CN108764691A - Setting method based on the approval node of countersign in approval process - Google Patents

Abstract

The invention discloses a kind of setting methods based on the approval node of countersign in approval process, including following sequential steps：The first step：It is countersign that approval node, which is arranged, to examine mode, and countersign node summarizes the countersign opinion of all node examination & approval roles, reference is provided for the examination & approval role of posterior approval node；Second step：One or more examination & approval roles of countersign node are set.The present invention conutersigns node and summarizes countersign opinion, and strong reference is provided for the examination & approval role of posterior approval node.The main body of review operation is role in workflow, and this role is independent individual, is changed even if employee/user occurs, the role that only need to be associated with new employee again in approval process；Either employee's power of examination and approval changes, and specific aim adjusts role's power of examination and approval, and without resetting/adjusting flow, setting is convenient, will not malfunction or omit, not interfere with the normal operation of enterprise, greatly improve the reliability of workflow.

Description

Setting method based on the approval node of countersign in approval process

Technical field

The present invention relates to a kind of approval node measures and procedures for the examination and approval of the management software systems such as ERP, are based on more particularly to one kind Setting method of the approval node of countersign in approval process.

Background technology

Access control based roles（RBAC）It is a kind of data base authority pipe the most studied in recent years, that thought is most ripe Reason mechanism, it is considered as substituting traditional forced symmetric centralization（MAC）And self contained navigation（DAC）Ideal candidates.It passes The flexibility of the self contained navigation of system is high but safety is low, and forced symmetric centralization is safe but limitation is too strong；It is based on Both access controls of role have both, and are not only easy to manage and reduce complexity, cost and the probability that mistake occurs, thus Great development has been obtained in recent years.Access control based roles（RBAC）Basic thought be according in business organization's view Different functional posies divide different roles, and the access rights of database resource are encapsulated in role, and user is by being assigned It gives different roles and carrys out dereference database resource.

A large amount of table and view are often all had in large-scale application system, this makes management to database resource and awards Adaptability in tactics obtains sufficiently complex.The access and receiving and grant for permission that database resource is directly managed by user are very difficult, it is needed User is very thorough to the understanding of database structure, and is familiar with the use of sql like language, once and application system structure or peace Full demand is changed, and will carry out large amount of complex and cumbersome mandate changes, and is very easy to occur some and unexpected is awarded Security breaches caused by power error.Therefore, it is that large-scale applied system design one kind is simple, efficient right management method has become For the common requirements of system and system user.

The mechanism of authorization control of based role can carry out the access rights of system simple, efficient management, greatly The burden and cost of System right management are reduced, and System right management is made to be more in line with the service management of application system Specification.

However, the user authority management of traditional based role and Work-flow control method are all made of, " role is to user's a pair It is more " relation mechanism, " role " is group/class property, i.e. a role can correspond to/be associated with multiple users, role class simultaneously The concepts such as post/position/work post are similar to, following three kinds of forms are divided into substantially to the mandate of user right under this relation mechanism： 1, as shown in Figure 1, directly being authorized to user, the disadvantage is that heavy workload, frequent operation and trouble；Approval node in approval process Review operation main body is user, and workflow approval node directly selects employee/user as examination & approval main body, changed when employee occurs （Such as transfer-position is left office）, all flows which is related to have to be adjusted accordingly, especially for company management people Member, the approval process being related to is more, and the heavy workload, complicated of flow adjustment is easy error or omits, influences the normal of enterprise Operation, or even cause unpredictable loss.

Even if only employee's power of examination and approval changes, it is also desirable to corresponding adjustment is made to the flow that the employee is related to, There is also problems like above.

2, as shown in Fig. 2, to role（Class/group/post/work post property）It is authorized（One role can be associated with multiple User）, for user by role's acquisition permission, review operation main body is group/class property role；3, as shown in figure 3, both the above side Formula combines.

In above statement, 2,3 are required to authorize the role of class/group property, and pass through class/group/post/work post The role of property authorize and the mode of Work-flow control has the disadvantage that：1, operation when user right changes is difficult：In reality During the system use on border, often because needing to be adjusted the permission of user during operation, such as：In processing person When work permission changes, some employee's permission of role association changes, we cannot be due to the variation of individual employee's permissions Change the permission of entire role, because the role is also associated with the unchanged employee of other permissions.Therefore in order to cope with this kind of situation, New role is created to meet the changed employee of the permission or directly be authorized according to permission demand to the employee（It is de- Digression color）.Both the above processing mode, in the case where role-security is more, to role authorization, not only required time is long, but also It is easy to make a mistake, user operates cumbersome and bothers, and is also easy the loss caused to system user that malfunctions.

When the power of examination and approval of employee/user changes or employee/user is detached from role, and workflow approval node is straight Selecting selects employee/user as examination & approval main body or newly-increased role to meet the requirement of approval process.First way works as hair Resiurce of student's work changes（Such as transfer-position is left office）, all flows which is related to have to be adjusted accordingly, especially for public affairs Administrative staff are taken charge of, the approval process being related to is more, and the heavy workload, complicated of flow adjustment is easy error or omits, influences to look forward to The normal operation of industry, or even cause unpredictable loss.Even if only employee's power of examination and approval changes, it is also desirable to the member The flow that work is related to makes corresponding adjustment, and there is also problems like above.The second way, newly-increased role are just related to role Newly-built, association, authorize work, especially in the case where role is more, user of role association is also more, which role is specifically associated with A little users are difficult to remember.

2, to remember that the concrete power limit that role includes is difficult for a long time：If the privilege feature point of role is relatively more, for a long time, very Difficulty remembers the concrete power limit of role, it more difficult to remember the permission difference between role similar in permission, the permission of close role is also very It is easy to obscure；To be associated with new user, how be unable to judge accurately should select to be associated with.

3, because user right changes, it will cause role's establishment is more and more（If not creating new role, can substantially increase Add the mandate directly to user）, it more difficult to distinguish the specific difference of each role-security.

4, when transfer-position, to other several users will be given to undertake by many a authority distributions of transfer-position user, then when handling It must will be distinguished by these permissions of transfer-position user, create role to be again respectively associated with other several users, such behaviour Make not only complicated and time consumption, but also mistake also easily occurs.

Invention content

It is flowed in examination & approval based on the approval node of countersign it is an object of the invention to overcome the deficiencies of the prior art and provide a kind of The examination & approval mode of setting method in journey, approval node may be selected（Setting）For countersign, countersign node, which summarizes all nodes, to be examined The countersign opinion for criticizing role, strong reference is provided for the examination & approval role of posterior approval node；Using the examination & approval stream of based role Process control method, the main body of review operation is role in workflow, only need to be by user again when employee/user changes The role or specific aim being associated in approval process adjust the role-security, without resetting flow, setting side Just.

The purpose of the present invention is achieved through the following technical solutions：Based on the approval node of countersign in approval process Setting method, an approval process includes a start node, at least one approval node, an end node, including Following sequential steps：The first step：It is countersign that approval node, which is arranged, to examine mode, which is referred to as countersign node, countersign section Point summarizes the countersign opinion of all node examination & approval roles, and reference is provided for the examination & approval role of posterior approval node；Described Countersign opinion includes agreeing to/passing through（Certainly property）, disagree/do not pass through（Negate property）；Second step：Countersign node is set One or more examination & approval role.

The examination & approval role is independent individual rather than group/class, and the same period, one examination & approval role can only be associated with uniquely User, and user-association one or more examines role.

Approval process could be entered by only conutersigning after all examination & approval roles involved by node submit countersign opinion Subsequent step；What countersign node obtained is that the countersign opinion of all examination & approval roles of the node summarizes, regardless of conutersigning opinion, Countersign node cannot all reject approval process.

