WO2019029500A1 - 基于列值对统计列表操作权限进行分别授权的方法 - Google Patents

基于列值对统计列表操作权限进行分别授权的方法 Download PDF

Info

Publication number
WO2019029500A1
WO2019029500A1 PCT/CN2018/099066 CN2018099066W WO2019029500A1 WO 2019029500 A1 WO2019029500 A1 WO 2019029500A1 CN 2018099066 W CN2018099066 W CN 2018099066W WO 2019029500 A1 WO2019029500 A1 WO 2019029500A1
Authority
WO
WIPO (PCT)
Prior art keywords
column
statistical
authorized
list
authorization
Prior art date
Application number
PCT/CN2018/099066
Other languages
English (en)
French (fr)
Inventor
陈达志
Original Assignee
成都牵牛草信息技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 成都牵牛草信息技术有限公司 filed Critical 成都牵牛草信息技术有限公司
Priority to AU2018314916A priority Critical patent/AU2018314916A1/en
Priority to US16/636,879 priority patent/US11232226B2/en
Priority to KR1020207006540A priority patent/KR20200032222A/ko
Priority to BR112020002586-0A priority patent/BR112020002586A2/pt
Priority to EP18845196.7A priority patent/EP3667539A4/en
Priority to PE2020000194A priority patent/PE20200670A1/es
Priority to JP2020505857A priority patent/JP7231911B2/ja
Priority to MX2020001459A priority patent/MX2020001459A/es
Publication of WO2019029500A1 publication Critical patent/WO2019029500A1/zh
Priority to PH12020500209A priority patent/PH12020500209A1/en
Priority to CONC2020/0001275A priority patent/CO2020001275A2/es

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6227—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/604—Tools and structures for managing or administering access control systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00—Administration; Management
    • G06Q10/06—Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
    • G06Q10/063—Operations research, analysis or management
    • G06Q10/0631—Resource planning, allocation, distributing or scheduling for enterprises or organisations
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00—Administration; Management
    • G06Q10/10—Office automation; Time management
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices

