée includes a mailbox account related to the employée, a mailbox 20 account related to a user corresponding to the employée, and a mailbox account related to a rôle which is related to the user corresponding to the employée.

[0116] The source of the mailbox account includes one or two of the following two types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox 25 account is further included in this case. 2. The mailbox account is a mailbox account of a mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the absolute main part of the system.

[0117] [Embodiment 5] A method for setting an operation time range of mailbox content in a system includes the following steps. S041: selecting a rôle, a user or an employée as a mailbox user.

[0118] The rôle is an independent individual not a group/a class, and during the 5 same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0119] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, 15 and the relation between the user and another rôle may be created at any time.

[0120] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0121] S042: setting a permission time range for each mailbox user, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to 25 a system initial time, a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a system initial time, and a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a current time.

[0122] The above four types of time ranges are described in the following examples: the time range from a time point, which is determined by going backwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a current time. For example, a relation time of a mailbox account currently related to an employée B is May 1, 2016, and the permission time range of the employée B is set to be a time range from a time point, which is determined by going backwards from the relation time of the employée B and his/her currently-related mailbox account for two months, to the current time. In this case, the employée B can operate ail content after March 1, 2016 in the related mailbox account. The permission time range is set for the employée B. If the employée B is related to a new mailbox account on October 1, 2016, the employée B can operate ail content after August 1, 2016 in the newly-related mailbox account.

[0123] The time range from a time point, which is determined by going forwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a system initial time. For example, a relation time of a mailbox currently related to an employée B is May 1, 2016, and the permission time range of the employée B is set to be a time range from a time point, which is determined by going forwards from the relation time of the employée B and his/her currently-related mailbox for two months, to the system initial time. In this case, the employée B can operate ail content before July 1, 2016 in the related mailbox.

[0124] The time range from a relation time of the mailbox user and his/her currently-related mailbox account to a system initial time. For example, a relation time of a mailbox currently related to an employée B is May 1, 2016, and the permission time range of the employée B is set to be a time range from the relation time of the employée B and his/her currently-related mailbox to the system initial time. In this case, the employée B can operate ail content before May 1, 2016 in the related mailbox.

[0125] The time range from a relation time of the mailbox user and his/her currently-related mailbox account to a current time. For example, a relation time of a mailbox currently related to an employée B is May I, 2016, and the permission time range of the employée B is set to be a time range from the relation time of the employée B and his/her currently-related mailbox to the current time. In this case, the employée B can operate ail content after May 1, 2016 in the related mailbox.

[0126] The mailbox user opérâtes the content within the permission time range of the mailbox user in the mailbox account used by the mailbox user. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0127] Further, the mailbox user can and is only allowed to operate the content 5 within the permission time range (or within the permission time range of the mailbox user) in the mailbox account used by the mailbox user.

[0128] When the mailbox user is a rôle, the mailbox account used by the mailbox user includes a mailbox account related to the rôle; when the mailbox user is a user, the mailbox account used by the mailbox user includes a mailbox account related to the user, a 10 mailbox account related to an employée corresponding to the user, and a mailbox account related to a rôle which is related to the user; when the mailbox user is an employée, the mailbox account used by the mailbox user includes a mailbox account related to the employée, a mailbox account related to a user corresponding to the employée, and a mailbox account related to a rôle which is related to the user corresponding to the 15 employée.

[0129] The source of the mailbox account includes one or two of the following two types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox account is further included in this case. 2. The mailbox account is a mailbox account of a 20 mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the absolute main part of the system.

[0130] [Embodiment 6] A method for setting an operation time range of mailbox 25 content in a system includes the following steps. S051 : setting a permission time range for a mailbox account, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the mailbox account and its currently-related mailbox user for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the mailbox account and its currently-related mailbox user for a fixed time length, to a system initial time, a time range from a relation time of the mailbox account and its currently-related mailbox user to a system initial time, and a time range from a relation time of the mailbox account and its currently-related mailbox user to 5 a current time.

[0131] The source of the mailbox account includes one or two of the following two types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox account is further included in this case. 2. The mailbox account is a mailbox account of a 10 mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the absolute main part of the system.

[0132] S052: the content within the permission time range of the mailbox account in the mailbox account being operated by ail rôles, users and employées using the mailbox account. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0133] Further, ail the rôles, users and employées using the mailbox account can and are only allowed to operate the content within the permission time range (or within the 20 permission time range of the mailbox account) in the mailbox account.