It cannot terminate flow to conutersign node in approval process, at least one in the subsequent node of the countersign node is non- The approval node of countersign.

Setting method based on the approval node of countersign in approval process further includes one and is arranged one for countersign node The step of being responsible for role is responsible for the next stage circulation node that role selects the countersign node in countersign, is saved when next stage circulates Point have multiple optional times, by be responsible for role selecting one of them.

Setting method based on the approval node of countersign in approval process further includes a setting examination & approval role to examination & approval The step of form fields content that flow is related to checks permission, the different examination & approval roles of same countersign node are to form fields content Check that permission can be different.

It is after conutersigning that approval node, which is arranged, to examine mode, and all examination & approval roles involved by the countersign node are to approval process Form fields content do not have modification authority.

The generation of the approval process includes the following steps：S1：The Three-tier Architecture Model of user-role-permission is built, In：Role's layer：The operating main body of workflow examination and approval is role in workflow, and each role is independent individual rather than group/class, together One role of period one can only be associated with unique user, and a user-association one or more role；Permission layer：By workflow Permission needed in execution is constituted, and permission directly licenses to role；Client layer：User is determined by associated role and is examined The examination & approval task in flow is criticized, and review operation is carried out with the permission of association role；S2：It is generated and is examined based on Three-tier Architecture Model Flow, an approval process include a start node, at least one approval node, an end node：Start node：It examines Flow is criticized to start；Approval node：Setting approval node examines mode and selects examination & approval role, and is authorized to examination & approval role； End node：Approval process terminates；S3：User determines the required examination & approval task handled according to its associated role, and according to pass The permission of the role of connection carries out review operation.

The second step uses examination & approval role's setting method based on form fields and rank, specifically includes a setting The step of the step of system organization structure and one are by department rank setting examination & approval role：The step of the setting system organization structure Suddenly include following sub-step：SS1：Create department and role included in system organization structure；SS2：It is arranged between each department Hierarchical relationship, and the department manager role of each department is set；The step of setting examination & approval role by department rank includes： SSS1:Selection carries out the setting of examination & approval role in a manner of by rank；SSS2:Selection approval process corresponds to role's property in list One submitted in role of field, department's property field or the approval process, as rank main body；SSS3:It fills in specific Rating value n, the positive integer that n is >=0（The replacement of other symbols, such as a, b, c, d, the big level-ones of b ratio a, c can also be used in the value of N Two-stage bigger than a, the big three-levels of d ratio a, and so on）：（1）Approval process is selected to correspond to role's property field in list as grade Other main body, using the field, corresponding role judges rank as criterion：1. as n=0, by the field, corresponding role serves as The examination & approval role of the approval node；2. as n=1, this is served as by the department manager role of the corresponding role department of the field The examination & approval role of approval node；If the corresponding role of the field is the department manager role of its department, by the field pair The department manager role of the upper level department for the role department answered serves as the examination & approval role of the approval node；3. as n=2, The examination & approval role of the approval node is served as by the department manager role of the upper level department of the corresponding role department of the field； 4. as n=3, which is served as by the department manager role of the upper upper level department of the corresponding role department of the field The examination & approval role of point；5. as n=4, by the department manager angle of the Shang Shang upper levels department of the corresponding role department of the field Color serves as the examination & approval role of the approval node；6. and so on；7. when the other setting of department level is more than in system organization structure When highest level department, the examination & approval role of the approval node is served as by the department manager role of highest level department；8. when n >=1 When, needing setting, " the corresponding role of the field is the department manager role of its department, and the supreme primary department of the department When " approval node examined by designated groups；（2）Approval process is selected to correspond to department's property field in list as rank master Body, using the field, corresponding department judges rank as criterion：1. as n=0, by the department master of the corresponding department of the field Limb color serves as the examination & approval role of the approval node；2. as n=1, by the department of the upper level department of the corresponding department of the field Supervisor role serves as the examination & approval role of the approval node；3. as n=2, by the upper upper level department of the corresponding department of the field Department manager role serves as the examination & approval role of the approval node；4. as n=3, by the upper upper level of the corresponding department of the field The department manager role of department serves as the examination & approval role of the approval node；5. and so on；6. when the other setting of department level is more than When highest level department in system organization structure, examining for the approval node is served as by the department manager role of highest level department Criticize role；7. as n >=1, need setting when primary department " the corresponding department of the field supreme " approval node by designated groups Examination & approval；（3）It selects the submission role of approval process as rank main body, judges rank using submission role as criterion：① As n=0, the examination & approval role of the approval node is served as by workflow approval process submission role；2. as n=1, examined by workflow Criticize the examination & approval role that flow submits the department manager role of role department to serve as the approval node；If it to submit by its role In the department manager role of department, then by submitting the department manager role of the upper level department of role department to serve as the examination & approval The examination & approval role of node；3. as n=2, the department master of the upper level department of role department is submitted by workflow approval process Limb color serves as the examination & approval role of the approval node；4. as n=3, the upper of role department is submitted by workflow approval process The department manager role of upper level department serves as the examination & approval role of the approval node；5. as n=4, carried by workflow approval process The department manager role of the Shang Shang upper levels department of angle of cut color department serves as the examination & approval role of the approval node；6. with such It pushes away；7. when the other setting of department level is more than the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination & approval role of the approval node；8. as n >=1, needing setting, " it is the portion of its department to submit role Door supervisor role, and when the supreme primary department of the department " approval node is examined by designated groups；Designated groups examination & approval include with One kind in lower three kinds of situations：（1）Designated groups examine role construction by one or more；（2）Designated groups determine by department's rank, It selects that when rank main body the selected rank main body of the approval node can only be continued to use, and rating value n may be only configured to 0；（3）Refer to Determine group to be determined by department's rank, rank main body can be selected independently, and designated groups include one or more specified nodes, when specified The rating value n of node must be provided with next stage and specify node when being non-zero, should when it is 0 to specify the rating value n of node The designated groups of approval node are provided with.

Setting method based on the approval node of countersign in approval process, an approval process include one and start to save Point, at least one approval node, an end node, including following sequential steps：The first step：Approval node is set and examines mode For countersign, which is referred to as countersign node, and countersign node summarizes the countersign opinion of all node examination & approval roles, for rear Approval node examination & approval role provide reference；Second step：One or more examination & approval roles of countersign node are set；Further include one The step of a setting countersign node is anonymous countersign, after being set as anonymous countersign, in addition to examination & approval role oneself it can be seen that Other than the countersign opinion of oneself, other non-examination & approval role can not see the countersign opinion that examination & approval role submits.

The beneficial effects of the invention are as follows：1, the examination & approval mode of approval node may be selected（Setting）For countersign, countersign node converges The countersign opinion of total all node examination & approval roles, strong reference is provided for the examination & approval role of posterior approval node.

Such as：Before contract signing, sales force 5 can initiate a countersign flow（I.e.：The approval process includes a meeting Sign node）, sales department, production department, Finance Department's countersign expression of opinion may be selected（I.e. selection represents the role of three above department, Express the countersign opinion of respective department）, it is necessary to just enter in next step after all submitting countersign opinion, general manager can refer to when examining The countersign opinion that everybody provides.

Conutersign is with the difference of ballot：Countersign only solicits everybody and offers an opinion, and only opinion summarizes, for follow-up examination & approval Reference is provided, regardless of opinion is conutersigned, cannot all reject approval process.And when voting, the approval results of the approval node by The voting results of voter determine, can obtain an approval results：It disagrees by/agree to or not by/, examination & approval can be rejected Flow.