Definitions

  • the invention relates to a method for authorizing a statistical list of management software such as ERP and CRM, in particular to a method for separately authorizing the operation rights of a statistical list based on column values.
  • the statistical list is different from the concept of the form: (1)
  • the form authorization mainly expresses the addition, deletion and modification of the data/form data in the database, and the statistical list does not modify the data/form data in the database, but only according to a certain demand method.
  • the data in the database is queried; (2) the form expresses a business object, such as an order, a contract, a customer, etc.
  • Each form data corresponds to a unique business object, for example, the 001 customer in the customer form represents A unique customer 001 (customer 001 is a form data/object); and a statistical list is generally a statistic of one or more forms according to a certain demand method.
  • a row of data in the statistical list is not a business object, but a
  • the statistical results for example, the sales contract is calculated according to the signing department.
  • the statistics of each line express the statistics of all the sales contracts that the signing department is responsible for, which may include the statistics of the number of signed contracts, the statistics of the contract amount, and the statistics of the amount of the return. , statistics on the number of orders, and so on.
  • the general software system has the display and view function of the statistical list.
  • the column names in the statistics list include the signing department, the number of signings, the amount of the signing, the amount of the return, the number of orders, the quantity shipped, and the sales department has a sales value of one. Sales of two, sales of three, and so on.
  • the traditional authorization method cannot validate the authority of the statistics with the null value.
  • the so-called "column value is null” means that the column content is empty (not filled or not selected), and there is a large limitation in the use.
  • the signing department is not filled out (because the signing department may be a non-required field), or the contract is from the company's part-time salesman, so that it is impossible to authorize such statistics by listing the “signing department”.
  • Authorization if you need to authorize the authorization of these statistics, you must authorize each statistic one by one, the authorization workload is large and error-prone.
  • Role-based access control is one of the most researched and matured database rights management mechanisms in recent years. It is considered to be an ideal candidate to replace traditional mandatory access control (MAC) and autonomous access control (DAC). Traditional autonomous access control has high flexibility but low security. Forced access control is highly secure but too restrictive. Role-based access control combines both ease of management and reduces the complexity, cost, and probability of errors. Therefore, it has been greatly developed in recent years.
  • the basic idea of role-based access control (RBAC) is to divide different roles according to different functional positions in the enterprise organization view, encapsulate the access rights of database resources in roles, and indirectly access database resources by being assigned different roles.
  • the role-based permission control mechanism can manage the access rights of the system simply and efficiently, which greatly reduces the burden and cost of the system rights management, and makes the system rights management more in line with the business management specifications of the application system.
  • the traditional role-based user rights management adopts the "role-to-user one-to-many” association mechanism, and the "role” is group/class nature, that is, one role can simultaneously correspond to/associate multiple users, and the role is similar to the post/
  • the concept of position/work type the authorization of user rights under this association mechanism is basically divided into the following three forms: 1.
  • the role (class/group/post/work type) is authorized (a role can be associated with multiple users), the user obtains the permission through the role, and the authority authority is the group/class nature role; As shown in Figure 3, the above two methods are combined.
  • both 2 and 3 need to authorize the role of the class/group nature, and the way of authorization through the role of class/group/post/work type has the following disadvantages: 1.
  • the above two processing methods not only require a long time for the role authorization in the case of a large number of role permissions, but also are easy to make mistakes, the user is cumbersome and troublesome to operate, and is also prone to errors resulting in loss to the system user.
  • the employee/user's form operation permissions change either the employee/user is removed from the role or the role is added to meet the job requirements.
  • the defect of the first method is the same as the above-mentioned "direct authorization to the user" method.
  • the new role involves the creation, association, and authorization of the role. Especially in the case of a large number of roles and a large number of users associated with the role, it is difficult to remember which users are associated with the role.
  • the object of the present invention is to overcome the deficiencies of the prior art, and provide a method for separately authorizing the statistical list operation authority based on the column value, which can more strictly control the statistics of the statistical list, greatly improve the fineness of management, and satisfy the enterprise.
  • a method for separately authorizing statistical list operation rights based on column values including a statistical list operation authority authorization step and a step of selecting an authorized person, and a statistics list operation authority authorization step
  • the step of selecting the authorized person is in no particular order
  • the statistical list operation authority authorization step includes the following steps: S1: selecting a statistical list that needs to be authorized; S2: selecting a column in the statistical list that needs to be authorized, selected The column should be a column whose value is selected or automatically determined; S3: the operation authority is authorized according to the statistical data corresponding to all column values of the selected column; and one or more of the steps of selecting the authorized person are selected Authorized person.
  • the operation authority includes a view; the selection of the "selected column should be a column whose column value is selected or automatically determined” is determined or automatically determined.
  • the column value is a selection determination (such as a customer).
  • the column values of the customer industry in the statistics list are optional for manufacturing, finance, aviation, etc. These column values are not manually filled in, but are obtained through selection methods, such as the city where the customer is located, the responsible department, the person in charge of the customer,
  • the column value of the column responsible for the role is also determined by the customer or automatically determined (such as the creator of the list, the orderer, the order role, the order user, the orderer, etc.). These column values are automatically based on the relevant rules. definite.
  • the display manner includes one or more of the following: (1) display the column value, but hide the statistical data corresponding to the column value with a hidden character; (2) The column value and the statistics corresponding to the column value are not displayed.
  • the previous authorized person displays the value of the column in the column in the statistical list.
  • the authorization status of the operation authority of the corresponding statistics is a statistical list that has one and only one, and needs to be authorized, and the column that needs to be authorized in the statistical list is selected.
  • the authorized person When the authorized person selects two or more, and the statistical list that needs to be authorized, and the column that needs to be authorized in the statistical list is selected, the authorized person does not display the column of the column in the statistical list.
  • the authorization status of the operation authority of the statistical data corresponding to the value.
  • the authorized person is one or more roles, and the roles are independent individuals, not groups/classes, and one role can only associate with a unique user in the same period, and one user associates one or more roles.
  • the method for separately authorizing the statistics list operation authority based on the column value includes a template authorization step, which includes: (1) selecting an authorized person, a statistical list requiring authorization, and a column requiring authorization: selecting one or more The authorized person selects a statistical list that needs to be authorized, selects a column that needs to be authorized from the selected statistical list, and (2) authorizes the authorized person: select an existing authorized person or created a template as Authorization template, the operation list of the authorization template of the authorization template is assigned to the authorized person according to the operation authority of the statistical data of each column value; (3) the modification is performed or not, and the authorized person is saved to the column of the column for the statistical list.
  • the value corresponds to the operational authority of the statistics.
  • the method for separately authorizing the statistical list operation authority based on the column value includes a statistical list operation authority authorization step and a step of selecting the authorized person, the statistical list operation authority authorization step and the step of selecting the authorized person are in no particular order;
  • the statistical list operation authority authorization step includes the following steps: S1: selecting a statistical list that needs to be authorized; S2: selecting a column in the statistical list that needs to be authorized, and the selected column should be a column value selected for selection or automatically determined. Columns; S3: Authorize the operation authority according to the statistical data corresponding to all the column values of the selected column, and the authorization process includes a step of authorizing the operation authority for the statistics of the selected column whose column value is null.
  • the method for separately authorizing the statistical list operation authority based on the column value includes a statistical list operation authority authorization step and a step of selecting the authorized person, the statistical list operation authority authorization step and the step of selecting the authorized person are in no particular order;
  • the statistical list operation authority authorization step includes the following steps: S1: selecting a statistical list that needs to be authorized; S2: selecting a column in the statistical list that needs to be authorized, and the selected column should be a column value selected for selection or automatically determined.
  • the invention has the following advantages: 1) The invention can separately authorize the operation authority of the statistical data in the statistical list according to the column value, and a statistical list can satisfy different actual use requirements after performing different statistical data operation authority authorization. More rigorous control of statistical list statistics greatly improves the fineness of management and meets the needs of enterprises and institutions in actual operation.
  • the column names in the statistics list include the signing department, the number of signings, the amount of the signing, the amount of the return, the number of orders, the quantity shipped, and the sales department has a sales value of one. Sales of two, sales of three, and so on. If you need to provide sales directors with sales contract statistics for the entire sales department, you can choose the sales director as the authorized person, and set the authority as: the statistics of the signing department are sales, sales, sales, sales, etc. The data has view permissions. If you only need to provide the sales manager's sales contract statistics to the sales manager, you can choose to sell the second manager as the licensee, and set the authority to: view only the statistics of the signing department's column value for the sales department. Permissions.
  • Zhang San should not view the sales statistics of the four sales contracts, and the last time he authorized Zhang San, Zhang San has the right to view the statistics of the sales of the four sales contracts. In the process of subsequent accountability, you can find the nearest Authorize the operator once to find the responsible person.
  • an operator needs to authorize the operation authority of the statistical list for 100 authorized persons, but the operator only completes the authorization of 70 authorized persons on the same day, and when the operator continues to authorize the next day, Whether the authorized person needs authorization is determined by looking at the last authorized time of each authorized person. It is also possible to search through the authorized time interval for all authorized persons authorized within the specified time interval. By looking at the authorized person's last authorized time, it is possible to know how long the authorized person's authority has not changed, which is helpful for visually determining whether it is necessary to re-authorize it.
  • the method can select multiple authorized persons to perform batch authorization at the same time, and the authorization efficiency is improved.
  • the method supports template authorization, that is, selecting an existing authorized person or created a template as an authorization template, and authorizing the authorization
  • the statistics list of the template directly grants (updates) the operation permission of the column to the authorized person (and then saves it after simple modification), and the authorization operation is simple and efficient.
  • the combination of the two methods greatly improves the authorization efficiency of the system statistics list operation authority.
  • the invention can effectively and uniformly authorize the statistical data with the null value of the column value, the authorization operation is convenient, and the authorization workload is small.
  • the so-called "column value is null value” means that the column content is empty (not filled or not selected).
  • the signing department is not filled in.
  • the signing department may be a non-required field, it can be submitted without making a selection. Contract), or the contract originated from the company's part-time salesman, so that it is impossible to authorize such statistics by listing the “signing department”.
  • Such data is classified as the data with the column value of the signing department. Select the "empty" item to perform unified authority authorization on the statistical results of such data, and the operation is convenient.
  • the invention can authorize the operation authority of all the statistical data of all the column values of the selected column, and the authorization operation is simple and efficient, and is particularly suitable for the case where the statistical data operation authority of each column value in the column is the same. For example, regardless of the column value in the department column, the statistics operation rights are the same and are not restricted, you can directly select the "unrestricted" item under the operation permission, indicating that the statistics corresponding to all column values are Operational authority.
  • the authorized person of the present invention can adopt the role of independent individual nature, and when the employee leaves the company and adjusts the post, the association/disassociation of the user and the role is realized, and the switching and updating of the statistical list operation authority is realized, and the operation authority can be realized. Seamless handover ensures that the user's statistical list operation authority is updated in a timely manner, and there is no lag or omission in the operation authority update, which will not affect the normal operation of the enterprise, and also avoid the risk of leakage of confidential information.
  • Example of resignation the user associated role of the employee Zhang San “production worker 1”.
  • the system administrator or the corresponding administrator directly cancels the association between the user corresponding to Zhang San and the role of “production worker 1”.
  • Zhang San automatically loses the corresponding operation of the statistical list operation permission of “production worker 1”, avoiding the lag of the transfer of the operation of the statistical list operation, so that Zhang San still has the right to view certain confidential information after leaving the company, resulting in the disclosure of relevant confidential information to Zhang San;
  • employee Li Si took over Zhang San’s work and directly asked Li Si’s user to associate “production worker 1”
  • Li Si automatically obtained the statistical list operation authority corresponding to the role of “production worker 1”, no need for Li Si.
  • Reset the statistics list operation permissions the operation is simple and fast, greatly reducing the workload.
  • Example of transfer The employee Zhang San should be transferred from the production department to the after-sales department.
  • the system administrator (or the corresponding administrator) cancels the association between the user corresponding to Zhang San and the original character “production worker 1”, and then links to the new after-sales department.
  • the role "after-sales service personnel 3", Zhang San automatically obtained the "status service personnel 3" role corresponding to the statistical list operation authority.
  • the role of the application is a one-to-one relationship to the user.
  • a role can only be associated with a unique user at the same time, and a user is associated with one or more roles.
  • the advantage of this is that as long as the user is associated with the role, the permission can be obtained. (ie, the user gains access to their associated role), and the role's permission changes are much less than the user permissions in the traditional mechanism.
  • the number of roles of the nature of the independent body (the nature of the post number/station number) is small. Although the employee turnover is large, the change of the post number/station number is small (even if there is no change in a certain period of time, that is, the role does not change), This will greatly simplify the user's rights management and reduce the overhead of the system.
  • Zhang San due to Zhang San’s resignation or transfer, Zhang San will no longer work as a “buyer 3”, and Zhang will cancel the association with “Purchaser 3”; Li Si will take over as “Purchaser”. 3"
  • the role of this role only need to associate Li Si with the role, then Li Si automatically obtained the "List of Buyers 3" role of the statistical list operation authority.
  • the traditional rights management mechanism defines the role as a group, a job type, a class, etc.
  • the role is a one-to-many relationship with the user.
  • the user's authority is often adjusted during the operation process. For example, when dealing with employee permission changes, the permissions of an employee associated with the role change. We cannot change the permissions of the entire role because of the change of the individual employee permissions, because the role is also associated with other employees whose permissions have not changed. . So in response to this situation, either create a new role to satisfy the employee whose permissions have changed, or directly authorize (disengage the role) from the employee based on the permission requirements.
  • the above two processing methods not only require a long time for the role authorization in the case of a large number of role permissions, but also are easy to make mistakes, the user is cumbersome and troublesome to operate, and is also prone to errors resulting in loss to the system user.
  • the role since the role is an independent individual, the role permission can be changed to achieve the goal.
  • the method of the present application seems to increase the workload when the system is initialized, it can be made by copying or the like to make the role or authorization more efficient than the traditional group/class nature, because the group/class role is not considered.
  • the application scheme will make the permission setting clear and clear; especially after the system is used for a period of time (the user/role authority changes dynamically), the application scheme can greatly improve the system usage for the system user.
  • the efficiency of the rights management makes the dynamic authorization simpler, more convenient, clearer and clearer, and improves the efficiency and reliability of the permission setting.
  • the traditional group/class role authorization method is error-prone, and the method of the present application greatly reduces the probability of authorization errors, because the method of the present application only needs to consider the role as an independent individual, without considering the traditional method to associate the role of the group. What are the commonalities of multiple users? Even if the authorization error occurs, it only affects the user associated with the role, while the traditional group-based role affects all users associated with the role. Even if a permission authorization error occurs, the correction method of the present application is simple and short, and the traditional group-type role needs to consider the commonality of all users associated with the role when correcting the error, and not only the modification when there are many function points. Troublesome, complicated, very error-prone, and in many cases only new roles can be created.