[0134] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the 25 department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0135] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0136] One employée corresponds to one user, one user corresponds to one 5 employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0137] [Embodiment 7] A method for setting an operation time range of mailbox content in a system includes the following steps. S061: selecting a rôle, a user or an employée as a supervisor.

[0138] The rôle is an independent individual, not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of 15 the rôle is unique under the department, and the number of the rôle is unique in the system.

[0139] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the 20 user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0140] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0141] S062: setting one or more supervisées for each supervisor, wherein the supervisée is a rôle, a user or an employée.

[0142] S063: setting a permission time range for each supervisor, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a system initial time, a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a system initial time, and a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a current time.

[0143] Each supervisor opérâtes the content within the permission time range of the supervisor in a mailbox account used by the corresponding supervisée. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0144] Further, each supervisor can and is only allowed to operate the content within the permission time range of the supervisor in the mailbox account used by the corresponding supervisée.

[0145] When the supervisée is a rôle, the mailbox account used by the supervisée includes a mailbox account related to the rôle; when the supervisée is a user, the mailbox account used by the supervisée includes a mailbox account related to the user, a mailbox account related to an employée corresponding to the user, and a mailbox account related to a rôle which is related to the user; when the supervisée is an employée, the mailbox account used by the supervisée includes a mailbox account related to the employée, a mailbox account related to a user corresponding to the employée, and a mailbox account related to a rôle which is related to the user corresponding to the employée.

[0146] The source of the mailbox account includes one or two of the following two types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox account is further included in this case. 2. The mailbox account is a mailbox account of a mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the absolute main part of the system.

[0147] [Embodiment 8] A method for setting an operation time range of mailbox content in a system includes the following steps. S071: selecting a rôle, a user or an employée as a supervisée.

[0148] The rôle is an independent individual not a group/a class, and during the 5 same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0149] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, 15 and the relation between the user and another rôle may be created at any time.

[0150] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0151] S072: setting a permission time range for each supervisée, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to 25 a system initial time, a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a system initial time, and a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a current time.

[0152] Ail supervisors corresponding to each supervisée operate the content within the permission time range of the supervisée in a mailbox account used by the supervisée.

The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0153] Further, ail the supervisors corresponding to each supervisée can and are only allowed to operate the content within the permission time range of the supervisée in 5 the mailbox account used by the supervisée.

[0154] When the supervisée is a rôle, the mailbox account used by the supervisée includes a mailbox account related to the rôle; when the supervisée is a user, the mailbox account used by the supervisée includes a mailbox account related to the user, a mailbox account related to an employée corresponding to the user, and a mailbox account related to 10 a rôle which is related to the user; when the supervisée is an employée, the mailbox account used by the supervisée includes a mailbox account related to the employée, a mailbox account related to a user corresponding to the employée, and a mailbox account related to a rôle which is related to the user corresponding to the employée.

[0155] The source of the mailbox account includes one or two of the following two 15 types: 1. The mailbox account is a mailbox account of a mailbox application (software) in the system (that is, a mailbox account in the system), and a step of creating the mailbox account is further included in this case. 2. The mailbox account is a mailbox account of a mailbox service provided by a third party, for example, a Netease mailbox account, a QQ mailbox account, or the like. The system herein is a management system used in an 20 enterprise, an institution or the like. The mailbox application in the system is only a part of the system, but not the absolute main part of the system.

[0156] [Embodiment 9] As shown in FIG. 3, a method for setting an operation time range of instant messaging content in a system includes the following steps. S081 : selecting a rôle, a user or an employée as an instant messaging user.

[0157] After the relation between a rôle and an instant messaging account is created, during the same period, one rôle can only be related to one instant messaging account, and one instant messaging account can only be related to one rôle. After the relation between a user and an instant messaging account is created, during the same period, one user can only be related to one instant messaging account, and one instant messaging account can only be related to one user. After the relation between an employée and an instant messaging account is created, during the same period, one employée can only be related to one instant messaging account, and one instant messaging account can only be related to one employée.

[0158] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0159] When a user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0160] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0161] S082: setting a permission time range for each instant messaging user, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline

[0162] Furthermore, the permission time range further includes a time range from a system initial time to a current time.