2, the different examination & approval roles of same countersign node check that permission can be different to form fields content, and use is more square Just, applied widely, it is easy to implement hiding for part sensitivity field, avoids causing information leakage.

Such as：To Mr. Yu's contract approval flow, conutersigns the examination & approval role of the sale correlation in node and could be provided as to look into See all fields；The related examination & approval role of production could be provided as to check product type field in contract list, product number Measure field, technical indicator field, time of delivery field；Financial correlation approver could be provided as to check in contract list Product type, production unit cost, contract value, information of making out an invoice, payment method field.

3, role is examined in selection after must first determining examination & approval mode, some examination & approval roles are to table when avoiding first selecting examination & approval role Single field contents have modification authority, countersign examination & approval are cannot achieve if form fields content is changed, because of each examination & approval angle Color is being examined parallel, and modification form data can influence other examination & approval role's examination & approval.After examination & approval mode is determined as countersign, system then limits All examination & approval roles being related to are made all without list modification authority, it is ensured that content is conutersigned in objective embodiment.

Citing：It is conutersigned before contract signing and whether signs the contract, set 5 examination & approval roles, contract value is 100,000, such as Fruit first selects examination & approval role, and examines the modification authority for having certain examination & approval role A to have to the amount of money in role, and contract value is changed It is 80,000, the contract value that other examination & approval roles see when examining can then become 80,000, be based on modified treaty content into guild Label examination & approval will be without in all senses.

4, when approval node is only there are one when examination & approval role, countersign mode can also be selected, it is therefore an objective to allow examination & approval role The only right of opinion expression, and list content cannot be changed.

5, provide anonymous countersign function, after being set as anonymous and conutersigning, in addition to examination & approval role oneself it can be seen that oneself Countersign opinion other than, other non-examination & approval role can not see examination & approval role submit countersign opinion, avoid examination & approval angle It is influenced each other between color, ensures the authenticity and confidence level of countersign result.

6, traditional rank examination & approval mode can only submit role to judge that department level is other as criterion using approval process, nothing For the self-defined other roles or department to be arrived involved in list of method as the other standard of department level is judged, there are certain to use office It is sex-limited.

Citing：For a contract approval flow, the signing role of contract asks for leave, its colleague is allowed to initiate one for him The examination & approval of contract, and system assert its colleague be flow submission role, when being examined by rank for the judgement of rank with Its work together subject to, can not it is objective embody contract signing role where department and position.For example, the signing role of contract is market The sales force 1 in portion, colleague role are the research staff 1 of research and development department, and the contract should be by signing role department originally Supervisor-market department's supervisor's role's examination & approval, when the examination & approval rank that approval node is arranged is 1, system can be distributed to where research staff 1 The supervisor of department-Head of R&D role examines, and the assignment error of approval process occurs, inconvenient to use.

The application can self-defined role's property field, department's property field or submission to be arrived involved in list as needed Role, for example, when approval node is arranged, can select the signing role in contract list as the other standard of department level is judged As rank main body, to sign role（Rather than it is defaulted as submitting role simply）Judge that department level is other as standard, is determined with this It is that market department is responsible for role to examine role, and use is more flexible, conveniently, versatile.

7, system provides the examination & approval mechanism of highest level department manager, and avoiding the occurrence of highest level department manager can not lead to Cross the problem of rank examination & approval mode completes approval process.

Citing：When the highest leader president of enterprise submits approval request, in rank examination & approval, though president not on Grade department, but provided with designated groups come examine president submission approval request.

Designated groups examination & approval include one kind in following three kinds of situations：1. designated groups examine role construction by one or more, For example, constituting designated groups by the member of multiple supervisions board, the approval request of president is examined by supervision board member；2. specifying Group is determined by department's rank, selects that when rank main body the selected rank main body of the approval node, and rating value n can only be continued to use It may be only configured to 0；Such situation is for coping with the case where organization structure of the enterprise changes, for example, certain company's original highest level Supervisor is general manager, and the board of directors is additionally arranged after changes in microstructure, and highest level supervisor becomes president, approval node middle rank Other numerical value examines role for 0 and automatically becomes president, rather than is fixed as general manager, and avoiding the occurrence of examination & approval role cannot be adapted to The problem of changes in microstructure；3. designated groups are determined by department's rank, rank main body can be selected independently, and designated groups include one A or multiple specified nodes must be provided with the specified node of next stage when the rating value n of specified node is non-zero, until specified When the rating value n of node is 0, the designated groups of the approval node are provided with；Such situation is examined suitable for common department role The approval request that highest department manager is submitted is criticized, is submitted for example, the financial executive of Finance Department can audit president Contract approval request involved in information of making out an invoice, finally to be confirmed by president.

8, approval node setting examine role when department rank n could be provided as 0, i.e., select submission role itself as Examination & approval role in approval node can be by submitting role itself to carry out examination & approval confirmation before approval process terminates, and selection is different It can return to after meaning and examine again, selection is agreed to enter next link, has had more submission role's proceedings for revision, avoids the occurrence of examination & approval knot Fruit is incorrect or approval results need to create with submitting the expection of role not to be inconsistent（It resubmits）The problem of approval process, is reduced System in-fighting, improves approval process efficiency and reliability.

Citing：Submit role to have submitted one 10000 yuan of reimbursement approval request, because submit role submitted in have Mistake or other reasons, approval reimbursed sum is modified to 500 yuan after multistage is examined, before approval process terminates, by carrying Angle of cut color carries out review as examination & approval role and confirms and can pinpoint the problems, and selection can return to after disagreeing and examine again, and selection is same Meaning enters next link, without newly-built（It resubmits）One approval process.

9, by way of by department rank setting examination & approval role, system workflow designer is when role is examined in setting Only rank main body need to be selected and input rating value, multiple approval processes can effectively integrate in an approval process, Circulation condition and circulation circuit can be effectively reduced, reduces the workload of system workflow designer, the system of improving can By property.Such as：In expense reimbursement approval process, examined in an approval node degree of establishment（It selects to submit role to be rank Main body）, and be arranged department level not Wei 1, then all expense reimbursements the approval node automatically as submit role where department Department manager role examine.

10, the main body of review operation is role in workflow, and this role be it is independent individual rather than traditional group/ The role of class property changes even if employee/user occurs（Such as transfer-position is left office）, only new employee need to be associated with to examination & approval again Role in flow；Either employee's power of examination and approval changes, and specific aim adjusts role's power of examination and approval, is not necessarily to Flow is reset/adjusts, setting is convenient, will not malfunction or omit, not interfere with the normal operation of enterprise, greatly improve work Make the reliability flowed.It is the examination & approval authorisation body for examining link node with the role of post property, user is determined by role It has which examination & approval task, user to carry out review operation by the permission of association role；Understand clear simple, each post Number/role of station property is the least unit of operative body, for each role to the different demands of examination & approval, the application is equal It can meet very well.

11, the application role is one-to-one relationship to user, and the same period, one role can only be associated with unique user, The advantage of doing so is that as long as associating a user to role can be obtained permission（I.e. user obtains the power of its associated role Limit）, and the permission modification of role much less than the user right change in traditional mechanism.Independent volume property（Post number/work Position property）Role's quantity variation it is small, although employee turnover is big, the variation of post number/station number is small（Even in a timing Do not change in section, i.e., role does not change）, the rights management of user will be greatly simplified in this way, reduces the expense of system.