  • the method of the present application is as follows: the transferred user associates several roles.
  • the user When adjusting the post, the user is first unlinked from the role in the original department (the canceled roles can be re-associated to other users), and then Associate users with roles in the new department. The operation is simple and will not go wrong.
  • FIG. 1 is a schematic diagram of a manner in which a system directly authorizes a user in the background art
  • FIG. 2 is a schematic diagram of a manner in which a system authorizes a group/class role in the background art
  • FIG. 3 is a schematic diagram of a manner in which a system directly authorizes a user and authorizes a group/class role role in the background art
  • FIG. 4 is a schematic diagram of a manner in which a system authorizes a user through an independent individual role
  • Figure 5 is a schematic diagram of the selected licensee in one and the selected statistical list and column in the present invention.
  • FIG. 6 is a schematic diagram showing a display manner of a sales contract statistical list of the present invention.
  • FIG. 7 is a schematic diagram showing another display manner of a sales contract statistical list according to the present invention.
  • FIG. 9 is a schematic diagram of a plurality of selected authorized persons in the present invention and a selected statistical list and columns;
  • Figure 10 is a schematic diagram showing the most recent authorized operator and operation time of the present invention.
  • FIG. 11 is a schematic diagram of an authorization template used for authorization by an authorized person in the present invention.
  • Embodiment 1 A method for separately authorizing a statistical list operation authority based on a column value, including a statistical list operation authority authorization step and a step of selecting an authorized person, a statistical list operation authority authorization step, and a step sequence of selecting an authorized person In no particular order; the operational authority described is for viewing.
  • the statistical list operation authority authorization step includes the following steps: S1: selecting a statistical list that needs to be authorized; S2: selecting a column in the statistical list that needs to be authorized, and the selected column should be a column value selection selection (such as a customer)
  • S1 selecting a statistical list that needs to be authorized
  • S2 selecting a column in the statistical list that needs to be authorized, and the selected column should be a column value selection selection (such as a customer)
  • the column names listed in the statistics list are available in the manufacturing, finance, aviation and other industries. These column values are not manually filled in, but are selected, and are also listed in the column corresponding to the customer's city, responsible department, etc.
  • the value is also determined by the selection or automatically determined (such as the list of the creator of the statistical list, the orderer, the order role, the lister, etc., the column values of these column names are automatically determined according to the relevant rules); S3: according to The statistic data corresponding to all column values of the selected column is authorized for operation authority; and the one or more authorized persons are selected in the step of selecting the authorized person, the authorized person may be an employee, a user, a group/class nature role, Independent individual nature roles, etc.
  • the operation authority of the statistical data in the statistics list can be separately authorized according to the column value, and a statistical list can satisfy different actual usage requirements after performing different statistical data operation authority authorization, and can more strictly control the statistics of the statistical list.
  • the control greatly improves the fineness of management and meets the needs of the actual operation of enterprises and institutions.
  • the column names in the statistics list include the signing department, the number of the signing, the amount of the signing, the amount of the repayment, the number of orders, the quantity shipped, and the column name corresponding to the signing department has Sales one, sales two, sales three. If you need to provide the sales director's sales contract statistics to the sales director Zhang San, you can choose Zhang San as the authorized person, the statistical list is selected as the “sales contract statistics list”, the column name is “signed department”, and the permissions are set as follows: For the statistics of the column value of sales, sales, and sales, all have viewing rights.
  • the display manner includes one or more of the following: (1) as shown in FIG. 6, the column value is displayed, but hidden by the hidden character.
  • the "number" is not displayed, that is, the line is not displayed or the line disappears.
  • Displaying the recent operator is convenient for traceability and accountability when a permission authorization error occurs, and displaying the latest operation time is convenient for visually determining whether it is necessary to re-authorize the operation authority of the column in the statistical list.
  • Zhang San should not view the sales statistics of the four sales contracts, and the last time he authorized Zhang San, Zhang San has the right to view the statistics of the sales of the four sales contracts. In the process of subsequent accountability, you can find the nearest Authorize the operator once to find the responsible person.
  • an operator needs to authorize the operation authority of the statistical list for 100 authorized persons, but the operator only completes the authorization of 70 authorized persons on the same day, and when the operator continues to authorize the next day, Whether the authorized person needs authorization is determined by looking at the last authorized time of each authorized person. It is also possible to search through the authorized time interval for all authorized persons authorized within the specified time interval. By looking at the authorized person's last authorized time, it is possible to know how long the authorized person's authority has not changed, which is helpful for visually determining whether it is necessary to re-authorize it.
  • the method for separately authorizing the statistics list operation authority based on the column value includes a template authorization step, which specifically includes: (1) selecting an authorized person, a statistical list requiring authorization, and a column requiring authorization: Select one or more authorized persons, select a statistical list that requires authorization, select a column from the selected statistics list that needs to be authorized, and (2) authorize the authorized person: select an existing authorized person Or the template has been created as an authorization template, and the operation authority of the statistical list of the authorization template of the authorization template is assigned to the authorized person; (3) the modification is performed or not, and the authorized person is saved to the statistics.
  • the list of column values corresponds to the operational authority of the statistics.
  • Zhang San’s operation authority corresponding to the statistical data of each column value of the department in the sales contract statistics list is used as an authorization template to authorize Li Er.
  • the method can select multiple authorized persons to perform batch authorization at the same time, and the authorization efficiency is improved.
  • the method supports template authorization, that is, selecting an existing authorized person or a created template as an authorization template, and the authorization template is
  • the operation permission of the column in the statistics list is directly (updated) to the authorized person (and then saved after simple modification), and the authorization operation is simple and efficient.
  • the combination of the two methods greatly improves the authorization efficiency of the system statistics list operation authority.
  • a method for separately authorizing a statistical list operation authority based on a column value including a statistical list operation authority authorization step and a step of selecting an authorized person, a statistical list operation authority authorization step, and a step sequence of selecting an authorized person
  • the statistical list operation authority authorization step includes the following steps: S1: selecting a statistical list that needs to be authorized; S2: selecting a column in the statistical list that needs to be authorized, and the selected column should be a column value selection. Determine or automatically determine the column; S3: Authorize the operation authority according to the statistical data corresponding to all the column values of the selected column, and the authorization process includes an operation authority for authorizing the statistical data of the selected column with a null value. step.
  • the one or more authorized persons are selected in the step of selecting the authorized person, and the authorized person may be an employee, a user, a group/class nature role, an independent individual nature role, and the like.
  • the present invention can perform effective unified authority authorization on statistical data with a null value, and the authorization operation is convenient, and the authorization workload is small.
  • the so-called "column value is null value” means that the column content is empty (not filled or not selected).
  • the signing department is not filled in.
  • the signing department may be a non-required field, it can be submitted without making a selection. Contract), or the contract originated from the company's part-time salesman, so that it is impossible to authorize such statistics by listing the “signing department”.
  • Such data is classified as the data with the column value of the signing department. Select the "empty" item to perform unified authority authorization on the statistical results of such data, and the operation is convenient.
  • a method for separately authorizing a statistical list operation authority based on a column value comprising a statistical list operation authority authorization step and a step of selecting an authorized person, a statistical list operation authority authorization step, and a step sequence of selecting an authorized person
  • the statistical list operation authority authorization step includes the following steps: S1: selecting a statistical list that needs to be authorized; S2: selecting a column in the statistical list that needs to be authorized, and the selected column should be a column value selection.
  • S3 Authorize the operation authority according to the statistical data corresponding to all the column values of the selected column, and the authorization process includes a step of authorizing the operation authority for all the statistics of all the column values of the selected column, all Column values include column values that are null.
  • the one or more authorized persons are selected in the step of selecting the authorized person, and the authorized person may be an employee, a user, a group/class nature role, an independent individual nature role, and the like.
  • the present invention can authorize the operation authority of all the statistical data of all the column values of the selected column, and the authorization operation is simple and efficient, and is particularly suitable for the same statistical operation authority of each column value in the column. situation. For example, regardless of the column value in the department column, the statistics operation rights are the same and are not restricted, you can directly select the "unrestricted" item under the operation permission, indicating that the statistics corresponding to all column values are Operational authority.
  • a method for separately authorizing a statistical list operation authority based on a column value includes a statistical list operation authority authorization step and a step of selecting an authorized person; the statistical list operation authority authorization step includes the following steps: S1 : Select a list of statistics that need to be authorized; S2: Select the column in the statistics list that needs to be authorized. The selected column should be the column whose column value is selected or determined automatically; S3: According to all column values of the selected column Corresponding statistical data is authorized for operation authority; one or more authorized persons are selected in the step of selecting the authorized person, and the authorized person is one or more roles, as shown in FIG. 4, the role is It is an independent individual, not a group/class. A role can only be associated with a unique user at the same time, and a user is associated with one or more roles; the role is authorized according to the work content of the role, and the user obtains the rights of the associated role.
  • the authorized person adopts the role of an independent individual, and when the employee leaves the company and adjusts the post, the association/disassociation of the user and the role is realized, and the switching and updating of the statistical list operation authority is realized, and the operation authority can be realized. Seamless handover ensures that the user's statistical list operation authority is updated in a timely manner, and there is no lag or omission in the operation authority update, which will not affect the normal operation of the enterprise, and also avoid the risk of leakage of confidential information.
  • Example of resignation the user associated role of the employee Zhang San “production worker 1”.
  • the system administrator or the corresponding administrator directly cancels the association between the user corresponding to Zhang San and the role of “production worker 1”.
  • Zhang San automatically loses the corresponding operation of the statistical list operation permission of “production worker 1”, avoiding the lag of the transfer of the operation of the statistical list operation, so that Zhang San still has the right to view certain confidential information after leaving the company, resulting in the disclosure of relevant confidential information to Zhang San;
  • employee Li Si took over Zhang San’s work and directly asked Li Si’s user to associate “production worker 1”
  • Li Si automatically obtained the statistical list operation authority corresponding to the role of “production worker 1”, no need for Li Si.
  • Reset the statistics list operation permissions the operation is simple and fast, greatly reducing the workload.
  • Example of transfer The employee Zhang San should be transferred from the production department to the after-sales department.
  • the system administrator (or the corresponding administrator) cancels the association between the user corresponding to Zhang San and the original character “production worker 1”, and then links to the new after-sales department.
  • the role "after-sales service personnel 3", Zhang San automatically obtained the "status service personnel 3" role corresponding to the statistical list operation authority.
  • the role belongs to the department, and the role is authorized according to the work content of the role, and the name of the role is unique under the department, and the role is The number is unique in the system; when the user is transferred, the user is associated with the original role, and the user is associated with the new role.
  • the user needs to adjust the post, it also includes a user adjustment management step, which includes: (1) canceling the association between the user and the original role; (2) associating the user with the new role corresponding to the post, and the user automatically obtains the new The statistics list operation permission of the role.
  • the role of the role to the user is one-to-one (when the role is associated with a user, other users can no longer associate the role; if the role is not associated with the user, it can be selected by other users; that is, a role can be And can only be associated by one user).
  • a user's relationship to a role is one-to-many (one user can associate multiple roles at the same time).
  • Role definition The role does not have the nature of group/class/category/post/job/work, but a non-collection nature, the role is unique, the role is an independent independent entity; in the enterprise application is equivalent Job number (The job number here is not a post, one post may have multiple employees at the same time, and one job number can only correspond to one employee at the same time).
  • a company system can create the following roles: general manager, deputy general manager 1, deputy general manager 2, Beijing sales manager, Beijing sales manager, Beijing sales manager, Shanghai sales engineer 1, Shanghai sales Engineer 2, Shanghai Sales Engineer 3, Shanghai Sales Engineer 4, Shanghai Sales Engineer 5...
  • general manager deputy general manager 1, deputy general manager 2, Beijing sales manager, Beijing sales manager, Shanghai sales engineer 1, Shanghai sales Engineer 2, Shanghai Sales Engineer 3, Shanghai Sales Engineer 4, Shanghai Sales Engineer 5...
  • Zhang San serves as the company's deputy general manager 2, and also serves as a sales manager in Beijing, then Zhang The three roles to be associated are Deputy General Manager 2 and Beijing Sales Manager. Zhang San has the rights to these two roles.
  • roles are group/class/post/position/work type, and one role can correspond to multiple users.
  • the concept of "role" in this application is equivalent to the post number/station number, and is similar to the role in the film and television drama: a character can only be played by one actor at the same time (childhood, juvenile, middle-aged). And an actor may be decorated with multiple angles.
  • the role After the role is created, you can associate the role in the process of creating the user, or you can associate it at any time after the user is created. After the user associates the role, the relationship with the role can be released at any time, and the relationship with other roles can be established at any time.
  • the composition of the character is: post name + post number.
  • workshop production workers 1, workshop production workers 2, workshop production workers 3... roles are independent individuals, equivalent to the concept of job number and station number, different from the role in the traditional authority management system, the concept of role in the traditional system It is the group/class nature of the position/position/work type.
  • the following example shows the relationship between employees, users and roles after the employee Zhang San enters a company: 1. New entry: The employee is newly hired, and directly associates the role of the corresponding job number/station number for the user (employee). Yes, for example: Zhang San joined the company (the company assigned a three-user for Zhang San), the job content is in the sales department, responsible for the sales of refrigerator products in Beijing area (the corresponding role is to sell the sales engineer under the 5 "This role", Zhang San users directly select the "sales engineer 5" role association.
  • Zhang also arranged for Zhang San to be responsible for the sales of regional TV products in Beijing (the corresponding role is to sell the role of “Sales Engineer 8” under the Ministry of Sales) and concurrently as the head of the after-sales department (corresponding to the after-sales department)
  • the three users added the roles of “sales engineer 8” under the sales department and “sales department supervisor 1” under the after-sales department.
  • Zhang San employees associated three roles, respectively.
  • Zhang San users have the authority of these three roles.
  • Zhang San serves as the post-sales manager (corresponding to the role of “after-sales manager” in the after-sales department) and no longer take up other jobs. Then Zhang San user is associated with the role of “after-sales manager” in the after-sales department, and cancels the three roles previously associated (Sales Engineer 5 under Sales, Sales Engineer 8 and “After Sales Manager 1” under the after-sales department) At this time, Zhang San users only have the authority of the role of “after-sales manager” under the after-sales department.
  • This application authorizes the role of the nature of the post number/station number, and the user determines the (acquired) authority by associating the role, and the control of the user authority is realized by a simple user-role relationship. It makes the permission control simple, easy to operate, clear and clear, and greatly improves the authorization efficiency and authorization reliability.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Human Resources & Organizations (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Health & Medical Sciences (AREA)
  • General Engineering & Computer Science (AREA)
  • Bioethics (AREA)
  • Health & Medical Sciences (AREA)
  • Economics (AREA)
  • Operations Research (AREA)
  • Databases & Information Systems (AREA)
  • Marketing (AREA)
  • Quality & Reliability (AREA)
  • Tourism & Hospitality (AREA)
  • General Business, Economics & Management (AREA)
  • Data Mining & Analysis (AREA)
  • Automation & Control Theory (AREA)
  • Educational Administration (AREA)
  • Game Theory and Decision Science (AREA)
  • Development Economics (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Storage Device Security (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

