OA19402A - Column value-based separate authorization method for statistical list operations. - Google Patents

Abstract

Disclosed is a column value-based separate authorization method for statistical list operations, said method comprising a step of authorizing a statistical list operation and a step of selecting a grantee, said step of authorizing a statistical list operation comprising the following steps: SI: selecting a statistical list needing authorization; S2: selecting a column needing authorization in the statistical list, the selected column being a column determined by selection or determined automatically; S3: authorizing the operation for statistical data corresponding to all the column values in the selected column. The present invention enables separate authorization of the operation permissions for the statistical data in the statistical list according to the column values; one statistical list can meet different actual usage requirements after the authorization of different statistical data operation permissions. Thus, the present invention is able to control the statistical data of the statistical list more strictly, improving the precision of management, meeting the usage requirements of enterprises and institutions in actual operations.

Description

[0058] The following describes technical solutions of the présent invention in further 15 detail with reference to accompanying drawings, but the protection scope of the présent invention is not limited to the following.

[0059] [Embodiment 1] A column value-based separate authorization method for statistical list operations, comprising a step of authorizing a statistical list operation and a step of selecting a grantee, where the order between the step of authorizing a statistical list 20 operation and the step of selecting a grantee is not limited. The authorized operation is viewing.

[0060] The step of authorizing a statistical list operations, comprising the following steps: SI: selecting a statistical list needing authorization; S2: selecting a column needing authorization in the statistical list, wherein the column value in the selected column is determined by sélection (for example, the column values in a column named customer sector in a customer statistical list include manufacturing, finance, aviation, and other options. Such column values are not manually input, but are determined by sélection. For another example, the column values in the columns such as customer city, department in charge of customer, and the like are also determined by sélection) or determined automatically (for example, the column values in the columns named creator, recorder, form préparation rôle, form préparer, and the like in the statistical list are automatically determined according to relevant rules); and S3: authorizing an operation for statistical data corresponding to each of column values in the selected column, wherein in the step of selecting a grantee, one or more grantees are selected. The grantee may be an employée, a user, a rôle having a group/class in nature, a rôle having an independent individual nature, or the like.

[0061] This embodiment enables separate authorization of the operation permissions for statistical data in the statistical list according to the column values. One statistical list can meet different actual usage requirements after the authorization of different statistical data operation permissions, thereby controlling the statistical data of the statistical list more meticulously, greatly improving the fine-tuning of management, and meeting the usage requirements of enterprises and institutions in actual operations.

[0062] For example, for a Statistical list of sales contracts, column names in the statistical list include signing department, quantity of signed contracts, amount of signed contracts, amount of received payments, quantity of orders, and quantity of shipped products. The column values in the column named signing department include sales department I, sales department II, and sales department III. If sales contracts statistical data of entire sales department needs to be provided to a chief sales officer Zhang San, Zhang San may be selected as a grantee, statistical list of sales contracts may be selected as a statistical list, and signing department may be selected as a column name, and the grantee is set to: hâve a permission to view the statistical data in the column in which the column value is sales department I, sales department II, and sales department III.

[0063] As shown in FIG. 5, if sales contracts statistical data of only sales department II needs to be provided to the manager of sales department II, the manager Li Er of sales department II may be selected as a grantee, statistical list of sales contracts may be selected as a statistical list, and signing department may be selected as a column name, and the grantee is set to: hâve a permission to view the statistical data in the column in which the column value is sales department IL

[0064] In this embodiment, statistical data corresponding to a column value not authorized for viewing is displayed in one or more of the following manners: (1) as shown in FIG. 6, displaying the column value, but hiding the statistical data corresponding to the column value by using a hidden character; and (2) as shown in FIG. 7, neither the column value nor the statistical data corresponding to the column value is displayed (neither is displayed may also be expressed as none is displayed. For example, in FIG. 7, none of the statistical data identified by is displayed. That is, the row is not displayed or disappears).