12, dynamic management, registration transfer-position etc. is simple to operate, efficient, and reliability is high：Registration/leaving office/transfer-position exists Application in approval process is simple, and the operating main body of the examination & approval of workflow is role, is not had to when employee/user changes Reset approval process（User need to only cancel or association role：No longer hold a post the post number/station number role use The role association is just cancelled at family, and the role in the user-association of the role post number of the catcher tenure post number/station number is then closed The user for joining the role just obtains inter-related task and permission of the role in examination and approval workflow automatically, without to examination and approval work Stream is reset or is authorized again to the role in workflow, and efficiency, the safety of flow setting are greatly improved Property and reliability.

Citing：Because reasons, the Zhang San such as Zhang San user's leaving office or transfer-position no longer do the work of " purchasing agent 3 " this role, then Zhang San eliminates to be associated with the role；In addition Li Si's catcher does the work of " purchasing agent 3 " this role, then should by Li Si's association Role, then Li Si automatically obtained in approval process the examination & approval task and the power of examination and approval of " purchasing agent 3 " this role.

13, role definition is one-to-many to user for properties, roles such as group, work post, classes by traditional rights management mechanism Relationship, during actual system use, often because operation during need to be adjusted the permission of user, than Such as：When handling the variation of employee's permission, the permission of some employee of role association changes, we cannot be individual because of this The variation of employee's permission and the permission for changing entire role, because the role is also associated with the unchanged employee of other permissions.Therefore Meet the changed employee of the permission or to the employee according to power to cope with this kind of situation or create new role Limit demand directly authorizes（It is detached from role）.Both the above processing mode, not to role authorization in the case where role-security is more Long the time required to only, and be easy to make a mistake, user operates cumbersome and trouble, and being also easy error causes to system user Loss.

But under the present processes, because role is an independent individual, then it can select to change role-security i.e. It can reach purpose.The present processes while it seem that can increase workload in system initialization, but can pass through duplication etc. Method makes it create the efficiency of role or mandate higher than tradition using group as the role of property, because without considering that property is group Intercommunity of the role when meeting association user, application scheme can allow priority assignation clear, be illustrated；Especially used in system After a period of time（User/role-security dynamic change）, this application scheme can be that system user increases substantially system use In rights management efficiency, keep dynamic authorization simpler, be more convenient, it is apparent, clear, improve the efficiency of priority assignation and reliable Property.

14, tradition is easy error by the role authorization method of property of group, and the application method significantly reduces mandate error Probability because the application method need to only be considered as the role of independent individual, and without considering to be associated with the group under conventional method Which intercommunity multiple users of property role have.That user for being associated with the role is only influenced authorizing error, And tradition can then influence all users for being associated with the role with the role of group property.Even if there is permission grant mistake, this Shen Modification method please is simple, the time is short, and tradition needs consideration to be associated with the role with the role of group property when correcting mistake All users permission intercommunity, not only modification trouble, complicated in the case of more than the function point is very easy to error, and very Can only newly create role in the case of more could solve.

15, in tradition using group as under the role authorization method of property, if the privilege feature point of role is relatively more, the time one It is long, it is difficult to remember the concrete power limit of role, it more difficult to the permission difference between role similar in permission is remembered, to be associated with new use Family, how be unable to judge accurately should select to be associated with.The role of the application method inherently has the property of post number/station number Matter selects very clear.

16, when transfer-position, to other several users will be given to undertake by many a authority distributions of transfer-position user, then when handling It must will be distinguished by these permissions of transfer-position user, create role to be again respectively associated with other several users, such behaviour Make not only complicated and time consumption, but also mistake also easily occurs.

The application method is then：By the several roles of transfer-position user-association, in transfer-position, cancel user and former department first The association of interior role（These roles being cancelled can be again associated with to other users）, then by user and new department Interior role is associated.It is easy to operate, it will not malfunction.

17, role belongs to department, then the department of the role cannot be replaced, and why not role can replace department：Reason By 1：Because role's property of the application is equal to a station number/post number, in the work in different stations number/post number Appearance/permission is different, if 1 role of developer of 1 role of salesman and engineering department under sales department are completely not Two same station number/posies number, permission are different；Reason 2：If by the affiliated function of 1 role of salesman（Sales department） It is changed to technology department, the permission of 1 this role of sales force is constant, then there is possess sales department's permission one in technology department Role can lead to managerial confusion and security breaches in this way.

18, a role can have in the same approval process is somebody's turn to do in different approval nodes, different approval nodes Examination & approval role can be different to the checking of form fields, modification authority.Advantage is illustrated：Certain role is Chengdu sales manager 3, in contract In examination and approval workflow, it is present in Chengdu sales contract examination & approval and Shanghai sales contract examines two approval nodes；For Chengdu The approval node of sales contract, in examination & approval, the role can check customer name, contact person, contact method, the product of the contract The whole field contents such as quantity, production unit cost, contract value, and production unit cost, contract value can be changed；But it sells and closes in Shanghai Same approval node can not but check the sensitive field contents such as customer name, contact person, contact method, can not change （But it can also be set as having and check permission, without modification authority）.So, free burial ground for the destitute setting role can be made by oneself to flow in examination & approval Permission in journey.

One or more examination & approval roles are selected in approval node, the permission of examination & approval role are set in approval node, for every Each of a approval node examination & approval role can carry out independent priority assignation.Such as：In the approval process of a contract list In, there is some approval node to be provided with 2 examination & approval roles, role A can be arranged it can be seen that the conjunction in respectively role A, role B With the value of contract value field and the field in list, it can also be seen that the customer address field in the contract list and the word The value of section；Role B is set and cannot see that contract value field in contract list, or can see contract value field but can't see The value of the field can show when can't see value with other symbols, such as No. *, and role B is it can be seen that client in the contract list The value of address field and the field.

Description of the drawings

Fig. 1 is the schematic diagram that system directly authorizes user in background technology；

Fig. 2 is the schematic diagram that system authorizes group/class property role in background technology；

Fig. 3 is the schematic diagram that system directly authorizes user and is combined to group/class property role authorization in background technology；

Fig. 4 is system organization structure dendrogram in embodiment；

Fig. 5 is workflow generation method flow diagram of the present invention；

Fig. 6 is the schematic diagram that present system authorizes user by independent individual property role；

Fig. 7 is workflow approval process schematic diagram of the present invention；

Fig. 8 is user of the present invention-role authorization method flow diagram.

Specific implementation mode

Technical scheme of the present invention is described in further detail below in conjunction with the accompanying drawings, but protection scope of the present invention is not limited to It is as described below.

【Embodiment 1】As shown in fig. 7, the setting method based on the approval node of countersign in approval process, an examination & approval Flow includes a start node, at least one approval node, an end node, including following sequential steps：The first step： It is countersign that approval node, which is arranged, to examine mode, which is referred to as countersign node, and countersign node summarizes all node examination & approval The countersign opinion of role provides reference for the examination & approval role of posterior approval node；Second step：Be arranged countersign one of node or Multiple examination & approval roles.

It is after conutersigning that approval node, which is arranged, to examine mode, and all examination & approval roles involved by the countersign node are to approval process Form fields content do not have modification authority.When approval node is there are one role is examined, countersign side can also be selected Formula, it is therefore an objective to allow examination & approval role there was only the right of opinion expression, and list content cannot be changed.

Role is examined in selection after must first determining examination & approval mode, some examination & approval roles are to list when avoiding first selecting examination & approval role Field contents have modification authority, countersign examination & approval are cannot achieve if form fields content is changed, because of each examination & approval role It is examining parallel, modification form data can influence other examination & approval role's examination & approval.After examination & approval mode is determined as countersign, system then limits All examination & approval roles being related to are without list modification authority, it is ensured that content is conutersigned in objective embodiment.