本发明公开了一种基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权。本发明可根据列值对统计列表中统计数据的操作权限进行分别的授权，一个统计列表进行不同的统计数据操作权限授权后能够满足不同的实际使用需求，能够对统计列表统计数据进行更严谨的控制，大大提高了管理的精细度，满足企事业单位实际运营中的使用需求。

Description

基于列值对统计列表操作权限进行分别授权的方法 技术领域
本发明涉及一种ERP、CRM等管理软件统计列表授权方法，特别是涉及一种基于列值对统计列表操作权限进行分别授权的方法。
 背景技术
统计列表不同于表单的概念：（1）表单授权主要表达的是对数据库中数据/表单数据的增删改查，而统计列表不会修改数据库中的数据/表单数据，只是按照某种需求方式对数据库中的数据进行查询；（2）表单表达的是一种业务对象，比如订单、合同、客户等等，每一条表单数据对应了一个唯一的业务对象，比如客户表单中的001客户就代表了一个唯一的客户001（客户001为一个表单数据/对象）；而统计列表一般是对某个/多个表单按照某种需求方式进行统计，统计列表中一行数据并不是一个业务对象，而是一个统计结果，比如，销售合同按签订部门统计，每行统计数据表达的是一个签订部门负责的所有销售合同的统计，可能包含了签单合同数量的统计、签单合同金额的统计、回款金额的统计、订单个数的统计等等。
一般软件系统都具有统计列表的显示和查看功能，然而，传统软件系统中对于被授权者而言，要么能够查看统计列表中某列所有列值对应的统计数据，要么整个统计列表都看不到，无法根据列值对统计数据的操作权限进行精细化管理，使用上存在较大局限。例如，对于“销售合同统计列表”，该统计列表中的列名有签订部门、签单数量、签单金额、回款金额、订单个数、已发货数量，签订部门的列值有销售一部、销售二部、销售三部等。现需要向销售总监提供整个销售部门的销售合同统计数据，则可以直接向销售总监提供该统计列表。如果仅需要向销售二部经理提供销售二部的销售合同统计数据，在系统中的表达方式为：要么专门为销售二部做一个新的统计列表（不能应用同一个统计列表），要么提供整个统计列表。采用第一种方式，统计列表中涉及到的每一个列值都可能需要专门做表（为销售二部重新做一个统计列表），工作量无法预估；采用第二种方式，销售一部、销售三部的统计数据也将泄露给销售二部经理，传统方法无法满足企事业单位实际运营使用需求。
此外，传统授权方法无法对列值为空值的统计数据进行有效的权限授权，所谓“列值为空值”是指列内容为空（未填写或未选择），使用上存在较大局限。例如，新增合同时未填写签订部门（因为签订部门可能为非必填字段），或是合同来源于公司兼职业务员，这样就无法通过列名“签订部门”对此类统计数据进行权限的授权，如果需要对这些统计数据进行操作权限授权就必须对每个统计数据进行逐个授权，授权工作量大且容易出错。
基于角色的访问控制（RBAC）是近年来研究最多、思想最成熟的一种数据库权限管理机制，它被认为是替代传统的强制访问控制（MAC）和自主访问控制（DAC）的理想候选。传统的自主访问控制的灵活性高但是安全性低，强制访问控制安全性高但是限制太强；基于角色的访问控制两者兼具，不仅易于管理而且降低了复杂性、成本和发生错误的概率，因而近年来得到了极大的发展。基于角色的访问控制（RBAC）的基本思想是根据企业组织视图中不同的职能岗位划分不同的角色，将数据库资源的访问权限封装在角色中，用户通过被赋予不同的角色来间接访问数据库资源。
在大型应用系统中往往都建有大量的表和视图，这使得对数据库资源的管理和授权变得十分复杂。由用户直接管理数据库资源的存取和权限的收授是十分困难的，它需要用户对数据库结构的了解非常透彻，并且熟悉SQL语言的使用，而且一旦应用系统结构或安全需求有所变动，都要进行大量复杂而繁琐的授权变动，非常容易出现一些意想不到的授权失误而引起的安全漏洞。因此，为大型应用系统设计一种简单、高效的权限管理方法已成为系统和系统用户的普遍需求。
基于角色的权限控制机制能够对系统的访问权限进行简单、高效的管理，极大地降低了系统权限管理的负担和代价，而且使得系统权限管理更加符合应用系统的业务管理规范。
然而，传统基于角色的用户权限管理均采用“角色对用户一对多”的关联机制，其“角色”为组/类性质，即一个角色可以同时对应/关联多个用户，角色类似于岗位/职位/工种等概念，这种关联机制下对用户权限的授权基本分为以下三种形式：1、如图1所示，直接对用户授权，缺点是工作量大、操作频繁且麻烦；当发生员工变动（如调岗、离职等），该员工涉及到的所有权限必须要作相应调整，特别是对于公司管理人员，其涉及到的权限多，权限调整的工作量大、繁杂，容易出错或遗漏，影响企业的正常运营，甚至造成不可预估的损失。
2、如图2所示，对角色（类/组/岗位/工种性质）进行授权（一个角色可以关联多个用户），用户通过角色获得权限，权限授权主体是组/类性质角色；3、如图3所示，以上两种方式结合。
以上的表述中，2、3均需要对类/组性质的角色进行授权，而通过类/组/岗位/工种性质的角色进行授权的方式有以下缺点：1、用户权限变化时的操作难：在实际的系统使用过程中，经常因为在运营过程中需要对用户的权限进行调整，比如：在处理员工权限变化时，角色关联的某个员工权限发生变化，我们不能因该个别员工权限的变化而改变整个角色的权限，因为该角色还关联了其他权限未变的员工。因此为了应对该种情况，要么创建新角色来满足该权限发生变化的员工，要么对该员工根据权限需求直接授权（脱离角色）。以上两种处理方式，在角色权限较多的情况下对角色授权不仅所需时间长，而且容易犯错，使用方操作起来繁琐又麻烦，也容易出错导致对系统使用方的损失。
员工/用户的表单操作权限发生变化时，要么员工/用户脱离角色，要么新增角色来满足工作要求。第一种方式的缺陷同上述“直接对用户授权”方式的缺陷。第二种方式，新增角色便涉及到角色的新建、关联、授权工作，特别在角色多、角色关联的用户也多的情况下，角色具体关联了哪些用户是很难记住的。
2、要长期记住角色包含的具体权限难：若角色的权限功能点比较多，时间一长，很难记住角色的具体权限，更难记住权限相近的角色之间的权限差别，相近角色的权限也很容易混淆；若要关联新的用户，无法准确判断应当如何选择关联。
3、因为用户权限变化，则会造成角色创建越来越多（若不创建新角色，则会大幅增加直接对用户的授权），更难分清各角色权限的具体差别。
4、调岗时，若要将被调岗用户的很多个权限分配给另外几个用户承担，则处理时必须将被调岗用户的这些权限区分开来，分别再创建角色来关联另外几个用户，这样的操作不仅复杂耗时，而且还很容易发生错误。
 技术问题
本发明的目的在于克服现有技术的不足，提供一种基于列值对统计列表操作权限进行分别授权的方法，能够对统计列表统计数据进行更严谨的控制，大大提高管理的精细度，满足企事业单位实际运营中的使用需求。
 技术解决方案
本发明的目的是通过以下技术方案来实现的：基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；所述的统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权；所述选择被授权者的步骤中选择一个或多个被授权者。
所述的操作权限包括查看；所述“所选的列应当是列值为选择确定或自动确定的列”的选择确定或自动确定的在这里特指：所述列值为选择确定（如客户统计列表中的列客户行业的列值有制造、金融、航空等行业可选，这些列值是非人工填写的，而是通过选择方式获得的，还比如客户所在城市、负责部门、客户负责人、客户负责角色等列的列值也是选择确定的）或自动确定（如统计列表的创建人、录单人、制单角色、制单用户、制单人等列，这些列值是依据相关规则自动确定）的。
对于不具备查看权限的列值对应的统计数据，其显示方式包括以下中的一种或多种：（1）显示该列值，但以隐藏符隐藏该列值对应的统计数据；（2）该列值及该列值对应的统计数据均不显示。
所述的被授权者选为有且只有一个，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，显示出此前该被授权者对该统计列表中该列各列值对应的统计数据的操作权限的授权状态。
所述的被授权者选为两个或两个以上，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，不显示该被授权者对该统计列表中该列各列值对应的统计数据的操作权限的授权状态。
所述的被授权者选为有且只有一个，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，显示最近对该被授权者进行该统计列表中该列授权的操作者和操作时间。
所述的被授权者为一个或多个角色，所述的角色是独立的个体，而非组/类，同一时段一个角色只能关联唯一的用户，而一个用户关联一个或多个角色。
基于列值对统计列表操作权限进行分别授权的方法，还包括一个模板授权步骤，具体包括：（1）选择被授权者、需要进行授权的统计列表、需要进行授权的列：选择一个或多个被授权者，选择一个需要进行授权的统计列表，从所选统计列表中选择一个需要进行授权的列；（2）对被授权者进行授权：选择一个现有已被授权者或已创建模板作为授权模板，将该授权模板的该统计列表该列各列值对应统计数据的操作权限赋予该被授权者；（3）修改或不修改后保存得到该被授权者对该统计列表该列各列值对应统计数据的操作权限。
基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；所述的统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权，授权过程包括一个对所选列的列值为空值的统计数据整体进行操作权限授权的步骤。
基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；所述的统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权，授权过程包括一个对所选列所有列值对应的统计数据整体进行操作权限授权的步骤，所有列值包括为空值的列值。
 有益效果
本发明的有益效果是：1）本发明可根据列值对统计列表中统计数据的操作权限进行分别的授权，一个统计列表进行不同的统计数据操作权限授权后能够满足不同的实际使用需求，能够对统计列表统计数据进行更严谨的控制，大大提高了管理的精细度，满足企事业单位实际运营中的使用需求。
例如，对于“销售合同统计列表”，该统计列表中的列名有签订部门、签单数量、签单金额、回款金额、订单个数、已发货数量，签订部门的列值有销售一部、销售二部、销售三部等。如果需要向销售总监提供整个销售部门的销售合同统计数据，可以选择销售总监作为被授权者，设置其权限为：对签订部门的列值为销售一部、销售二部、销售三部等的统计数据都具有查看权限。如果仅需要向销售二部经理提供销售二部的销售合同统计数据，可以选择销售二部经理作为被授权者，设置其权限为：仅对签订部门的列值为销售二部的统计数据具有查看权限。
2）被授权者选为一个，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，可显示最近对该被授权者进行该统计列表中该列授权的操作者和操作时间。显示最近操作者便于在发生权限授权错误时进行溯源和追责，显示最近操作时间便于直观判断是否需要重新进行该统计列表该列的操作权限授权。