[0163] The unit for setting the permission time range may be year, month, day, hour, minute, second, and the like.

[0164] The above five types of time ranges are described in the following examples: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time. For example, on June 20, 2017, an employée A is authorized to view instant messaging data/content within a time range from a time point, which is determined by going backwards 6 days from June 20, 2017, to June 20, 2017 (which is the current time, what is authorized is till the current time not a spécifie time point) in an instant messaging account used by the employée A. That is, on June 20, 2017, the employée A can view instant messaging data/content from June 15, 2017 to June 20, 2017 in the instant messaging account used by the employée A; on June 21, 2017, the employée A can view instant messaging data/content from June 16, 2017 to June 21, 2017 in the instant messaging account used by the employée A; on June 22, 2017, the employée A can view instant messaging data/content from June 17, 2017 to June 22, 2017 in the instant messaging account used by the employée A, and so on. That is, the time length of the time range is fixed, and the start time and the deadline are both variable automatically.

[0165] The time range from a start time to a current time (the current time is dynamic). For example, on May 1, 2015, the employée A is authorized to view instant messaging data/content from February 1, 2015 to the current date (current time) in the instant messaging account used by the employée A. Then, the employée A can view instant messaging data/content from February 1, 2015 to May 1, 2015 in the instant messaging account used by the employée A; on May 2, 2015, the employée A can view instant messaging data/content from February 1, 2015 to May 2, 2015 in the instant messaging account used by the employée A (further, the start time can be defined as the start time that is excluded, and when the start time is excluded, the employée A cannot view instant messaging data/content on February 1, 2015 in the instant messaging account used by the employée A, and can only view instant messaging data/content after February 1, 2015 in the instant messaging account used by the employée A; further, other time ranges in the présent application, if related to the définition of the start time, may also exclude the start time).

[0166] The time range from a deadline to a system initial time. For example, the employée A is authorized to view instant messaging data/content from February 1, 2015 to the system initial time in the instant messaging account used by the employée A. Then, the employée A can view instant messaging data/content from February 1, 2015 to the system initial time in the instant messaging account used by the employée A (that is, the employée

A can view instant messaging data/content on and before February 1, 2015 in the instant messaging account used by the employée A in the system); (further, the deadline can be defined as the deadline that is excluded, and when the deadline is excluded, the employée A cannot view instant messaging data/content on February 1, 2015 in the instant messaging account used by the employée A, but can only view instant messaging data/content before 10 February 1, 2015 in the instant messaging account used by the employée A; furthermore, the system initial time may not be set and only the deadline is set, and in this case, the employée A can view instant messaging data/content on and before the deadline in the instant messaging account used by the employée A, or the employée A can view instant messaging data/content before the deadline in the instant messaging account used by the 15 employée A).

[0167] The time range from a start time to a deadline. For example, the employée A is authorized to view instant messaging data/content from February 1, 2015 to June 1, 2015 in the instant messaging account used by the employée A. Then, the employée A can view instant messaging data/content from February 1, 2015 to June 1, 2015 in the instant 20 messaging account used by the employée A.

[0168] The time range from a system initial time to a current time (the current time is dynamic). For example, on June 1, 2017, the employée A is authorized to view instant messaging data/content from the system initial time to the current time in the instant messaging account used by the employée A. Then, on June 1, 2017, the employée A can 25 view instant messaging data/content from the system initial time to June 1, 2017 in the instant messaging account used by the employée A; on June 2, 2017, the employée A can view ail instant messaging data/content from the system initial time to June 2, 2017 in the instant messaging account used by the employée A, and so on. Further, the system initial time may not be set, and in this case, the time range from the system initial time to the 30 current time is a time range including ail time. Further, if other time ranges in the présent application relate to the définition of the system initial time, the system initial time may not be set either.

[0169] Both the deadline and the start time are set manually.

[0170] In the above description, the permission time range is set for the employée A rather than the instant messaging account. After the permission time range is set for the employée A, the employée A can only operate the content within the permission time range set for the employée A in the instant messaging account used by himself/herself. The employée A uses an instant messaging account A now, and later the employée A uses an instant messaging account B instead of the instant messaging account A. In this case, the employée A can only operate the content within the permission time range set for the employée A in the instant messaging account B.