Citing：It is conutersigned before contract signing and whether signs the contract, set 5 examination & approval roles, contract value is 100,000, such as Fruit first selects examination & approval role, and examines the modification authority for having certain examination & approval role A to have to the amount of money in role, and contract value is changed It is 80,000, the contract value that other examination & approval roles see when examining can then become 80,000, be based on modified treaty content into guild Label examination & approval will be without in all senses.

The examination & approval role is independent individual rather than group/class, and the same period, one examination & approval role can only be associated with uniquely User, and user-association one or more examines role.

Setting method based on the approval node of countersign in approval process further includes one and is arranged one for countersign node The step of being responsible for role is responsible for the next stage circulation node that role selects the countersign node in countersign, is saved when next stage circulates Point have multiple optional times, by be responsible for role selecting one of them.

Approval process could be entered by only conutersigning after all examination & approval roles involved by node submit countersign opinion Subsequent step；It cannot terminate flow to conutersign node in approval process, at least one in the subsequent node of the countersign node The approval node of non-countersign.

What countersign node obtained is that the countersign opinion of all examination & approval roles of the node summarizes, regardless of conutersigning opinion, Countersign node cannot all reject approval process.

The examination & approval mode of approval node may be selected（Setting）For countersign, countersign node summarizes all node examination & approval roles' Opinion is conutersigned, strong reference is provided for the examination & approval role of posterior approval node.

Such as：Before contract signing, sales force 5 can initiate a countersign flow, and sales department, production department, finance may be selected Conutersign expression of opinion in portion, it is necessary to just enter in next step after all submitting countersign opinion, general manager can refer to everybody when examining and provide Countersign opinion.

Conutersign is with the difference of ballot：Countersign only solicits everybody and offers an opinion, and only opinion summarizes, for follow-up examination & approval Reference is provided, regardless of opinion is conutersigned, cannot all reject approval process.And when voting, the approval results of the approval node by The voting results of voter determine, can obtain an approval results：It disagrees by/agree to or not by/, examination & approval can be rejected Flow.

【Embodiment 2】Setting method based on the approval node of countersign in approval process further includes a setting examination & approval The step of role checks permission to the form fields content that approval process is related to, the different examination & approval roles of same countersign node are to table Single field contents check that permission can be different.It is applied widely using more convenient, it is easy to implement the hidden of part sensitivity field It hides, avoids causing information leakage.

Such as：To Mr. Yu's contract approval flow, conutersigns the examination & approval role of the sale correlation in node and could be provided as to look into See all fields；The related examination & approval role of production could be provided as to check product type field in contract list, product number Measure field, technical indicator field, time of delivery field；Financial correlation approver could be provided as to check in contract list Product type, production unit cost, contract value, information of making out an invoice, payment method field.

【Embodiment 3】Setting method based on the approval node of countersign in approval process, an approval process include One start node, at least one approval node, an end node, including following sequential steps：The first step：Setting examination & approval section Point examination & approval mode is countersign, which is referred to as countersign node, and countersign node summarizes the countersign of all node examination & approval roles Opinion provides reference for the examination & approval role of posterior approval node；Second step：One or more examination & approval angles of countersign node are set Color；Further include the steps that one and the countersign node is set for anonymous countersign, after being set as anonymous countersign, certainly in addition to examination & approval role , it can be seen that other than oneself own countersign opinion, other non-examination & approval role can not see the countersign meaning that examination & approval role submits for oneself See.

Provide anonymous countersign function, after being set as anonymous and conutersigning, in addition to examination & approval role oneself it can be seen that oneself It conutersigns other than opinion, other non-examination & approval role can not see the countersign opinion that examination & approval role submits, and avoid examination & approval role Between influenced each other, ensure countersign result authenticity and confidence level.

【Embodiment 4】The second step uses examination & approval role's setting method based on form fields and rank, specific to wrap The step of the step of including a setting system organization structure and one are by department rank setting examination & approval role：The setting system group The step of knitting structure includes following sub-step：SS1：Create department and role included in system organization structure；SS2：Setting Interdepartmental hierarchical relationship, as shown in figure 4, department A level-ones higher than department B, department A two-stages ... higher than department C；And it sets Set the department manager role of each department；The step of setting examination & approval role by department rank includes：SSS1:Selection is to press rank Mode carries out the setting of examination & approval role；SSS2:Selection approval process corresponds to role's property field, department's property field in list Or one submitted in role of the approval process, as rank main body；SSS3:Specific rating value n is filled in, n is >=0 Positive integer（The value of N can also be used other symbols and replace, such as a, b, c, d, the big level-ones of b ratio a, the big two-stages of c ratio a, d ratios a big by three Grade, and so on）：（1）Approval process is selected to correspond to role's property field in list as rank main body, with the selected angle Color is that criterion judges rank, for example, the submission role of flow is d2, but role's property field in the list selected is label Role is ordered, signing role is role d3：1. as n=0, the examination & approval role of the approval node is served as by selected role d3；② As n=1, the examination & approval role of the approval node is served as by the department manager role d1 of selected role d3 department D；If choosing Fixed role is the department manager role of its department, then by the department master of the upper level department of selected role department Limb color serves as the examination & approval role of the approval node；3. as n=2, by the upper level department C of selected role d3 department D Department manager role c1 serve as the examination & approval role of the approval node；4. as n=3, by selected role d3 department D's The department manager role b1 of upper upper level department B serves as the examination & approval role of the approval node；5. as n=4, by selected role The department manager role a1 of the Shang Shang upper levels department A of d3 departments D serves as the examination & approval role of the approval node；6. with such It pushes away；7. when the other setting of department level is more than the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination & approval role of the approval node；Such as：For role d3, department's rank highest should be 4, work as department When rank is set as 6, the examination & approval role of the approval node is served as by the department manager role a1 of highest level department A.

8. as n >=1, needing setting, " selected role is the department manager role of its department, and the department is supreme When primary department " approval node examined by designated groups.

（2）It selects approval process to correspond to department's property field in list as rank main body, is with the department that this is selected Criterion judges rank, for example, department's property field in the list selected is signing department, which is department D： 1. as n=0, the department manager role d1 by selecting department D serves as the examination & approval role of the approval node；2. as n=1, by selecting The department manager role c1 for determining the upper level department C of department D serves as the examination & approval role of the approval node；3. as n=2, by selecting The department manager role b1 of the upper upper level department B of department D serves as the examination & approval role of the approval node；4. as n=3, by selecting The department manager role a1 of the Shang Shang upper levels department A of department D serves as the examination & approval role of the approval node；5. and so on；⑥ When the other setting of department level is more than the highest level department in system organization structure, by the department manager angle of highest level department Color serves as the examination & approval role of the approval node；Such as：For department D, department's rank highest should be 3, when department's rank is set When being set to 6, the examination & approval role of the approval node is served as by the department manager role a1 of highest level department A.

7. as n >=1, setting when primary department " the selected department supreme " approval node is needed to be examined by designated groups.

（3）It selects the submission role of approval process as rank main body, judges rank using submission role as criterion, If for example, submit role be role d2,：1. as n=0, role d2 is submitted to serve as the approval node by workflow approval process Examination & approval role；Approval node department rank n when role is examined in setting could be provided as 0, i.e. role d2 itself is submitted in selection As the examination & approval role in approval node, before approval process terminates, can be selected by submitting role d2 itself to carry out examination & approval confirmation It selects to can return to after disagreeing and examine again, selection is agreed to enter next link, has had more submission role's proceedings for revision, has avoided the occurrence of Approval results are incorrect or approval results need to create with submitting the expection of role not to be inconsistent（It resubmits）Approval process is asked Topic, reduces system in-fighting, improves approval process efficiency and reliability.