例如：被授权者张三的最近一次“销售合同统计列表”、“签订部门”统计数据查看权限授权操作由李四于2015年5月21日11:00完成，当被授权者选为张三、需要进行授权的统计列表选为“销售业绩统计列表”、需要进行授权的列选为“签订部门”时，则为本次的授权操作者显示最近一次是李四在2015年5月21日11:00为张三进行了“销售业绩统计列表”中“签订部门”的查看权限授权。
如果张三不应查看销售四部销售合同统计数据，而在最近一次对张三进行授权时使得张三具有了查看销售四部销售合同统计数据的权限，在后续追责的过程中，可以通过查找最近一次授权操作者来找到责任人。
又如，某操作者需要对100个被授权者进行统计列表的操作权限授权，但是当天该操作者只完成了70个被授权者的授权，在该操作者第二天继续进行授权时，可以通过查看每个被授权者的最近一次被授权时间来判断该被授权者是否需要授权。也可以通过授权时间区间搜索出指定时间区间内被授权的所有被授权者。通过查看被授权者的最近一次被授权时间可以知道该被授权者的权限有多长时间没有更改，有利于直观判断是否需要再次对其进行重新授权。
3）本方法可同时选择多个被授权者进行批量授权，提高了授权效率；另外，本方法支持模板授权，即选定一个现有已被授权者或已创建模板作为授权模板，将该授权模板的该统计列表该列的操作权限直接赋予（更新）给该被授权者（再经过简单修改后保存），授权操作简单高效。两种方式结合，大大提高了系统统计列表操作权限授权效率。
4）本发明能够对列值为空值的统计数据进行有效的统一权限授权，授权操作方便，授权工作量小。所谓“列值为空值”是指列内容为空（未填写或未选择），例如，新增合同时未填写签订部门（因为签订部门可能为非必填字段，可以不进行选择就能够提交合同），或是合同来源于公司兼职业务员，这样就无法通过列名“签订部门”对此类统计数据进行权限的授权，此类数据被划为签订部门的列值为空的数据，通过选中“空”项对此类数据的统计结果进行统一的权限授权，操作方便。
5）本发明能够对所选列所有列值的统计数据整体进行操作权限授权，授权操作简单高效，特别适用于列中各列值的统计数据操作权限相同的情形。例如，无论签订部门列中列值是什么，统计数据操作权限均相同且不受限制，则可直接在该操作权限下选中“不受限制”项，表示所有列值对应的统计数据都为该操作权限。设置“不受限制”功能还有两大好处：其一可以在对拥有所有权限的公司高层授权时选用“不受限制”；其二选了“不受限制”，以后列值增加了，因为选择的是“不受限制”，则其被授权者的权限还是不受影响（不受限制）。
6）本发明被授权者可采用独立个体性质的角色，在员工离职、调岗时，通过用户与角色的关联/取消关联顺带就实现了统计列表操作权限的切换和更新，能够实现操作权限的无缝交接，保证用户统计列表操作权限得到及时更新，不会出现操作权限更新的滞后或遗漏，不会影响企业正常运营，也规避了机密信息泄露的风险。
离职举例：员工张三对应的用户关联角色“生产工人1”，张三离职时，系统管理员（或相应管理员）直接取消张三对应的用户与“生产工人1”这一角色的关联，则张三自动失去“生产工人1”相应的统计列表操作权限，避免统计列表操作权限交接滞后使得张三离职后仍具某些机密信息的查看权限，导致相关机密信息泄露给张三；新入职员工李四接替张三的工作时，直接让李四对应的用户关联“生产工人1”，则李四自动获得了“生产工人1”这一角色对应的统计列表操作权限，无需再为李四重新设置统计列表操作权限，操作简单快捷，大大减少了工作量。
调岗举例：员工张三要从生产部调岗到售后部，系统管理员（或相应管理员）取消张三对应的用户与原角色“生产工人1”的关联，再关联到售后部的新角色“售后服务人员3”，张三则自动获得了“售后服务人员3”这一角色对应的统计列表操作权限。
7）本申请角色对用户是一对一的关系，同一时段一个角色只能关联唯一的用户，一个用户关联一个或多个角色，这样做的好处是，只要将用户关联到角色即可获得权限（即用户获得其关联的角色的权限），而且角色的权限变更比传统机制中的用户权限变更要少得多。独立体性质（岗位号/工位号性质）的角色数量变化小，虽然员工流动大，但岗位号/工位号的变化小（甚至在一定时段内是没有变化的，即角色没有变化），这样将极大简化用户的权限管理，减少系统的开销。
8）动态管理、入职调岗等的操作简单方便，效率高，可靠性高：入职/离职/调岗在权限管理中的应用简单，当员工/用户发生变化时不用重新设置权限，用户只需取消或关联角色即可：不再任职该角色的用户就取消该角色关联，接手任职该角色的用户关联该岗位号的角色，关联该角色的用户自动就获得了该角色的统计列表操作权限，无需对角色进行重新授权，极大地提高了系统设置的效率、安全性和可靠性。
举例：因张三用户离职或调岗等原因，张三不再做“采购员3”这个角色的工作，则将张三取消与“采购员3”的关联；另外李四接手做“采购员3”这个角色的工作，只需将李四关联该角色，则李四自动获得了“采购员3”这个角色的统计列表操作权限。
9）传统的权限管理机制将角色定义为组、工种、类等性质，角色对用户是一对多的关系，在实际的系统使用过程中，因为在运营过程中经常需要对用户的权限进行调整，比如：在处理员工权限变化的时候，角色关联的某个员工的权限发生变化，我们不能因该个别员工权限的变化而改变整个角色的权限，因为该角色还关联了其他权限未变的员工。因此为了应对该种情况，要么创建新角色来满足该权限发生变化的员工，要么对该员工根据权限需求直接授权（脱离角色）。以上两种处理方式，在角色权限较多的情况下对角色授权不仅所需时间长，而且容易犯错，使用方操作起来繁琐又麻烦，也容易出错导致对系统使用方的损失。
但在本申请的方法下，因为角色是一个独立的个体，则可以选择改变角色权限即可达到目的。本申请的方法，虽然看起来在系统初始化时会增加工作量，但可以通过复制等方法，使其创建角色或授权的效率高于传统组/类性质的角色，因为不用考虑组/类性质角色在满足关联用户时的共通性，本申请方案会让权限设置清晰，明了；尤其是在系统使用一段时间后（用户/角色权限动态变化），该申请方案能为系统使用方大幅度提高系统使用中的权限管理效率，使动态授权更简单，更方便，更清晰、明了，提高权限设置的效率和可靠性。
10）传统组/类性质的角色授权方法容易出错，本申请方法大幅降低了授权出错的几率，因为本申请方法只需考虑作为独立个体的角色，而不用考虑传统方法下关联该组性质角色的多个用户有哪些共通性。即使授权出错也只影响关联到该角色的那一个用户，而传统以组性质的角色则会影响关联到该角色的所有用户。即使出现权限授权错误，本申请的修正方法简单、时间短，而传统以组性质的角色在修正错误时需要考虑关联到该角色的所有用户的权限共通性，在功能点多的情况下不仅修改麻烦、复杂，非常容易出错，且很多情况下只能新创建角色才能解决。
11）在传统以组为性质的角色授权方法下，若角色的权限功能点比较多，时间一长，很难记住角色的具体权限，更难记住权限相近的角色之间的权限差别，若要关联新的用户，无法准确判断应当如何选择关联。本申请方法的角色本身就具有岗位号/工位号的性质，选择一目了然。
12）调岗时，若要将被调岗用户的很多个权限分配给另外几个用户承担，则处理时必须将被调岗用户的这些权限区分开来，分别再创建角色来关联另外几个用户，这样的操作不仅复杂耗时，而且还很容易发生错误。
本申请方法则为：被调岗用户关联了几个角色，在调岗时，首先取消用户与原部门内的角色的关联（被取消的这几个角色可以被重新关联给其他用户），然后将用户与新部门内的角色进行关联即可。操作简单，不会出错。
 附图说明
图1为背景技术中系统直接对用户进行授权的方式示意图；
图2为背景技术中系统对组/类性质角色进行授权的方式示意图；
图3为背景技术中系统对用户直接授权和对组/类性质角色授权相结合的方式示意图；
图4为本发明系统通过独立个体性质角色对用户进行授权的方式示意图；
图5为本发明中所选被授权者为一个且选定统计列表和列时的示意图；
图6为本发明销售合同统计列表一种显示方式示意图；
图7为本发明销售合同统计列表另一种显示方式示意图；
图8为李二对销售合同统计列表中列名为签订部门的各列值对应的统计数据的操作权限的授权状态示意图；
图9为本发明中所选被授权者为多个且选定统计列表和列时的示意图；
图10为本发明显示最近授权操作者和操作时间的示意图；
图11为本发明中采用授权模板为被授权者授权时的示意图。
 本发明的实施方式
下面结合附图进一步详细描述本发明的技术方案，但本发明的保护范围不局限于以下所述。
【实施例1】基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；所述的操作权限为查看。
所述的统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定（如客户统计列表中列名为客户行业的列值有制造、金融、航空等行业可选，这些列值是非人工填写的，而是选择得到的，还比如客户所在城市、负责部门等列名对应的列值也是选择确定的）或自动确定（如统计列表的创建人、录单人、制单角色、制单人等列名，这些列名的列值依据相关规则自动确定）的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权；所述选择被授权者的步骤中选择一个或多个被授权者，被授权者可以是员工、用户、组/类性质角色、独立个体性质角色等。
本实施例可根据列值对统计列表中统计数据的操作权限进行分别的授权，一个统计列表进行不同的统计数据操作权限授权后能够满足不同的实际使用需求，能够对统计列表统计数据进行更严谨的控制，大大提高了管理的精细度，满足企事业单位实际运营中的使用需求。
例如，对于“销售合同统计列表”，该统计列表中的列名有签订部门、签单数量、签单金额、回款金额、订单个数、已发货数量，列名为签订部门对应的列值有销售一部、销售二部、销售三部。如果需要向销售总监张三提供整个销售部门的销售合同统计数据，可以选择张三作为被授权者，统计列表选为“销售合同统计列表”、列名选择“签订部门”，设置其权限为：对列值为销售一部、销售二部、销售三部的统计数据都具有查看权限。
如图5所示，如果仅需要向销售二部经理提供销售二部的销售合同统计数据，可以选择销售二部经理李二作为被授权者，统计列表选为“销售合同统计列表”、列名选择“签订部门”，设置其权限为：仅对列值为销售二部的统计数据具有查看权限。
本实施例中，对于不具备查看权限的列值对应的统计数据，其显示方式包括以下中的一种或多种：（1）如图6所示，显示该列值，但以隐藏符隐藏该列值对应的统计数据；（2）如图7所示，该列值及该列值对应的统计数据均不显示（均不显示也可表达为都不显示，如图7中“……”号标识的都不显示，即该行不显示出来或该行消失）。
【实施例2】所述的被授权者选为有且只有一个，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，显示出此前该被授权者对该统计列表中该列各列值对应的统计数据的操作权限的授权状态（如图8所示，此前李二对“销售合同统计列表”中列名“签订部门”的列值为“销售一部”、“销售二部”、“销售三部”的统计数据都有查看权限）。
【实施例3】所述的被授权者选为两个或两个以上，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，不显示该被授权者对该统计列表中该列各列值对应的统计数据的操作权限的授权状态（如图9所示）。
【实施例4】如图10所示，所述的被授权者选为有且只有一个，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，显示最近对该被授权者进行该统计列表中该列授权的操作者和操作时间。