[0065] [Embodiment 2] When only one grantee is selected and when the statistical list needing authorization and the column needing authorization in the statistical list are selected, status of a permission previously authorized for the grantee to operate statistical data corresponding to each column value in the column in the statistical list is displayed (as shown in FIG. 8, Li Er is previously authorized to view the statistical data corresponding to the column values sales department I, sales department Π, and sales department III in the column named signing department of statistical list of sales contracts).

[0066] [Embodiment 3] When two or more grantees are selected and when the statistical list needing authorization and the column needing authorization in the statistical list are selected, status of a permission authorized for the grantee to operate statistical data corresponding to each column value in the column in the statistical list is not displayed (as shown in FIG. 9).

[0067] [Embodiment 4] As shown in FIG. 10, when only one grantee is selected and when the statistical list needing authorization and the column needing authorization in the statistical list are selected, an operator who last authorizes the column in the statistical list for the grantee and time of such authorization are displayed.

[0068] By displaying the last operator, authorization errors are more traceable and accountable. By displaying the last operation time, it is more convenient to intuitively détermine whether the operation on the column of the statistical list needs to be re-authorized.

[0069] For example, at 11:00 on May 21, 2015, Li Si last authorized a grantee Zhang San to view the statistical data of Statistical list of sales contracts and signing department. When the selected grantee is Zhang San, the statistical list selected for authorization is sales results statistical list, and the column selected for authorization is signing department, an authorizer can see that at 11:00 on May 21, 2015, Li Si last authorized Zhang San to view the signing department in the sales results statistical list.

[0070] If Zhang San is not entitled to view the statistical data of sales contracts of the sales department IV but the last authorization enables Zhang San to view the statistical data of sales contracts of the sales department IV, the last authorizer can be searched out as a responsibility taker in the subséquent process of investigating responsibility.

[0071] For another example, an authorizer needs to authorize 100 grantees to operate a statistical list, but complétés the authorization operations for only 70 grantees in a day. When the authorizer continues to perform authorization operations the next day, the authorizer may détermine, by checking the time at which each grantee was last authorized, whether the grantee needs to be authorized. The authorizer may also designate an authorization time interval, and search out ail grantees who are authorized in the designated time interval. By checking the last time of authorizing the grantee, the authorizer can fmd how long the permission of the grantee has remained unchanged, thereby helping to intuitively détermine whether the grantee needs to be re-authorized.

[0072] [Embodiment 5] The column value-based separate authorization method for statistical list operations further comprising a step of authorizing a template, specifically including: (1) selecting a grantee, a statistical list needing authorization, and a column needing authorization: selecting one or more grantees, selecting one statistical list needing authorization, and from the selected statistical list, selecting a column needing authorization; (2) authorizing the grantee: selecting an existing authorized grantee or a created template as an authorization template, and granting an operation permission for statistical data corresponding to each column value in the column in the statistical list of the authorization template to the grantee; and (3) performing a save operation after modification or no modification to obtain the operation permission for the grantee to operate the statistical data corresponding to each column value in the column in the statistical list.

[0073] For example, as shown in FIG. 11, Zhang San's operation permissions for the statistical data corresponding to each column value in the signing department column in the statistical list of sales contracts are used as an authorization template for authorizing Li Er.

[0074] This method enables sélection of multiple grantees simultaneously for being authorized in batches, thereby improving authorization efficiency. In addition, the method supports template authorization. That is, an existing authorized grantee or a created template is selected as an authorization template. The permissions to operate the column in the statistical list of the authorization template are directly granted to (updated for) the grantee (and saved after being simply modified). The authorization operation is simple and efficient. By combining the two manners, efficiency of authorizing operations for the statistical list in the system is improved greatly.

[0075] [Embodiment 6] A column value-based separate authorization method for statistical list operations, comprising a step of authorizing a statistical list operation and a step of selecting a grantee, wherein the order between the step of authorizing a statistical list operation and the step of selecting a grantee is not limited. The step of authorizing a statistical list operation includes the following steps: S1 : selecting a statistical list needing authorization; S2: selecting a column needing authorization in the statistical list, wherein the selected column is a column determined by sélection or determined automatically; and S3 : authorizing an operation according to statistical data corresponding to each of column values in the selected column, wherein the authorization process comprising a step of authorizing an operation for statistical data as a whole corresponding to a null column value in the selected column.