Citing：Role d2 is submitted to have submitted one 10000 yuan of reimbursement approval request, because submitting in role d2 submitted Have mistake or other reasons, checking and approving reimbursed sum after multistage is examined is modified to 500 yuan, before approval process terminates, Being confirmed and can be pinpointed the problems by submitting role d2 to carry out review as examination & approval role, selection can return to after disagreeing and examine again, Selection is agreed to enter next link, without newly-built（It resubmits）One approval process.

2. as n=1, submits the department manager role d1 of role d2 department D to serve as this by workflow approval process and examine Criticize the examination & approval role of node；（If it is d1 to submit role, he is the department manager role of its department D, then by submitting role institute The examination & approval role of the approval node is served as in the department manager role c1 of the upper level department C of department D）3. as n=2, by working Stream approval process submits the department manager role c1 of the upper level department C of role d2 department D to serve as examining for the approval node Criticize role；4. as n=3, the department manager of the upper upper level department B of role d2 department D is submitted by workflow approval process Role b1 serves as the examination & approval role of the approval node；5. as n=4, role d2 department D are submitted by workflow approval process The department manager role a1 of Shang Shang upper levels department A serve as the examination & approval role of the approval node；6. and so on；7. working as department When the setting of rank is more than the highest level department in system organization structure, served as by the department manager role of highest level department The examination & approval role of the approval node.Such as：For role d2, department's rank highest should be 4, when department's rank is set as 6 When, the examination & approval role of the approval node is served as by the department manager role a1 of highest level department A.

8. as n >=1, setting is needed " to submit role for the department manager role of its department, and the department supreme one When grade department " approval node examined by designated groups；The designated groups examination & approval include one kind in following three kinds of situations：（1）Refer to Determine group and role construction is examined by one or more；（2）Designated groups are determined by department's rank, select that when rank main body this can only be continued to use The selected rank main body of approval node, and rating value n may be only configured to 0；（3）Designated groups determine by department's rank, rank Main body can be selected independently, and designated groups include one or more specified nodes, when the rating value n of specified node is non-zero It must be provided with next stage and specify node, when it is 0 to specify the rating value n of node, the designated groups of the approval node are set up At.

Application scheme is on the basis of advantage of the former base in submission role's level authority mode, also another advantage：It can be with Role of different nature is selected, contract signing role, contract increase role newly, contract is responsible for role as having on contract list, this is examined Batch node originally should not be to submit role's decision level, and should be with contract signing Role judgement rank.For example, reimbursement list （Submit an expense account approval process）First approval node will be to submit the higher level of role, an approval node in addition will be to submit an expense account angle The higher level of color examines（Reimbursement role and submission role may be different role）.

Traditional rank examination & approval mode can only submit role to judge that department level is other as criterion using approval process, can not Self-defined other roles or department to be arrived involved in list are as the other standard of department level is judged, there are certain use limitations Property.

Citing：For a contract approval flow, the signing role of contract asks for leave, its colleague is allowed to initiate one for him The examination & approval of contract, and system assert its colleague be flow submission role, when being examined by rank for the judgement of rank with Its work together subject to, can not it is objective embody contract signing role where department and position.For example, the signing role of contract is market The sales force 1 in portion, colleague role are the research staff 1 of research and development department, and the contract should be by signing role department originally Supervisor-market department's supervisor's role's examination & approval, when the examination & approval rank that approval node is arranged is 1, system can be distributed to where research staff 1 The supervisor of department-Head of R&D role examines, and the assignment error of approval process occurs, inconvenient to use.

The application can select the signing role in contract list as rank master as needed when approval node is arranged Body, to sign role（Rather than it is defaulted as submitting role simply）Judge that department level is other as standard, determines that examination & approval role is with this Market department is responsible for role, and use is more flexible, conveniently, versatile.

System provides the examination & approval mechanism of highest level department manager, and avoiding the occurrence of highest level department manager can not pass through The problem of rank examination & approval mode completes approval process.

Citing：When the highest leader president of enterprise submits approval request, in rank examination & approval, though president not on Grade department, but provided with designated groups come examine president submission approval request.

Designated groups examination & approval include one kind in following three kinds of situations：1. designated groups examine role construction by one or more, For example, constituting designated groups by the member of multiple supervisions board, the approval request of president is examined by supervision board member；2. specifying Group is determined by department's rank, selects that when rank main body the selected rank main body of the approval node, and rating value n can only be continued to use It may be only configured to 0；Such situation is for coping with the case where organization structure of the enterprise changes, for example, certain company's original highest level Supervisor is general manager, and the board of directors is additionally arranged after changes in microstructure, and highest level supervisor becomes president, approval node middle rank Other numerical value examines role for 0 and automatically becomes president, rather than is fixed as general manager, and avoiding the occurrence of examination & approval role cannot be adapted to The problem of changes in microstructure；3. designated groups are determined by department's rank, rank main body can be selected independently, and designated groups include one A or multiple specified nodes must be provided with the specified node of next stage when the rating value n of specified node is non-zero, until specified When the rating value n of node is 0, the designated groups of the approval node are provided with；Such situation is examined suitable for common department role The approval request that highest department manager is submitted is criticized, is submitted for example, the financial executive of Finance Department can audit president Contract approval request involved in information of making out an invoice, finally to be confirmed by president.

When approval node selection be rank examination & approval when, to corresponding examination & approval role progress power of examination and approval mandate in rank, Then the power of examination and approval of corresponding examination & approval role is all identical in this rank.

Citing：When n=1, when a3, b3, c3, d3 submit approval process respectively, then corresponding examination & approval supervisor be respectively a1, b1, C1, d1, and the power of examination and approval of a1, b1, c1, d1 are all.

【Embodiment 5】As shown in figure 5, the generation of the approval process includes the following steps：S1：Build user-role-power The Three-tier Architecture Model of limit, wherein：Role's layer：The operating main body of workflow examination and approval is role in workflow, and each role is independent Individual rather than group/class, one role of same period can only be associated with unique user, an and user-association one or more Role；The composition of the role is：It is numbered in the name+hilllock of post；Permission layer：The permission structure needed in workflow execution At permission directly licenses to role；Client layer：User determines the examination & approval task in approval process by associated role, and with The permission of association role carries out review operation；S2：As shown in fig. 7, generating approval process, an examination & approval based on Three-tier Architecture Model Flow includes a start node, at least one approval node, an end node：Start node：Initiate role's initiation/Shen Please/submit workflow as start node, or by first approval node as start node.

System determines approval process according to the list that role is submitted is initiated, for the form design one for needing workflow A or multiple approval processes, but a role can only select some approval process under the list（The same role can only deposit It is in one of same list flow）；Citing:There are two types of flows, respectively P1 flows and P2 for procurement contract list Flow, if having selected role A in the start node of P1 flows, the start node of P2 flows cannot reselection angle Color A, the examination & approval of the newly-increased procurement contract of role A at this time, automatically into P1 flows when submitting examination & approval.

Approval node：Setting approval node examines mode and selects examination & approval role, and is authorized to examination & approval role；Terminate Node：Approval process circulation terminates to approval process when this node, and the end node is without review operation；Or with last As end node, which needs to carry out review operation one approval node.

S3：User determines the required examination & approval task handled according to its associated role, and according to the permission of associated role Carry out review operation.