显示最近操作者便于在发生权限授权错误时进行溯源和追责，显示最近操作时间便于直观判断是否需要重新进行该统计列表该列的操作权限授权。
例如：被授权者张三的最近一次“销售合同统计列表”、“签订部门”统计数据查看权限授权操作由李四于2015年5月21日11:00完成，当被授权者选为张三、需要进行授权的统计列表选为“销售业绩统计列表”、需要进行授权的列选为“签订部门”时，则为本次的授权操作者显示最近一次是李四在2015年5月21日11:00为张三进行了“销售业绩统计列表”中“签订部门”的查看权限授权。
如果张三不应查看销售四部销售合同统计数据，而在最近一次对张三进行授权时使得张三具有了查看销售四部销售合同统计数据的权限，在后续追责的过程中，可以通过查找最近一次授权操作者来找到责任人。
又如，某操作者需要对100个被授权者进行统计列表的操作权限授权，但是当天该操作者只完成了70个被授权者的授权，在该操作者第二天继续进行授权时，可以通过查看每个被授权者的最近一次被授权时间来判断该被授权者是否需要授权。也可以通过授权时间区间搜索出指定时间区间内被授权的所有被授权者。通过查看被授权者的最近一次被授权时间可以知道该被授权者的权限有多长时间没有更改，有利于直观判断是否需要再次对其进行重新授权。
【实施例5】基于列值对统计列表操作权限进行分别授权的方法，还包括一个模板授权步骤，具体包括：（1）选择被授权者、需要进行授权的统计列表、需要进行授权的列：选择一个或多个被授权者，选择一个需要进行授权的统计列表，从所选统计列表中选择一个需要进行授权的列；（2）对被授权者进行授权：选择一个现有已被授权者或已创建模板作为授权模板，将该授权模板的该统计列表该列各列值对应统计数据的操作权限赋予该被授权者；（3）修改或不修改后保存得到该被授权者对该统计列表该列各列值对应统计数据的操作权限。
例如，如图11所示，将张三对销售合同统计列表中签订部门的各列值对应统计数据的操作权限作为授权模板，为李二进行授权。
本方法可同时选择多个被授权者进行批量授权，提高了授权效率；另外，本方法支持模板授权，即选定一个现有已被授权者或已创建模板作为授权模板，将该授权模板的该统计列表该列的操作权限直接赋予（更新）给该被授权者（再经过简单修改后保存），授权操作简单高效。两种方式结合，大大提高了系统统计列表操作权限授权效率。
【实施例6】基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；所述的统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权，授权过程包括一个对所选列的列值为空值的统计数据整体进行操作权限授权的步骤。
所述选择被授权者的步骤中选择一个或多个被授权者，被授权者可以是员工、用户、组/类性质角色、独立个体性质角色等。
如图5、图8-11所示，本发明能够对列值为空值的统计数据进行有效的统一权限授权，授权操作方便，授权工作量小。所谓“列值为空值”是指列内容为空（未填写或未选择），例如，新增合同时未填写签订部门（因为签订部门可能为非必填字段，可以不进行选择就能够提交合同），或是合同来源于公司兼职业务员，这样就无法通过列名“签订部门”对此类统计数据进行权限的授权，此类数据被划为签订部门的列值为空的数据，通过选中“空”项对此类数据的统计结果进行统一的权限授权，操作方便。
【实施例7】基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；所述的统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权，授权过程包括一个对所选列所有列值的统计数据整体进行操作权限授权的步骤，所有列值包括为空值的列值。
所述选择被授权者的步骤中选择一个或多个被授权者，被授权者可以是员工、用户、组/类性质角色、独立个体性质角色等。
如图5、图8-11所示，本发明能够对所选列所有列值的统计数据整体进行操作权限授权，授权操作简单高效，特别适用于列中各列值的统计数据操作权限相同的情形。例如，无论签订部门列中列值是什么，统计数据操作权限均相同且不受限制，则可直接在该操作权限下选中“不受限制”项，表示所有列值对应的统计数据都为该操作权限。设置“不受限制”功能还有两大好处：其一可以在对拥有所有权限的公司高层（如销售总监）授权时选用“不受限制”；其二选了“不受限制”，以后列值增加了，因为选择的是“不受限制”，则其被授权者的权限还是不受影响（即增加的列值对应的统计数据也有权限）。
【实施例8】基于列值对统计列表操作权限进行分别授权的方法，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤；所述的统计列表操作权限授权步骤包括以下步骤：S1：选择一个需要进行授权的统计列表；S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权；所述选择被授权者的步骤中选择一个或多个被授权者，所述的被授权者为一个或多个角色，如图4所示，所述的角色是独立的个体，而非组/类，同一时段一个角色只能关联唯一的用户，而一个用户关联一个或多个角色；根据角色的工作内容对角色进行授权，用户获得其关联角色的权限。
本实施例中，被授权者采用独立个体性质的角色，在员工离职、调岗时，通过用户与角色的关联/取消关联顺带就实现了统计列表操作权限的切换和更新，能够实现操作权限的无缝交接，保证用户统计列表操作权限得到及时更新，不会出现操作权限更新的滞后或遗漏，不会影响企业正常运营，也规避了机密信息泄露的风险。
离职举例：员工张三对应的用户关联角色“生产工人1”，张三离职时，系统管理员（或相应管理员）直接取消张三对应的用户与“生产工人1”这一角色的关联，则张三自动失去“生产工人1”相应的统计列表操作权限，避免统计列表操作权限交接滞后使得张三离职后仍具某些机密信息的查看权限，导致相关机密信息泄露给张三；新入职员工李四接替张三的工作时，直接让李四对应的用户关联“生产工人1”，则李四自动获得了“生产工人1”这一角色对应的统计列表操作权限，无需再为李四重新设置统计列表操作权限，操作简单快捷，大大减少了工作量。
调岗举例：员工张三要从生产部调岗到售后部，系统管理员（或相应管理员）取消张三对应的用户与原角色“生产工人1”的关联，再关联到售后部的新角色“售后服务人员3”，张三则自动获得了“售后服务人员3”这一角色对应的统计列表操作权限。
进一步的，在角色创建时或角色创建后为该角色选择一个部门，则该角色归属于该部门，根据角色的工作内容对角色进行授权，且该角色的名称在该部门下唯一，该角色的编号在系统中唯一；所述用户调岗时，取消用户与原角色的关联，将用户与新角色进行关联。
如果用户需要调岗，还包括一个用户调岗管理步骤，具体包括：（1）取消用户与原角色的关联；（2）将用户与调岗后对应的新角色进行关联，用户自动获得该新角色的统计列表操作权限。
以下对通过独立个体性质角色对用户进行授权所具备的优势进行分析：用户通过其与角色的关联确定（获得）权限，如果要修改用户的权限，通过调整角色所拥有的权限以达到改变关联了该角色的用户的权限的目的。一旦用户关联角色后，该用户就拥有了该角色的统计列表操作权限。
角色对用户的关系为一对一（该角色与一个用户关联时，其他用户则不能再关联该角色；若该角色未被用户关联，则可以被其他用户选择关联；即同一时段，一个角色能且只能被一个用户关联）。用户对角色的关系为一对多（一个用户可以同时关联多个角色）。
角色的定义：角色不具有组/类/类别/岗位/职位/工种等性质，而是一个非集合的性质，角色具有唯一性，角色是独立存在的独立个体；在企事业单位应用中相当于岗位号（此处的岗位号非岗位，一个岗位同时可能有多个员工，而同一时段一个岗位号只能对应一个员工）。
举例：某个公司系统中可创建如下角色：总经理、副总经理1、副总经理2、北京销售一部经理、北京销售二部经理、北京销售三部经理、上海销售工程师1、上海销售工程师2、上海销售工程师3、上海销售工程师4、上海销售工程师5……用户与角色的关联关系：若该公司员工张三任职该公司副总经理2，同时任职北京销售一部经理，则张三需要关联的角色为副总经理2和北京销售一部经理，张三拥有了这两个角色的权限。
传统角色的概念是组/类/岗位/职位/工种性质，一个角色能够对应多个用户。而本申请“角色”的概念相当于岗位号/工位号，也类同于影视剧中的角色：一个角色在同一时段（童年、少年、中年……）只能由一个演员来饰演，而一个演员可能会分饰多角。
在创建角色之后，可以在创建用户的过程中关联角色，也可以在用户创建完成后随时进行关联。用户关联角色后可以随时解除与角色的关联关系，也可以随时建立与其他角色的关联关系。
所述角色的构成为：岗位名+岗内编号。例如：车间生产工人1、车间生产工人2、车间生产工人3……角色是独立个体，相当于岗位号、工位号的概念，不同于传统权限管理体系中的角色，传统体系中角色的概念是岗位/职位/工种等的组/类性质。
以下举例员工张三进入某公司后，员工、用户与角色之间的关系为：1、新入职：员工新入职，直接为该用户（员工）选择相应的岗位号/工位号的角色进行关联即可，例：张三入职公司（公司为张三分配了一个张三用户），工作内容是在销售一部，负责北京区域冰箱产品的销售（对应的角色是销售一部下的“销售工程师5”这个角色），则张三用户直接选择“销售工程师5”这个角色关联即可。
2、增加职位：张三工作一段时间后，公司还安排张三负责北京区域电视产品的销售（对应的角色是销售一部下的“销售工程师8”这个角色）并兼任售后部主管（对应售后部主管1这个角色），则张三用户再增加关联销售一部下的“销售工程师8”和售后部下的“售后部主管1”这两个角色，此时，张三员工关联了三个角色，分别为销售一部下的“销售工程师5”、“销售工程师8”和售后部下的“售后部主管1”，张三用户则拥有了这三个角色的权限。
3、减少职位：又过了一段时间，公司决定让张三任职售后部经理（对应售后部下“售后部经理”这个角色），且不再兼任其他工作。则张三用户关联售后部下“售后部经理”这个角色，同时取消此前关联的三个角色（销售一部下的“销售工程师5”、“销售工程师8”和售后部下的“售后部主管1”），此时，张三用户只拥有售后部下“售后部经理”这个角色的权限。
4、角色权限的调整（针对角色本身所拥有的权限的调整）：如公司决定增加售后部经理的权限，则只需增加对售后部经理这个角色的授权即可，则张三用户因为售后部经理这个角色的权限增加了，张三用户的权限也增加了。
5、离职：一年后，张三离职了，则取消张三用户与售后部下“售后部经理”这个角色的关联即可。
举例：公司在动态的经营中，职员的入职、离职是经常持续发生的，但岗位号/工位号的变化非常少(甚至在一定时期内是没有变化的)。
传统授权方法：在系统功能点多的情况下，以传统的组/类性质的角色进行授权，不仅授权工作量大，繁杂，而且很容易出错，甚至出错了在短时间内都不容易发现，容易对系统使用方造成损失。
本申请授权方法：本申请是对岗位号/工位号性质的角色进行授权，用户关联角色而确定（获得）权限，则对用户权限的控制，通过简单的用户-角色的关联关系来实现，让权限控制变得简单、易操作，清晰明了，大幅度提高了授权效率和授权可靠性。
以上所述仅是本发明的优选实施方式，应当理解本发明并非局限于本文所披露的形式，不应看作是对其他实施例的排除，而可用于各种其他组合、修改和环境，并能够在本文所述构想范围内，通过上述教导或相关领域的技术或知识进行改动。而本领域人员所进行的改动和变化不脱离本发明的精神和范围，则都应在本发明所附权利要求的保护范围内。