[0076] In the step of selecting a grantee, one or more grantees are selected. The grantee may be an employée, a user, a rôle having a group/class nature, a rôle having an independent individual nature, or the like.

[0077] As shown in FIG. 5, FIG. 8 to FIG. 11, the présent invention enables effective uniform authorization for the statistical data in a column in which a column value is null. The authorization operation is convenient, and the authorization workload is small. The column value is null means that the content in the column is null (not filled or not selected). For example, the signing department is left blank when a new contract is added (because the signing department may be a non-mandatory field, and the contract can be submitted without sélection of such field), or the contract is attributed to a part-time salesperson of the company. In this case, it is impracticable to authorize operations for such statistical data through the column name signing department. Such data is classified as data whose column value in the signing department is null, by selecting the null option, operations on the statistical results of such data are authorized uniformly, thereby facilitating authorization operations.

[0078] [Embodiment 7] A column value-based separate authorization method for statistical list operations, comprising a step of authorizing a statistical list operation and a step of selecting a grantee, wherein the order between the step of authorizing a statistical list operation and the step of selecting a grantee is not limited. The step of authorizing a statistical list operation includes the following steps: SI : selecting a statistical list needing authorization; S2: selecting a column needing authorization in the statistical list, wherein the selected column is a column determined by sélection or determined automatically; and S3 : authorizing an operation according to statistical data corresponding to each of column values in the selected column, wherein the authorization process comprising a step of authorizing an operation for statistical data as a whole corresponding to all column values in the selected column, and such all column values include a null column value.

[0079] In the step of selecting a grantee, one or more grantees are selected. The grantee may be an employée, a user, a rôle having a group/class nature, a rôle having an independent individual nature, or the like.

[0080] As shown in FIG. 5, FIG. 8 to FIG. 11, the present invention enables authorization of operations on the statistical data of all column values in the selected column as a whole. The authorization operation is simple and efficient, and is particularly suitable when the statistical data operation permission is the same for all column values in a column. For example, regardless of the column value in the signing department column, the statistical data operation permission is the same and unrestricted. In this case, the authorizer may directly select the unrestricted option under this operation permission, indicating that the statistical data corresponding to all column values is controlled by this operation permission. The setting ofthe unrestricted function brings two additional advantages: First, the unrestricted option may be selected for authorizing company officers (such as a chief sales officer) who own all permissions. Secondly, once the unrestricted option is selected, even if more column values are added in the future, the permissions of the grantee remain unaffected (that is, operations on the statistical data corresponding to an added column value are also authorized) due to the sélection of unrestncted).

[0081] [Embodiment 8] A column value-based separate authorization method for statistical list operations, comprising a step of authorizing a statistical list operation and a step of selecting a grantee. The step of authorizing a statistical list operation includes the following steps: SI: selecting a statistical list needing authorization; S2: selecting a column needing authorization in the statistical list, wherein the selected column is a column determined by sélection or determined automatically; and S3: authorizing an operation for statistical data corresponding to each of column values in the selected column, wherein in the step of selecting a grantee, one or more grantees are selected, and the grantee is one or more rôles. As shown in FIG. 4, the rôle is an independent individual not a group/class. During the same period, one rôle can only be related to a unique user, while one user is related to one rôle or more rôles. Each rôle is authorized according to work content of the rôle, and the user obtains the permissions of the rôle related to the user.

[0082] In this embodiment, the grantee has a rôle of an independent individual nature. When an employée is resigned or transferred from a post, the operation permissions for the statistical list are handed over and updated simply by creating or canceling a relation between the user and rôle, thereby achieving seamless handover of the operation permissions, ensuring timely update of the user's operation permissions for the statistical list, avoiding hystérésis or omission of update of the operation permissions, avoiding impact on the normal operation of the enterprise, and avoiding the risk of leaking confidential information.