Select one or more examination & approval roles in approval node, a role can have in the same approval process in Different approval nodes, examination & approval role can be different to the checking of form fields, modification authority in different approval nodes.Advantage is lifted Example：Certain role is Chengdu sales manager 3, in contract approval workflow, is present in Chengdu sales contract examination & approval and Shanghai pin Sell contract approval two approval nodes；For the approval node of Chengdu sales contract, in examination & approval, the role can check the contract Whole field contents such as customer name, contact person, contact method, product quantity, production unit cost, contract value, and can change Production unit cost, contract value；But the approval node of sales contract can not check customer name, contact person, correspondent party in Shanghai The sensitivity field contents such as formula, can not change（But it can also be set as having and check permission, without modification authority）.

One or more examination & approval roles are selected in approval node, the permission of examination & approval role are set in approval node, for every Each of a approval node examination & approval role can carry out independent priority assignation.Such as：In the approval process of a contract list In, there is some approval node to be provided with 2 examination & approval roles, role A can be arranged it can be seen that the conjunction in respectively role A, role B With the value of contract value field and the field in list, it can also be seen that the customer address field in the contract list and the word The value of section；Role B is set and cannot see that contract value field in contract list, or can see contract value field but can't see The value of the field can show when can't see value with other symbols, such as No. *, and role B is it can be seen that client in the contract list The value of address field and the field.

【Embodiment 6】As shown in Figure 6 and Figure 8, the step S1 includes following sequence sub-step：S101：Role is created, Each role is independent individual rather than group/class；S102：The role created to S101 authorizes respectively；S103：It will use Family is associated with role, wherein one role of same period can only be associated with unique user, and a user-association one or more Role；Step S101 is first, but step S102 and step S103 is without sequencing relationship.User is true with being associated with for role by it Determine permission, if to change the permission of user, is associated with the role's by adjusting the permission that role is possessed to reach to change The purpose of the permission of user.After user-association role, which just has all operating rights of the role.

Role is one-to-one to the relationship of user（When the role is with a user-association, other users cannot be then associated with again The role；If the role by user-association, can not be selected to be associated with by other users）.User is a pair to the relationship of role It is more（One user can be associated with multiple roles simultaneously）.

The definition of role：Role does not have a properties such as group/class/classification/post/position/work post, but non-set Property, role have uniqueness, and role is self-existent independent individual；It is equivalent to post number in enterprises and institutions apply （The non-post in post number herein, a post may have multiple employees simultaneously, and one post number of same period can only correspond to one A employee）.

Citing：Following role can be created in some Corporation system：General manager, vice general manager 1, vice general manager 2, Beijing sale One manager, Beijing sell two manager, Beijing sell three managers, Shanghai sales engineer 1, Shanghai sales engineer 2, on The incidence relation of extra large sales engineer 3, Shanghai sales engineer 4, Shanghai sales engineer 5 ... user and role：If the public affairs Department employee Zhang San holds a post the said firm vice general manager 2, while a manager is sold in Beijing of holding a post, then Zhang San needs the associated role to be A manager is sold in vice general manager 2 and Beijing, and Zhang San has the permission of the two roles.

Mandate to role：System to role mandate include but not limited to the mandate to list, the mandate to menu or Mandate to function.Authorization to list includes but not limited to that additions and deletions are looked into and changed.

The concept of traditional role is group/class/post/position/work post property, and a role can correspond to multiple users.And The concept of the application " role " is equivalent to post number/station number, the role being also analogous in movie and television play：One role is in same a period of time Section（Childhood, juvenile, middle age ...）It can only be played by a performer, and a performer may divide decorations polygonal.

The including but not limited to mandate to list, the mandate to menu are authorized or to the mandate of function to role.

The role belongs to department, and the role is unique under the department, according to the action of role to role It is authorized.

It is related to trans-departmental transfer-position if user will convert department, specific operation process includes：（1）Cancel user with The association of role in former department；（2）User and the role in new department are associated.

After creating role, can during creating user association role, can also be after the completion of user creates It is associated at any time.The incidence relation with role can be released after user-association role at any time, can also establish at any time and other The incidence relation of role.

【Embodiment 7】The step S1 includes following sequence sub-step：S101：Role is established, each role is independent Individual rather than group/class；S102：Associate a user to role, wherein the same period, one role can only be associated with unique use Family, and a user-association one or more role；S103：The role established to S101 authorizes respectively.

The role belongs to department, and the role is unique under the department, according to the action of role to role It is authorized.

Work-flow control method further includes the trans-departmental transfer-position management process of a user, specifically includes：（1）Cancel user With being associated with for the role in former department；（2）User and the role in new department are associated.

The composition of the role is：It is numbered in the name+hilllock of post.Such as：Workshop Production worker 1, Workshop Production worker 2, vehicle Between direct labor 3 ... role be independent individual, be equivalent to post number, station number concept, be different from traditional rights management body Role in system, the concept of role is the group/class property of post/position/work post etc. in traditional system.

【Embodiment 8】After citing employee Zhang San enters certain company below, the relationship between employee, user and role is：1, New registration：The new registration of employee is directly the user（Employee）The role of corresponding post number/station number is selected to be associated i.e. Can, example：Zhang San's registration company（Company is that Zhang San is assigned with a Zhang San user）, action is to be responsible for north in sale one The sale of capital region refrigerator product（Corresponding role is sale one subordinate " sales engineer 5 " this role）, then Zhang San use Family directly selects " sales engineer 5 " this role association.

2, increase position：Zhang San worked after a period of time, and company also arranges Zhang San to be responsible for the pin of Beijing Area's tv product It sells（Corresponding role is sale one subordinate " sales engineer 8 " this role）And hold a concurrent post portion supervisor after sale（Corresponding portion after sale It is responsible for 1 this role）, then Zhang San user be further added by association sale one subordinate " sales engineer 8 " and after sale subordinate " after sale Portion is responsible for 1 " the two roles and respectively sells the " sales engineer of a subordinate at this point, Zhang San employee is associated with three roles 5 ", " after sale portion supervisor 1 " of " sales engineer 8 " and subordinate after sale, Zhang San user then has the permission of these three roles.

3, position is reduced：A period of time has been spent again, and company determines that Zhang San's tenure portion after sale is allowed to handle（Corresponding subordinate after sale " portion manager after sale " this role）, and no longer hold a concurrent post other work.Then Zhang San's user-association subordinate after sale " portion manager after sale " this A role, while cancelling associated three roles before this（It sells " sales engineer 5 " of a subordinate, " sales engineer 8 " and sells " portion supervisor 1 after sale " under rear portion）, at this point, Zhang San user only possesses the permission of subordinate " portion manager after sale " this role after sale.

4, the adjustment of role-security（For the adjustment for the permission that role itself is possessed）：As company determines to increase portion after sale The permission of manager then need to only increase the mandate that this role is handled to portion after sale, then Zhang San user is because portion handles after sale The permission of this role increases, and the permission of Zhang San user also increases.

5, it leaves office：After 1 year, Zhang San leaves office, then cancels Zhang San user and subordinate " portion manager after sale " this role after sale Association.

Citing：Company is in dynamic manage, and the registration of office worker, leaving office often persistently occurs, but post number/station Number variation it is considerably less (or even not changing over a period to come).

Classical authorization method：In the case of more than the system function point, authorized with the role of traditional group/class property, Heavy workload is not only authorized, it is complicated, and error-prone, or even malfunctioned and be all not easy to find in a short time, easy pair System user causes damages.

The application authorization method：The application is authorized to the role of post number/station property, user-association role And define the competence, then it to the control of user right, is realized simply by the incidence relation of simple user-role, allows permission Control becomes simple, easy to operate, clear, is greatly improved and authorizes efficiency and mandate reliability.