[0171] The instant messaging user opérâtes the content within the permission time range of the instant messaging user in an instant messaging account used by the instant messaging user. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0172] Further, the instant messaging user can and is only allowed to operate the content within the permission time range (or the permission time range of the instant messaging user) in the instant messaging account used by the instant messaging user.

[0173] When the instant messaging user is a rôle, the instant messaging account used by the instant messaging user includes an instant messaging account related to the rôle; when the instant messaging user is a user, the instant messaging account used by the instant messaging user includes an instant messaging account related to the user, an instant messaging account related to an employée corresponding to the user, and an instant messaging account related to a rôle which is related to the user; when the instant messaging user is an employée, the instant messaging account used by the instant messaging user includes an instant messaging account related to the employée, an instant messaging account related to a user corresponding to the employée, and an instant messaging account related to a rôle which is related to the user corresponding to the employée.

[0174] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the system (that is, an instant messaging account in the system), and a step of creating the instant messaging account is further included in this case. 2. The instant messaging account is an instant messaging account of 5 instant messaging software provided by a third paît/. The system herein is a management system used in an enterprise, an institution or the like. The instant messaging application in the system is only a part of the system, but not the absolute main part of the system.

[0175] [Embodiment 10] A method for setting an operation time range of instant messaging content in a system includes the following steps. S091: setting a permission time 10 range for an instant messaging account (rather than setting a time range for an instant messaging user), wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a 15 start time to a deadline.

[0176] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the system (that is, an instant messaging account in the system), and a step of creating the instant messaging account is further 20 included in this case. 2. The instant messaging account is an instant messaging account of instant messaging software provided by a third party. The system herein is a management system used in an enterprise, an institution or the like. The instant messaging application in the system is only a part of the system, but not the absolute main part of the system.

[0177] S092: the content within the permission time range of the instant messaging account in the instant messaging account being operated by ail rôles, users and employées using the instant messaging account. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0178] Further, the rôles, users and employées corresponding to the instant messaging account can and are only allowed to operate the content within the permission time range (or the permission time range of the instant messaging account) m the instant messaging account.

[0179] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0180] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0181] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0182] [Embodiment 11] A method for setting an operation time range of instant messaging content in a system includes the following steps. S101 : selecting a rôle, a user or an employée as a supervisor.

[0183] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0184] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0185] One employée corresponds to one user, one user corresponds to one 5 employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0186] S102: setting one or more supervisées for each supervisor, wherein the supervisée is a rôle, a user or an employée;

[0187] S103: setting a permission time range for each supervisor, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline;

[0188] Each supervisor opérâtes the content within the permission time range of the 15 supervisor in an instant messaging account used by the corresponding supervisée. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0189] Further, each supervisor can and is only allowed to operate the content within the permission time range of the supervisor in the instant messaging account used by 20 the corresponding supervisée.

[0190] When the supervisée is a rôle, the instant messaging account used by the supervisée includes an instant messaging account related to the rôle; when the supervisée is a user, the instant messaging account used by the supervisée includes an instant messaging account related to the user, an instant messaging account related to an employée 25 corresponding to the user, and an instant messaging account related to a rôle which is related to the user; when the supervisée is an employée, the instant messaging account used by the supervisée includes an instant messaging account related to the employée, an instant messaging account related to a user corresponding to the employée, and an instant messaging account related to a rôle which is related to the user corresponding to the employée.

[0191] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the system (that is, an instant messaging 5 account in the system), and a step of creating the instant messaging account is further included in this case. 2. The instant messaging account is an instant messaging account of instant messaging software provided by a third party. The system herein is a management system used in an enterprise, an institution or the like. The instant messaging application in the system is only a part of the system, but not the absolute main part of the system.

[0192] [Embodiment 12] A method for setting an operation time range of instant messaging content in a system includes the following steps. S111 : selecting a rôle, a user or an employée as a supervisée.

[0193] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one 15 or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0194] When the user is transferred across the departments, the user's relation to the 20 rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0195] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0196] S112: setting a permission time range for each supervisée, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline.

[0197] Ail supervisors corresponding to each supervisée operate the content within the permission time range of the supervisée in an instant messaging account used by the supervisée. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0198] Further, ail the supervisors corresponding to each supervisée can and are only allowed to operate the content within the permission time range of the supervisée in the instant messaging account used by the supervisée.