[0083] Résignation example: The user corresponding to an employée Zhang San is related to a rôle of production worker 1. When Zhang San is resigned, the system administrator (or the corresponding administrator) directly cancels the relation between the user corresponding to Zhang San and the rôle of production worker 1. Therefore, Zhang San automatically loses from the statistical list operation permissions corresponding to the rôle of production worker 1, thereby avoiding hystérésis of handover of the statistical list operation permissions, and preventing relevant confidential information from bemg leaked to Zhang San in the case that Zhang San still has the permission to view certain confidential information after résignation due to the hystérésis. When a new employée Li Si takes over Zhang San's work, the user corresponding to Li Si is directly related to production worker 1. In this way, Li Si automatically obtains the statistical list operation permissions corresponding to the rôle of production worker 1 , and it is not necessary to set the statistical list operation permissions for Li Si again, thereby simplifying and quickening the operations and greatly reducing the workload.

[0084] Job transfer example: An employée Zhang San needs to be transferred from the production department to the after-sales department. The system administrator (or the corresponding administrator) cancels the relation between the user corresponding to Zhang San and the original rôle of production worker 1 , and relates Zhang San to a new rôle of after-sales staff 3 of after-sales department, so that Zhang San automatically obtains the statistical list operation permissions corresponding to the rôle after-sales staff 3.

[0085] Further, if a department is selected for a rôle when or after the rôle is created, the rôle belongs to the department, the rôle is authorized according to the work content of the rôle, the name of the rôle is unique in the department, and the number of the rôle is unique in the system. When said user is transferred from a post, the user's relation to an original rôle is canceled, and the user is related to a new rôle.

[0086] If the user needs to be transferred from a post, the method further comprising a step of managing user transfer, specifically including: (1) canceling a relation between the user and an original rôle; and (2) relating the user to a new rôle to which the user is transferred, whereby the user automatically obtains statistical list operation permissions of the new rôle.

[0087] In the following, the advantages of the method for authorizing the user by using the rôle having the nature of an independent individual are analyzed: The user détermines (obtains) permissions through its relation to the rôle. If the permissions of the user need to be modified, the permissions owned by the rôle are adjusted to achieve the purpose of changing the permissions of the user related to the rôle. Once the user is related to the rôle, the user owns the statistical list operation permission of the rôle.

[0088] A rôle is in a one-to-one relation to a, user (when the rôle is related to a user, other users can no longer be related to the rôle; and if the rôle is not related to the user, the rôle can be related to other users). A user's relation to a rôle is one-to-many (one user can be related to multiple rôles at the same time).

[0089] Définition of a rôle: A rôle does not hâve the nature of a group/a class/a category/a post/a position/a type of work or the like, but has a non-collective nature. The rôle is unique and is an independent individual. Applied in an enterprise or an institution, the rôle is équivalent to a post number (the post number herein is not a post, and one post may hâve multiple employées at the same time, but one post number can only correspond to one employée during the same period).

[0090] For example, in a company System, the following rôles may be created: a general manager, a deputy general manager 1, a deputy general manager 2, a manager of Beijing sales department I, a manager of Beijing sales department II, a manager of Beijing sales department III, a Shanghai sales engineer 1, a Shanghai sales engineer 2, a Shanghai sales engineer 3, a Shanghai sales engineer 4, a Shanghai sales engineer 5, and so on. The relation of users to rôles is as follows: if Zhang San, the company's employée, serves as a deputy general manager 2 of the company and also serves as a manager of Beijing sales department I, the rôles to which Zhang San needs to be related are the deputy general manager 2 and the manager of Beijing sales department I, and Zhang San owns the permissions of the two rôles.

[0091] The concept of conventional rôles is a group/a class/a post/a position/a type of work in nature, and one rôle can correspond to multiple users. However, in the présent application, the concept of rôle is équivalent to a post number/work station number, and is also similar to the rôle in a film and télévision drama: one rôle in the same period (in childhood, juvénile, middle-age...) can be played by only one actor or actress, but one actor or actress may play multiple rôles respectively.