The above is only a preferred embodiment of the present invention, it should be understood that the present invention is not limited to described herein Form is not to be taken as excluding other embodiments, and can be used for other combinations, modifications, and environments, and can be at this In the text contemplated scope, modifications can be made through the above teachings or related fields of technology or knowledge.And those skilled in the art institute into Capable modifications and changes do not depart from the spirit and scope of the present invention, then all should be in the protection domain of appended claims of the present invention It is interior.

Claims (10)

1. the setting method based on the approval node of countersign in approval process, an approval process includes one and starts to save Point, at least one approval node, an end node, which is characterized in that including following sequential steps：The first step：Setting examination & approval It is countersign that node, which examines mode, which is referred to as countersign node, and countersign node summarizes the meeting of all node examination & approval roles Opinion is signed, reference is provided for the examination & approval role of posterior approval node；

Second step：One or more examination & approval roles of countersign node are set.

2. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： The examination & approval role is independent individual rather than group/class, and the same period, one examination & approval role can only be associated with unique user, And a user-association one or more examines role.

3. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： Only conutersign all examination & approval roles involved by node all submits conutersign opinion after could enter the subsequent step of approval process；

What countersign node obtained is summarizing for the countersign opinion of all examination & approval roles of the node, regardless of opinion is conutersigned, is conutersigned Node cannot all reject approval process.

4. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： It cannot terminate flow to conutersign node in approval process, at least one non-countersign examines in the subsequent node of the countersign node Criticize node.

5. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： Further include the steps that one and one responsible role is set for countersign node, is responsible for role and is selected in countersign under the countersign node Level-one circulate node, when next stage circulation node have multiple optional times, by be responsible for role selecting one of them.

6. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： Further include the steps that a setting examination & approval role checks permission, same countersign node to the form fields content that approval process is related to Different examination & approval roles permission can be different is checked to form fields content.

7. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： It is the list word of all examination & approval roles involved by the countersign node to approval process after countersign that approval node, which is arranged, to examine mode Section content does not have modification authority.

8. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： The generation of the approval process includes the following steps：S1：The Three-tier Architecture Model of user-role-permission is built, wherein：Role Layer：The operating main body of workflow examination and approval is role in workflow, and each role is independent individual rather than group/class, same period one A role can only be associated with unique user, and a user-association one or more role；

Permission layer：The permission needed in workflow execution is constituted, and permission directly licenses to role；

Client layer：User determines the examination & approval task in approval process by associated role, and is carried out with the permission of association role Review operation；

S2：Approval process is generated based on Three-tier Architecture Model, and an approval process includes a start node, at least one careful Criticize node, an end node：

Start node：Approval process starts；

Approval node：Setting approval node examines mode and selects examination & approval role, and is authorized to examination & approval role；

End node：Approval process terminates；

S3：User determines the required examination & approval task handled according to its associated role, and is carried out according to the permission of associated role Review operation.

9. the setting method according to claim 1 based on the approval node of countersign in approval process, it is characterised in that： The second step uses examination & approval role's setting method based on form fields and rank, specifically includes a setting system organization The step of the step of structure and one are by department rank setting examination & approval role：The step of setting system organization structure include with Lower sub-step：SS1：Create department and role included in system organization structure；

SS2：Interdepartmental hierarchical relationship is set, and the department manager role of each department is set；

The step of setting examination & approval role by department rank includes：SSS1:Selection carries out examination & approval role's in a manner of by rank Setting；

SSS2:Approval process is selected to correspond to carrying for role's property field in list, department's property field or the approval process One in angle of cut color, as rank main body；

SSS3:Fill in specific rating value n, the positive integer that n is >=0：（1）Selection approval process corresponds to role's property in list Matter field is as rank main body, and using the field, corresponding role judges rank as criterion：

1. as n=0, the examination & approval role of the approval node is served as by the corresponding role of the field；

2. as n=1, the examination & approval angle of the approval node is served as by the department manager role of the corresponding role department of the field Color；If the corresponding role of the field is the department manager role of its department, by the corresponding role department of the field The department manager role of upper level department serve as the examination & approval role of the approval node；

3. as n=2, which is served as by the department manager role of the upper level department of the corresponding role department of the field The examination & approval role of node；

4. as n=3, this is served as by the department manager role of the upper upper level department of the corresponding role department of the field and is examined Criticize the examination & approval role of node；

5. as n=4, this is served as by the department manager role of the Shang Shang upper levels department of the corresponding role department of the field The examination & approval role of approval node；

6. and so on；

7. when the other setting of department level is more than the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination & approval role of the approval node；

8. as n >=1, need setting " the corresponding role of the field be its department department manager role, and the department without When upper level department " approval node examined by designated groups；

（2）Approval process is selected to correspond to department's property field in list as rank main body, corresponding department is with the field Criterion judges rank：

1. as n=0, the examination & approval role of the approval node is served as by the department manager role of the corresponding department of the field；

2. as n=1, examining for the approval node is served as by the department manager role of the upper level department of the corresponding department of the field Criticize role；

3. as n=2, which is served as by the department manager role of the upper upper level department of the corresponding department of the field Examine role；

4. as n=3, which is served as by the department manager role of the Shang Shang upper levels department of the corresponding department of the field Examination & approval role；

5. and so on；

6. when the other setting of department level is more than the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination & approval role of the approval node；

7. as n >=1, setting when primary department " the corresponding department of the field supreme " approval node is needed to be examined by designated groups Batch；

（3）It selects the submission role of approval process as rank main body, judges rank using submission role as criterion：1. when When n=0, the examination & approval role of the approval node is served as by workflow approval process submission role；

2. as n=1, the department manager role of role department is submitted to serve as the approval node by workflow approval process Examine role；If it is the department manager role of its department to submit role, by the upper level portion for submitting role department The department manager role of door serves as the examination & approval role of the approval node；

3. as n=2, the department manager role of the upper level department of role department is submitted to serve as by workflow approval process The examination & approval role of the approval node；

4. as n=3, the department manager role of the upper upper level department of role department is submitted to carry on a shoulder pole by workflow approval process Appoint the examination & approval role of the approval node；

5. as n=4, the department manager role of the Shang Shang upper levels department of role department is submitted by workflow approval process Serve as the examination & approval role of the approval node；

6. and so on；

7. when the other setting of department level is more than the highest level department in system organization structure, by the department of highest level department Supervisor role serves as the examination & approval role of the approval node；

8. as n >=1, needing setting, " it is the department manager role of its department to submit role, and the department is without upper level portion When door " approval node examined by designated groups；

The designated groups examination & approval include one kind in following three kinds of situations：（1）Designated groups examine role construction by one or more；

（2）Designated groups are determined by department's rank, select that when rank main body the selected rank main body of the approval node can only be continued to use, And rating value n may be only configured to 0；

（3）Designated groups are determined that rank main body can be selected independently by department's rank, and designated groups include one or more specified sections Point must be provided with the specified node of next stage, the rating value n until specifying node when the rating value n of specified node is non-zero When being 0, the designated groups of the approval node are provided with.

10. the setting method based on the approval node of countersign in approval process, an approval process includes one and starts to save Point, at least one approval node, an end node, which is characterized in that including following sequential steps：The first step：Setting examination & approval It is countersign that node, which examines mode, which is referred to as countersign node, and countersign node summarizes the meeting of all node examination & approval roles Opinion is signed, reference is provided for the examination & approval role of posterior approval node；

Second step：One or more examination & approval roles of countersign node are set；

Further include the steps that one and the countersign node is set for anonymous countersign, after being set as anonymous countersign, in addition to examination & approval role , it can be seen that other than the countersign opinion of oneself, other non-examination & approval role can not see the countersign that examination & approval role submits for oneself Opinion.