Claims (10)

  1. 基于列值对统计列表操作权限进行分别授权的方法，其特征在于，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；
    所述的统计列表操作权限授权步骤包括以下步骤：
    S1：选择一个需要进行授权的统计列表；
    S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；
    S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权；
    所述选择被授权者的步骤中选择一个或多个被授权者。
  2. 根据权利要求1所述的基于列值对统计列表操作权限进行分别授权的方法，其特征在于：所述的操作权限包括查看。
  3. 根据权利要求2所述的基于列值对统计列表操作权限进行分别授权的方法，其特征在于：对于不具备查看权限的列值对应的统计数据，其显示方式包括以下中的一种或多种：
    （1）显示该列值，但以隐藏符隐藏该列值对应的统计数据；
    （2）该列值及该列值对应的统计数据均不显示。
  4. 根据权利要求1所述的基于列值对统计列表操作权限进行分别授权的方法，其特征在于：所述的被授权者选为有且只有一个，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，显示出此前该被授权者对该统计列表中该列各列值对应的统计数据的操作权限的授权状态。
  5. 根据权利要求1所述的基于列值对统计列表操作权限进行分别授权的方法，其特征在于：所述的被授权者选为两个或两个以上，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，不显示该被授权者对该统计列表中该列各列值对应的统计数据的操作权限的授权状态。
  6. 根据权利要求1所述的基于列值对统计列表操作权限进行分别授权的方法，其特征在于：所述的被授权者选为有且只有一个，且需要进行授权的统计列表、统计列表中需要进行授权的列选定时，显示最近对该被授权者进行该统计列表中该列授权的操作者和操作时间。
  7. 根据权利要求1-6中任一项所述的基于列值对统计列表操作权限进行分别授权的方法，其特征在于：所述的被授权者为一个或多个角色，所述的角色是独立的个体，而非组/类，同一时段一个角色只能关联唯一的用户，而一个用户关联一个或多个角色。
  8. 根据权利要求1所述的基于列值对统计列表操作权限进行分别授权的方法，其特征在于：还包括一个模板授权步骤，具体包括：（1）选择被授权者、需要进行授权的统计列表、需要进行授权的列：选择一个或多个被授权者，选择一个需要进行授权的统计列表，从所选统计列表中选择一个需要进行授权的列；
    （2）对被授权者进行授权：选择一个现有已被授权者或已创建模板作为授权模板，将该授权模板的该统计列表该列各列值对应统计数据的操作权限赋予该被授权者；
    （3）修改或不修改后保存得到该被授权者对该统计列表该列各列值对应统计数据的操作权限。
  9. 基于列值对统计列表操作权限进行分别授权的方法，其特征在于，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；
    所述的统计列表操作权限授权步骤包括以下步骤：
    S1：选择一个需要进行授权的统计列表；
    S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；
    S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权，授权过程包括一个对所选列的列值为空值的统计数据整体进行操作权限授权的步骤。
  10. 基于列值对统计列表操作权限进行分别授权的方法，其特征在于，包括一个统计列表操作权限授权步骤和一个选择被授权者的步骤，统计列表操作权限授权步骤和选择被授权者的步骤顺序不分先后；
    所述的统计列表操作权限授权步骤包括以下步骤：
    S1：选择一个需要进行授权的统计列表；
    S2：选择统计列表中需要进行授权的列，所选的列应当是列值为选择确定或自动确定的列；
    S3：根据所选列的所有列值分别对应的统计数据进行操作权限授权，授权过程包括一个对所选列所有列值对应的统计数据整体进行操作权限授权的步骤，所有列值包括为空值的列值。
PCT/CN2018/099066 2017-08-07 2018-08-06 基于列值对统计列表操作权限进行分别授权的方法 WO2019029500A1 (zh)

Priority Applications (10)

Application Number Priority Date Filing Date Title
AU2018314916A AU2018314916A1 (en) 2017-08-07 2018-08-06 Column value-based separate authorization method for statistical list operations
US16/636,879 US11232226B2 (en) 2017-08-07 2018-08-06 Column value-based separate authorization method for statistical list operations
KR1020207006540A KR20200032222A (ko) 2017-08-07 2018-08-06 열값을 기반으로 통계 열표 조작 권한에 대해 각각 권한 부여하는 방법
BR112020002586-0A BR112020002586A2 (pt) 2017-08-07 2018-08-06 método de autorização separada baseado em valor da coluna para operações de lista estatística
EP18845196.7A EP3667539A4 (en) 2017-08-07 2018-08-06 COLUMN VALUE-BASED SEPARATE AUTHORIZATION PROCESS FOR STATISTICAL LIST OPERATIONS
PE2020000194A PE20200670A1 (es) 2017-08-07 2018-08-06 Procedimiento de autorizacion por separado basado en los valores de una columna para operaciones de listado estadistico
JP2020505857A JP7231911B2 (ja) 2017-08-07 2018-08-06 列値に基づいて統計一覧の操作権限をそれぞれ承認する方法
MX2020001459A MX2020001459A (es) 2017-08-07 2018-08-06 Procedimiento de autorizacion por separado basado en los valores de una columna para operaciones de listado estadistico.
PH12020500209A PH12020500209A1 (en) 2017-08-07 2020-01-28 Column value-based separate authorization method for statistical list operations
CONC2020/0001275A CO2020001275A2 (es) 2017-08-07 2020-02-05 Procedimiento de autorización por separado basado en los valores de una columna para operaciones de listado estadístico

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710668290.0A CN107480556A (zh) 2017-08-07 2017-08-07 基于列值对统计列表操作权限进行分别授权的方法
CN201710668290.0 2017-08-07

Publications (1)

Publication Number Publication Date
WO2019029500A1 true WO2019029500A1 (zh) 2019-02-14

Family

ID=60598837

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/099066 WO2019029500A1 (zh) 2017-08-07 2018-08-06 基于列值对统计列表操作权限进行分别授权的方法

Country Status (12)