[0092] After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation of the user to another rôle may be created at any time.

[0093] The said system rôle is composed of: a post name + a post number. For example: rôles of a workshop worker 1, a workshop worker 2, a workshop worker 3, and the like each are an independent individual which is independent individuals, équivalent to the concept of a post number and a work station number, but is different from the rôle in the conventional permission management system. The concept of a rôle in the conventional rights management System is of a group or class nature such as a post, a position, a type of work or the like.

[0094] The following example shows the relationship between employées, users and rôles after the employée Zhang San enters a company: 1. Recruiting: after the employée is recruited, it can be done that he directly is related the rôle of the corresponding post number/station number for the user (employée), for example: Zhang San has joined the company (the company has assigned a user for Zhang San), the work content is responsible for the sale of refrigerator products in Beijing area, in the sale department I, (the corresponding rôle is the rôle of Sale Engineer 5 in the sale department I), then user Zhang Sans directly select the rôle of Sale Engineer 5 and the relation can be done.

[0095] 2. Adding position: After Zhang San has worked for a period of time, the company will further arrange Zhang San to be responsible for the sale of TV products m Beijing area (a corresponding rôle is sale engineer 8 under sale department I) and to also serve as a supervisor of an after-sale department (a corresponding rôle is after-sale department supervisor 1). In this case, two rôles, that is, sale engineer 8 under sale department I and after-sale department supervisor 1 under the after-sale department, are additionally related to the user Zhang San. In this case, the employée Zhang San is related to three rôles: sale engineer 5 and sale engineer 8 under sale department I, and after-sale department supervisor 1 under the after-sale department. Therefore, the user Zhang San has permissions of the three rôles.

[0096] 3. Reducing position: After a while, the company decided to let Zhang San serve as the post-sale manager (corresponding to a rôle after-sale manager under the aftersale department) and no longer take up other post. Then user Zhang San is related to the rôle of after-sale manager in the after-sale department 1, and cancels the three rôles previously related (sale engineer 5 and sale engineer 8 under sale department I, and after-sale department supervisor 1 under the sale department) at the same time. In this case, the user Zhang San only has the authority of the rôle of after-sales manager under the after-sales department.

[0097] 4. Adjustment of permission of rôle (for the adjustment of the permissions of the rôle itself): If the company décidés to add permission to the after-sale department manager, the permission only need to be added to the rôle of the after-sale department manager. With the increase in the permission of the rôle of the after-sale department manager, the permission of the user Zhang San are also increased.

[0098] 5. Resigning: After one year, Zhang San resigns, it is only necessary to cancel the relationship of the user Zhang San to the rôle after-sales manager under after-sales department.

[0099] For example, during dynamic operation of the company, recruiting and resigning of staff often occur continuously, but post numbers or work station numbers seldom change (or even remain unchanged within a period of time).

[0100] In the conventional authorization method: in the case of a large number of 5 system functions points, not only the authorization workload is large, complicated, but also easy to make mistakes, in the authorization with the conventional group/class rôle. Even if it is wrong, it is not easy to find in a short time. It is easy to cause damage to the system user.

[0101] In the authorization method according to the présent application, the rôle in the nature of a post number or work station number nature are authorized in the présent 10 application, and the users are related to the rôles so that permissions of the users are determined. Therefore, the permission of the users are controlled merely through a simple user-role relation. Such that the permission control is in a simple, easy to operate, clear, and explicit, thereby significantly improving efficiency and reliability of authorization.

[0102] The above is only a preferred embodiment of the présent invention. It should 15 be understood that the présent invention is not limited to the forms disclosed herein, and is not to be construed as the exclusion to the other embodiments, but may be used in various other combinations, modifications and environments. Modifications can be made according to the techniques or knowledge of the above teachings or related art within conceptive scope herein. Ail changes and modifications made by those skilled in the art are intended to be 20 within the scope of the appended claims.

Claims (10)

1. (1 ) displaying the column value, but hiding the statistical data corresponding to the column value by using a hidden character; and (2 ) displaying neither the column value nor the statistical data corresponding to the column value.