[0199] When the supervisée is a rôle, the instant messaging account used by the supervisée includes an instant messaging account related to the rôle; when the supervisée is a user, the instant messaging account used by the supervisée includes an instant messaging account related to the user, an instant messaging account related to an employée corresponding to the user, and an instant messaging account related to a rôle which is related to the user; when the supervisée is an employée, the instant messaging account used by the supervisée includes an instant messaging account related to the employée, an instant messaging account related to a user corresponding to the employée, and an instant messaging account related to a rôle which is related to the user corresponding to the employée.

[0200] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the system (that is, an instant messaging account in the system), and a step of creating the instant messaging account is further included in this case. 2. The instant messaging account is an instant messaging account of instant messaging software provided by a third party'. The system herein is a management system used in an enterprise, an institution or the like. The instant messaging application in the system is only a part of the system, but not the absolute main part of the system.

[0201] [Embodiment 13] A method for setting an operation time range of instant messaging content in a system includes the following steps. S121 : selecting a rôle, a user or an employée as an instant messaging user.

[0202] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one 5 or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0203] When the user is transferred across the departments, the user's relation to the 10 rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0204] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0205] SI 12: setting a permission time range for each instant messaging user, wherein the permission time range includes one or more of the following four types: a time 20 range from a time point, which is determined by going backwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a system initial time, 25 a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a system initial time, and a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a current time.

[0206] The above four types of time ranges are described in the following examples:

the time range from a time point, which is determined by going backwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a current time. For example, a relation time of an instant messaging account currently related to an employée B is May 1, 2016, and the permission time range of the employée B is set to be a time range from a time point, which is determined by going backwards from the relation time of the employée B and his/her currently-related instant messaging account for two months, to the current time. In this case, the employée B can operate ail content after March 1, 2016 in the related instant messaging account. The permission time range is set for the employée B. If the employée B is related to a new instant messaging account on October 1, 2016, the employée B can operate ail content after August 1, 2016 in the newly-related instant messaging account.

[0207] The time range from a time point, which is determined by going forwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a system initial time. For example, a relation time of an instant messaging account currently related to an employée B is May 1, 2016, and the permission time range of the employée B is set to be a time range from a time point, which is determined by going forwards from the relation time of the employée B and his/her currently-related instant messaging account for two months, to the system initial time. In this case, the employée B can operate ail content before July 1, 2016 in the related instant messaging account.

[0208] The time range from a relation time ofthe instant messaging user and his/her currently-related instant messaging account to a system initial time. For example, a relation time of an instant messaging account currently related to an employée B is May 1, 2016, and the permission time range of the employée B is set to be a time range from the relation time of the employée B and his/her currently-related instant messaging account to the system initial time. In this case, the employée B can operate ail content before May 1, 2016 in the related instant messaging account.

[0209] The time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a current time. For example, a relation time of an instant messaging account currently related to an employée B is May 1, 2016, and the permission time range of the employée B is set to be a time range from the relation time of the employée B and his/her currently-related instant messaging account to the current time. In this case, the employée B can operate ali content after May 1, 2016 in the related instant messaging account.

[0210] The instant messaging user opérâtes the content within the permission time range of the instant messaging user in the instant messaging account used by the instant messaging user. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0211] Further, the instant messaging user can and is only allowed to operate the content within the permission time range (or within the permission time range of the instant messaging user) in the instant messaging account used by the instant messaging user.

[0212] When the instant messaging user is a rôle, the instant messaging account used by the instant messaging user includes an instant messaging account related to the rôle; when the instant messaging user is a user, the instant messaging account used by the instant messaging user includes an instant messaging account related to the user, an instant messaging account related to an employée corresponding to the user, and an instant messaging account related to a rôle which is related to the user; when the instant messaging user is an employée, the instant messaging account used by the instant messaging user includes an instant messaging account related to the employée, an instant messaging account related to a user corresponding to the employée, and an instant messaging account related to a rôle which is related to the user corresponding to the employée.

[0213] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the system (that is, an instant messaging account in the system), and a step of creating the instant messaging account is further included in this case. 2. The instant messaging account is an instant messaging account of instant messaging software provided by a third party. The system herein is a management system used in an enterprise, an institution or the like. The instant messaging application in the System is only a part of the System, but not the absolute main part of the System.