Country Link
US (1) US11232226B2 (zh)
EP (1) EP3667539A4 (zh)
JP (1) JP7231911B2 (zh)
KR (1) KR20200032222A (zh)
CN (2) CN107480556A (zh)
AU (1) AU2018314916A1 (zh)
BR (1) BR112020002586A2 (zh)
CO (1) CO2020001275A2 (zh)
MX (1) MX2020001459A (zh)
PE (1) PE20200670A1 (zh)
PH (1) PH12020500209A1 (zh)
WO (1) WO2019029500A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107358093A (zh) * 2017-07-11 2017-11-17 成都牵牛草信息技术有限公司 通过第三方字段对表单字段的字段值进行授权的方法
CN107480544A (zh) * 2017-08-07 2017-12-15 成都牵牛草信息技术有限公司 统计列表操作权限授权方法
CN107480556A (zh) * 2017-08-07 2017-12-15 成都牵牛草信息技术有限公司 基于列值对统计列表操作权限进行分别授权的方法

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102902767A (zh) * 2012-09-25 2013-01-30 北京科东电力控制系统有限责任公司 一种表格快速搭建的方法及系统
CN105426769A (zh) * 2015-10-30 2016-03-23 歌尔声学股份有限公司 角色权限的动态控制方法及系统
CN107292588A (zh) * 2017-07-01 2017-10-24 成都牵牛草信息技术有限公司 根据表单字段值对表单操作权限进行分别授权的方法
CN107315931A (zh) * 2017-07-05 2017-11-03 成都牵牛草信息技术有限公司 表单字段值操作权限授权方法
CN107330344A (zh) * 2017-07-01 2017-11-07 成都牵牛草信息技术有限公司 一种表单的关联信息授权方法
CN107340951A (zh) * 2017-07-13 2017-11-10 成都牵牛草信息技术有限公司 基于角色获取的表单数据的授权方法
CN107480556A (zh) * 2017-08-07 2017-12-15 成都牵牛草信息技术有限公司 基于列值对统计列表操作权限进行分别授权的方法
CN107480544A (zh) * 2017-08-07 2017-12-15 成都牵牛草信息技术有限公司 统计列表操作权限授权方法

Family Cites Families (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5751949A (en) * 1995-05-23 1998-05-12 Mci Corporation Data security system and method
JP2001118009A (ja) * 1999-10-18 2001-04-27 Internatl Business Mach Corp <Ibm> 電子帳票の取得方法、電子帳票システム、電子帳票を取得するプログラムを格納した記憶媒体
US7305392B1 (en) * 2001-11-02 2007-12-04 Apex Innovations, Inc. Multi-organizational project management system
US7240046B2 (en) * 2002-09-04 2007-07-03 International Business Machines Corporation Row-level security in a relational database management system
US7155612B2 (en) * 2003-04-30 2006-12-26 International Business Machines Corporation Desktop database data administration tool with row level security
JP2005258591A (ja) * 2004-03-09 2005-09-22 Hitachi Information Systems Ltd データベースアクセス制御システム
US7571490B2 (en) * 2004-11-01 2009-08-04 Oracle International Corporation Method and apparatus for protecting data from unauthorized modification
US7613711B2 (en) * 2005-06-14 2009-11-03 Microsoft Corporation Specification of a hierarchical authorization model for a DBMS—SQL language extensions
US7243097B1 (en) * 2006-02-21 2007-07-10 International Business Machines Corporation Extending relational database systems to automatically enforce privacy policies
JP2007280181A (ja) * 2006-04-10 2007-10-25 Fuji Xerox Co Ltd 電子文書の処理プログラム及び電子文書の処理装置
CN100498792C (zh) * 2007-06-08 2009-06-10 北京神舟航天软件技术有限公司 数据库表行级数据的自主访问控制方法
CN101373527A (zh) * 2007-08-24 2009-02-25 上海全成通信技术有限公司 系统参与人的权限控制方法
JP2010067064A (ja) * 2008-09-11 2010-03-25 Konica Minolta Business Technologies Inc 情報処理装置
US20100262625A1 (en) * 2009-04-08 2010-10-14 Glenn Robert Pittenger Method and system for fine-granularity access control for database entities
CN101714196A (zh) * 2009-11-20 2010-05-26 上海电机学院 基于周期时间的权限委托方法
US20110231322A1 (en) * 2010-03-16 2011-09-22 Copyright Clearance Center, Inc. Automated rules-based rights resolution
CN102354356B (zh) * 2011-09-29 2014-06-04 用友软件股份有限公司 数据权限管理装置和方法
US9002890B2 (en) * 2012-03-14 2015-04-07 International Business Machines Corporation Rule-based access control list management
US10447737B2 (en) * 2012-07-03 2019-10-15 Salesforce.Com, Inc. Delegating administration rights using application containers
US9497173B2 (en) * 2012-07-27 2016-11-15 Safelyfiled.Com, Llc System for the unified organization, secure storage and secure retrieval of digital and paper documents
CN103971036B (zh) * 2013-01-28 2017-03-01 深圳学无国界教育科技有限公司 页面栏位权限控制系统及方法
CN104463005A (zh) * 2013-09-25 2015-03-25 天津书生投资有限公司 一种控制电子文档的访问权限的方法
US20150120591A1 (en) * 2013-10-31 2015-04-30 Avaya Inc. Unified control of employee access to employer communications systems during periods of employee furlough
US10438008B2 (en) * 2014-10-30 2019-10-08 Microsoft Technology Licensing, Llc Row level security
CN106384057B (zh) * 2016-04-27 2017-09-15 平安科技（深圳）有限公司 数据访问权限识别方法和装置
CN106779619B (zh) * 2016-12-30 2024-02-02 全民互联科技（天津）有限公司 一种完善业务审批的审核加签方法及系统
US20200272750A1 (en) * 2019-02-27 2020-08-27 Sourcecode Technology Holdings, Inc. Methods and systems for extending row-level security policies

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102902767A (zh) * 2012-09-25 2013-01-30 北京科东电力控制系统有限责任公司 一种表格快速搭建的方法及系统
CN105426769A (zh) * 2015-10-30 2016-03-23 歌尔声学股份有限公司 角色权限的动态控制方法及系统
CN107292588A (zh) * 2017-07-01 2017-10-24 成都牵牛草信息技术有限公司 根据表单字段值对表单操作权限进行分别授权的方法
CN107330344A (zh) * 2017-07-01 2017-11-07 成都牵牛草信息技术有限公司 一种表单的关联信息授权方法
CN107315931A (zh) * 2017-07-05 2017-11-03 成都牵牛草信息技术有限公司 表单字段值操作权限授权方法
CN107340951A (zh) * 2017-07-13 2017-11-10 成都牵牛草信息技术有限公司 基于角色获取的表单数据的授权方法
CN107480556A (zh) * 2017-08-07 2017-12-15 成都牵牛草信息技术有限公司 基于列值对统计列表操作权限进行分别授权的方法
CN107480544A (zh) * 2017-08-07 2017-12-15 成都牵牛草信息技术有限公司 统计列表操作权限授权方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3667539A4 *

Also Published As

Publication number Publication date
CN107480556A (zh) 2017-12-15
US20200364364A1 (en) 2020-11-19
PH12020500209A1 (en) 2020-10-12
CO2020001275A2 (es) 2020-05-15
AU2018314916A1 (en) 2020-03-19
EP3667539A1 (en) 2020-06-17
PE20200670A1 (es) 2020-06-11
EP3667539A4 (en) 2021-06-30
MX2020001459A (es) 2020-09-18
US11232226B2 (en) 2022-01-25
BR112020002586A2 (pt) 2020-07-28
JP7231911B2 (ja) 2023-03-02
JP2020530614A (ja) 2020-10-22
CN109086418A (zh) 2018-12-25
CN109086418B (zh) 2021-05-07
KR20200032222A (ko) 2020-03-25

Similar Documents

Publication Publication Date Title
CN108764833B (zh) 工作流审批节点按部门设置审批角色的方法
WO2018196876A1 (zh) 基于角色对用户一对一的工作流控制方法和系统
WO2019007260A1 (zh) 表单字段值操作权限授权方法
WO2018210248A1 (zh) 基于表单字段的工作流审批节点设置审批角色的方法
CN108984715B (zh) 基于依据字段设置审批流程的方法
WO2019029650A1 (zh) 表单数据操作的审核方法
WO2019029501A1 (zh) 统计列表操作权限授权方法
WO2019007292A1 (zh) 基于角色的表单操作权限授权方法
WO2018210245A1 (zh) 工作流及其审批节点的表单字段操作权限的设定方法
CN108550029B (zh) 工作流审批节点按部门级别设置审批角色的方法
WO2018214890A1 (zh) 工作流审批节点按角色设置审批角色的方法
WO2018192557A1 (zh) 基于角色对用户的一对一的权限授权方法和系统
WO2019015539A1 (zh) 一种表单数据操作权限授权方法
WO2019015656A1 (zh) 一种系统派工方法
WO2019007291A1 (zh) 根据表单字段值对表单操作权限进行分别授权的方法
WO2019007210A1 (zh) 一种表单的关联信息授权方法
WO2019011162A1 (zh) 快捷功能设置方法
WO2019029500A1 (zh) 基于列值对统计列表操作权限进行分别授权的方法
US20200143068A1 (en) Method for authorizing field value of form field by means of third party field
WO2018205940A1 (zh) 基于角色对用户的一对一的组织结构图生成及应用方法
WO2019001322A1 (zh) 基于角色的菜单授权方法
WO2019024899A1 (zh) 监察审批操作、授权操作及表单操作的方法
OA19402A (en) Column value-based separate authorization method for statistical list operations.
OA19403A (en) Statistical list operation permission authorization method.

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18845196

Country of ref document: EP

Kind code of ref document: A1

DPE1 Request for preliminary examination filed after expiration of 19th month from priority date (pct application filed from 20040101)
ENP Entry into the national phase

Ref document number: 2020505857

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

REG Reference to national code

Ref country code: BR

Ref legal event code: B01A

Ref document number: 112020002586

Country of ref document: BR

ENP Entry into the national phase

Ref document number: 20207006540

Country of ref document: KR

Kind code of ref document: A

ENP Entry into the national phase

Ref document number: 2018845196

Country of ref document: EP

Effective date: 20200309

ENP Entry into the national phase

Ref document number: 2018314916

Country of ref document: AU

Date of ref document: 20180806

Kind code of ref document: A

ENP Entry into the national phase

Ref document number: 112020002586

Country of ref document: BR

Kind code of ref document: A2

Effective date: 20200206