   1. A column value-based separate authorization method for statistical list operations, comprising a step of authorizing a statistical list operation and a step of selecting a grantee, wherein the order between the step of authorizing a statistical list operation and the step of selecting a grantee is not limited;

   the step of authorizing a statistical list operation comprises the following steps:

   SI : selecting a statistical list needing authorization;

   S2: selecting a column needing authorization in the statistical list, wherein the selected column is a column determined by sélection or determined automatically; and

   S3: authorizing an operation for statistical data corresponding to each of column values in the selected column, wherein in the step of selecting a grantee, one or more grantees are selected.
2. (2) authorizing the grantee: selecting an existing authorized grantee or a created template as an authorization template, and granting an operation permission for statistical data corresponding to each column value in the column in the statistical list of the authorization template to the grantee; and (3) performing a save operation after modification or no modification to obtain the operation permission for the grantee to operate the statistical data corresponding to each column value in the column in the statistical list.

   2. The column value-based separate authorization method for statistical list operations according to claim 1, wherein the authorized operation comprises viewing.
3. 3. The column value-based separate authorization method for statistical list operations according to claim 2, wherein statistical data corresponding to a column value not authorized for viewing is displayed in one or more of the following manners:
4. 4. The column value-based separate authorization method for statistical list operations according to claim 1, wherein when only one grantee is selected and when the statistical list needing authorization and the column needing authorization in the statistical list are selected, status of a permission previously authorized for the grantee to operate statistical data corresponding to each column value in the column in the statistical list is displayed.
5. 5. The column value-based separate authorization method for statistical list operations according to claim 1, wherein when two or more grantees are selected and when the statistical list needing authorization and the column needing authorization in the statistical list are selected, status of a permission authorized for the grantee to operate statistical data corresponding to each column value in the column in the statistical list is not displayed.
6. 6. The column value-based separate authorization method for statistical list operations according to claim 1, wherein when only one grantee is selected and when the statistical list needing authorization and the column needing authorization in the statistical list are selected, an operator who last authorizes the column in the statistical list for the grantee and time of such authorization are displayed.
7. 7. The column value-based separate authorization method for statistical list operations according to any one of claims 1 to 6, wherein the grantee is one or more rôles, each of the rôles is an independent individual not a group/class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles.
8. 8. The column value-based separate authorization method for statistical list operations according to claim 1, further comprising a step of authorizing a template, specifically comprising: (1) selecting a grantee, a statistical list needing authorization, and a column needing authorization: selecting one or more grantees, selecting one statistical list needing authorization, and from the selected statistical list, selecting a column needing authorization;
9. 9. A column value-based separate authorization method for statistical list operations, wherein comprising a step of authorizing a statistical list operation and a step of selecting a grantee, wherein the order between the step of authorizing a statistical list operation and the step of selecting a grantee is not limited;

   the step of authorizing a statistical list operation comprises the following steps:

   SI: selecting a statistical list needing authorization;

   S2: selecting a column needing authorization in the statistical list, wherein the selected column is a column determined by sélection or determined automatically; and

   S3: authorizing an operation according to statistical data corresponding to each of column values in the selected column, wherein the authorization process comprises a step of authorizing an operation for statistical data as a whole corresponding to a null column value in the selected column.
10. 10. A column value-based separate authorization method for statistical list operations, wherein comprising a step of authorizing a statistical list operation and a step of selecting a grantee, wherein the order between the step of authorizing a statistical list operation and the step of selecting a grantee is not limited;

    the step of authorizing a statistical list operation comprises the following steps:

    S1 : selecting a statistical list needing authorization;

    S2: selecting a column needing authorization in the statistical list, wherein the selected column is a column determined by sélection or determined automatically; and

    S3: authorizing an operation according to statistical data corresponding to each of column values in the selected column, wherein the authorization process comprises a step of authorizing an operation for statistical data as a whole corresponding to ail column values in 5 the selected column, and such ail column values comprise a null column value.