[0214] [Embodiment 14] A method for setting an operation time range of instant messaging content in a system includes the following steps. S131: setting a permission time range for an instant messaging account, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the instant messaging account and its currently-related instant messaging user for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the instant messaging account and its currently-related instant messaging user for a fixed time length, to a system initial time, a time range from a relation time of the instant messaging account and its currently-related instant messaging user to a system initial time, and a time range from a relation time of the instant messaging account and its currently-related instant messaging user to a current time.

[0215] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the system (that is, an instant messaging account in the system), and a step of creating the instant messaging account is further included in this case. 2. The instant messaging account is an instant messaging account of instant messaging software provided by a third party. The system herein is a management System used in an enterprise, an institution or the like. The instant messaging application in the system is only a part of the system, but not the absolute main part of the system.

[0216] S132: the content within the permission time range of the instant messaging account in the instant messaging account being operated by ail rôles, users, and employées using the instant messaging account. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0217] Further, the rôles, users and employées corresponding to the instant messaging account can and are only allowed to operate the content within the permission time range (or the permission time range of the instant messaging account) in the instant messaging account.

[0218] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of 5 the rôle is unique under the department, and the number of the rôle is unique in the system.

[0219] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the 10 user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0220] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0221] [Embodiment 15] A method for setting an operation time range of instant messaging content in a system includes the following steps. S141: selecting a rôle, a user or an employée as a supervisor.

[0222] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one 20 or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0223] When the user is transferred across the departments, the user's relation to the 25 rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0224] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0225] S142: setting one or more supervisées for each supervisor, wherein the 5 supervisée is a rôle, a user or an employée.

[0226] S143: setting a permission time range for each supervisor, wherein the permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time 10 length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a system initial time, a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a system initial time, and a time range from a relation time of the 15 instant messaging user and his/her currently-related instant messaging account to a current time.

[0227] Each supervisor opérâtes the content within the permission time range of the supervisor in an instant messaging account used by the corresponding supervisée. The operation herein specifically includes one or more types of viewing data/content, and 20 deleting data/content.

[0228] Further, each supervisor can and is only allowed to operate the content within the permission time range of the supervisor in the instant messaging account used by the corresponding supervisée.

[0229] When the supervisée is a rôle, the instant messaging account used by the 25 supervisée includes an instant messaging account related to the rôle; when the supervisée is a user, the instant messaging account used by the supervisée includes an instant messaging account related to the user, an instant messaging account related to an employée corresponding to the user, and an instant messaging account related to a rôle which is related to the user; when the supervisée is an employée, the instant messaging account used by the supervisée includes an instant messaging account related to the employée, an instant messaging account related to a user corresponding to the employée, and an instant messaging account related to a rôle which is related to the user corresponding to the employée.

[0230] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the system (that is, an instant messaging account in the system), and a step of creating the instant messaging account is further included in this case. 2. The instant messaging account is an instant messaging account of instant messaging software provided by a third party. The system herein is a management System used in an enterprise, an institution or the like. The instant messaging application in the system is only a part of the system, but not the absolute main part of the system.

[0231] [Embodiment 16] A method for setting an operation time range of instant messaging content in a system includes the following steps. S151 : selecting a rôle, a user or an employée as a supervisée.

[0232] The rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles. The user obtains the permissions of the related rôle. When or after a rôle is created, a department is selected for the rôle, and therefore the rôle belongs to the department. The rôle is authorized according to the work content of the rôle; the name of the rôle is unique under the department, and the number of the rôle is unique in the system.

[0233] When the user is transferred across the departments, the user's relation to the rôle in the original department is canceled, and the user is related to a rôle in a new department. After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0234] One employée corresponds to one user, one user corresponds to one employée, and an employée détermines (obtains) the permissions through a rôle related to his/her corresponding user.

[0235] SI52: setting a permission time range for each supervisée, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a system initial time, a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a system initial time, and a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a current time.

[0236] Ail supervisors corresponding to each supervisée operate the content within the permission time range of the supervisée in an instant messaging account used by the supervisée. The operation herein specifically includes one or more types of viewing data/content, and deleting data/content.

[0237] Further, ail the supervisors corresponding to each supervisée can and are only allowed to operate the content within the permission time range of the supervisée in the instant messaging account used by the supervisée.

[0238] When the supervisée is a rôle, the instant messaging account used by the supervisée includes an instant messaging account related to the rôle; when the supervisée is a user, the instant messaging account used by the supervisée includes an instant messaging account related to the user, an instant messaging account related to an employée corresponding to the user, and an instant messaging account related to a rôle which is related to the user; when the supervisée is an employée, the instant messaging account used by the supervisée includes an instant messaging account related to the employée, an instant messaging account related to a user corresponding to the employée, and an instant messaging account related to a rôle which is related to the user corresponding to the employée.

[0239] The source of the instant messaging account includes one or two of the following two types: 1. The instant messaging account is an instant messaging account of an instant messaging application (software) in the System (that is, an instant messaging account in the system), and a step of creating the instant messaging account is further 5 included in this case. 2. The instant messaging account is an instant messaging account of instant messaging software provided by a third part/. The system herein is a management system used in an enterprise, an institution or the like. The instant messaging application in the system is only a part of the system, but not the absolute main part of the system.

[0240] The above is only a preferred embodiment of the présent invention, and it 10 should be understood that the présent invention is not limited to the forms disclosed herein, and is not to be construed as being limited to the other embodiments, but may be used in various other combinations, modifications and environments. Modification can be made by the techniques or knowledge of the above teachings or related art within the scope of the teachings herein. Ail changes and modifications made by those skilled in the art without 15 departing from the spirit and scope of the présent invention are intended to be within the protection scope of the appended claims.

Claims (18)

1. A method for setting an operation time range of mailbox content in a system, comprising:

5 selecting a rôle, a user or an employée as a mailbox user;

setting a permission time range for each mailbox user, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline 10 to a system initial time, and a time range from a start time to a deadline; and the content within the permission time range of the mailbox user in a mailbox account used by the mailbox user being operated by said mailbox user.

2. The method for setting an operation time range of mailbox content in a system according to claim 1, wherein said rôle is an independent individual not a group/a class, and 15 during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles.

3. A method for setting an operation time range of mailbox content in a system, comprising:

setting a permission time range for a mailbox account, wherein said permission time 20 range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a System initial time, and a time range from a start time to a deadline; and the content within the permission time range of the mailbox account in the mailbox 25 account being operated by ail rôles, users and employées using the mailbox account.

4. A method for setting an operation time range of mailbox content in a system, comprising:

selecting a rôle, a user, or an employée as a supervisor;

setting one or more supervisées for each supervisor, wherein said supervisée is a rôle, a user or an employée;

setting a permission time range for each supervisor, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a System initial time, and a time range from a start time to a deadline; and the content within the permission time range of the supervisor in a mailbox account used by the corresponding supervisée being operated by each supervisor.

5. A method for setting an operation time range of mailbox content in a system, comprising:

selecting a rôle, a user, or an employée as a supervisée;

setting a permission time range for each supervisée, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline; and the content within the permission time range of the supervisée in a mailbox account used by the supervisée being operated by all supervisors corresponding to each supervisée.

6. A method for setting an operation time range of mailbox content in a system, comprising:

selecting a rôle, a user, or an employée as a mailbox user;

setting a permission time range for each mailbox user, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time ofthe mailbox user and his/her currently-related mailbox account for a fixed time length, to a system initial time, a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a system initial time, and a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a current time;

5 and the content within the permission time range of the mailbox user in a mailbox account used by the mailbox user being operated by said mailbox user.

7. A method for setting an operation time range of mailbox content in a system, comprising:

10 setting a permission time range for a mailbox account, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the mailbox account and its currently-related mailbox user for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the

15 mailbox account and its currently-related mailbox user for a fixed time length, to a system initial time, a time range from a relation time of the mailbox account and its currently-related mailbox user to a system initial time, and a time range from a relation time of the mailbox account and its currently-related mailbox user to a current time; and the content within the permission time range of the mailbox account in the mailbox 20 account being operated by ail rôles, users and employées using the mailbox account.

8. A method for setting an operation time range of mailbox content in a system, comprising:

selecting a rôle, a user or an employée as a supervisor;

setting one or more supervisées for each supervisor, wherein said supervisée is a rôle, 25 a user or an employée;

setting a permission time range for each supervisor, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a system initial time, a time range from a relation time of the mailbox user and his/her 5 currently-related mailbox account to a system initial time, and a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a current time; and the content within the permission time range of the supervisor in a mailbox account used by the corresponding supervisée being operated by each supervisor.

10

9. A method for setting an operation time range of mailbox content in a system, comprising:

selecting a rôle, a user or an employée as a supervisée;

setting a permission time range for each supervisée, wherein said permission time range comprises one or more of the following four types: a time range from a time point, 15 which is determined by going backwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the mailbox user and his/her currently-related mailbox account for a fixed time length, to a system initial time, a time range from a relation time of the mailbox user and his/her 20 currently-related mailbox account to a system initial time, and a time range from a relation time of the mailbox user and his/her currently-related mailbox account to a current time; and the content within the permission time range of the supervisée in a mailbox account used by the supervisée being operated by ail supervisors corresponding to each supervisée.

25

10. A method for setting an operation time range of instant messaging content in a system, comprising:

selecting a rôle, a user or an employée as an instant messaging user;

setting a permission time range for each instant messaging user, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a

5 deadline; and the content within the permission time range of the instant messaging user in an instant messaging account used by the instant messaging user being operated by said instant messaging user.

11. The method for setting an operation time range of instant messaging content in a

10 system according to claim 10, wherein said rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles.

12. A method for setting an operation time range of instant messaging content in a system, comprising:

15 setting a permission time range for an instant messaging account, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a

20 deadline; and the content within the permission time range of the instant messaging account in the instant messaging account being operated by ail rôles, users and employées using the instant messaging account.

13. A method for setting an operation time range of instant messaging content in a

25 system, comprising:

selecting a rôle, a user or an employée as a supervisor;

set ting one or more supervisées for each supervisor, wherein said supervisée is a rôle, a user or an employée;

setting a permission time range for each supervisor, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline

5 to a System initial time, and a time range from a start time to a deadline; and the content within the permission time range of the supervisor in an instant messaging account used by the corresponding supervisée being operated by each supervisor.

14. A method for setting an operation time range of instant messaging content in a system, comprising:

10 selecting a rôle, a user or an employée as a supervisée;

setting a permission time range for each supervisée, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline

15 to a system initial time, and a time range from a start time to a deadline; and the content within the permission time range of the supervisée in an instant messaging account used by the supervisée being operated by ail supervisors corresponding to each supervisée.

15. A method for setting an operation time range of instant messaging content in a

20 system, comprising:

selecting a rôle, a user or an employée as an instant messaging user;

setting a permission time range for each instant messaging user, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the

25 instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a system initial time, a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a system initial time, and a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a current time; and the content within the permission time range of the instant messaging user in an instant messaging account used by the instant messaging user being operated by said instant messaging user.

16. A method for setting an operation time range of instant messaging content in a system, comprising:

setting a permission time range for an instant messaging account, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the instant messaging account and its currently-related instant messaging user for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation time of the instant messaging account and its currently-related instant messaging user for a fixed time length, to a system initial time, a time range from a relation time of the instant messaging account and its currently-related instant messaging user to a system initial time, and a time range from a relation time of the instant messaging account and its currently-related instant messaging user to a current time; and the content within the permission time range of the instant messaging account in the instant messaging account being operated by ail rôles, users, and employées using the instant messaging account.

17. A method for setting an operation time range of instant messaging content in a system, comprising:

selecting a rôle, a user or an employée as a supervisor;

setting one or more supervisées for each supervisor, wherein said supervisée is a rôle, a user or an employée;

setting a permission time range for each supervisor, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation

5 time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a system initial time, a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a system initial time, and a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a current time; and

10 the content within the permission time range of the superviser in an instant messaging account used by the corresponding supervisée being operated by each superviser.

18. A method for setting an operation time range of instant messaging content in a system, comprising:

selecting a rôle, a user or an employée as a supervisée;

15 setting a permission time range for each supervisée, wherein said permission time range comprises one or more of the following four types: a time range from a time point, which is determined by going backwards from a relation time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a current time, a time range from a time point, which is determined by going forwards from a relation

20 time of the instant messaging user and his/her currently-related instant messaging account for a fixed time length, to a system initial time, a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a system initial time, and a time range from a relation time of the instant messaging user and his/her currently-related instant messaging account to a current time; and

25 the content within the permission time range of the supervisée in an instant messaging account used by the supervisée being operated by ail supervisors corresponding to each supervisée.