TW200521788A - System and method for setting user-right, and recording medium - Google Patents

Abstract

A system for setting user-right is used to set user-right of a plurality of users. The system comprises an account creating module, a group creating module, a role creating module, a function creating module, and a relationship defining module. The account creating module creates a plurality of user accounts corresponding to the users. The group creating module creates at least one group according to the user' s organization. The role creating module creates at least one functional role according to jobs or projects of the users. The function creating module creates a plurality of functions corresponding to execution items of the users. The relationship defining module defines that at least one user account is subordinate to the group, and the functional role has the right to execute at least one of the functions. The relationship defining module further creates the relationship between the group and the function role. Furthermore, a method for setting user-right and a recording medium, having a computer executable program for performing the method, are provided.

Description

200521788 V. Description of the invention (1) (1), [Technical field to which the invention belongs] The present invention relates to a user authority setting system and method, and particularly to a user authority setting system and method applicable to most users. (B), [Previous technology] Generally speaking, medium and large-scale enterprises often have many employees at the same time. However, based on the overall organizational structure of the enterprise, these employees usually have different positions in different departments, that is, the work performed by each employee. The content is usually different, so 'how to connect employees in the job or job content to establish an organizational structure, use rights and distinguish responsibilities will be a very important topic. In order to effectively manage the permissions of different users, the conventional technology is to create a user account for each user, and then set the work items corresponding to this user account according to the user's work. Operators (such as the administrators of user rights management software) record or type or modify the work items that each user account can correspond to, that is, the work items that the user account has the right to use. However, with the expansion of the enterprise, the number of users has also increased. If you use the above methods to establish the permissions of each user account, it will be very complicated and inefficient, especially when the enterprise grows larger or works When the internal changes are rapid, the above-mentioned methods often cannot effectively grasp and establish the latest user rights, and must also spend a lot of manpower and time to record or type the work items that each user account can correspond to. So, how to provide a way to effectively create user accounts and

200521788

: ΐ f ΐ The user authority setting system and method of the work item are exactly (3), [inventive content] There are 4a in the above subject, and the present invention provides a user account that can be effectively established and its corresponding work User permission settings and methods of the project. The death cause is the user right of the present invention. The right of the user includes an account module, a role establishing module, and an association establishing module. Here, the account corresponding to the user's user account is created according to the user's organizational structure to the group, which is used to create a functional item based on the user's work color 'function item creation module system', which is associated with a These user accounts belong to at least one month, and have at least one functional work group and at least one functional role. In addition, the present invention also discloses a limited user permission setting method. Used as a group, an execution limit setting system for creating a plurality of corresponding users according to the user's work is used to set a plural number creation module, a work group creation function item creation module, and a creation module system The creation of a plurality of 'working group creation modules is used to reduce one work group, the role creation module content establishes at least one functional corner, and the plurality of corresponding user creation modules is used to set at least one work group. Group, set permissions for at least one work item, and establish at least one association. The right to set a plurality of users includes the establishment of a plurality of organizational structures corresponding to these messengers, the establishment of at least one job, the establishment of at least one functional role, the function of the project, the setting of at least

Page 7 200521788 V. Description of the invention (3) A user account belongs to at least one work group, sets at least one functional role to have permission to use at least one functional item, and establishes at least: work group and at least one functionality Relevance of roles. The invention further provides a recording medium, which records a computer-readable user authority setting program in order to execute the above-mentioned user authority setting method. According to the above-mentioned "user permission setting system and method according to the present invention, in addition to establishing a work group for a user's organizational structure, it also creates a functional role for a user ^ work content" so that a user account can be effectively established And its corresponding work items, especially when the work group, functional role, and function item have been set, only the user account and at least one work group, etc. added by the association building module settings need to be set. Relevant, you can set the permissions of the user. Therefore, even when the business grows larger or the work content changes rapidly, it can still effectively grasp and establish the latest user rights, and it can also save a lot of manpower and time. (IV) [Embodiment] The following describes a user authority setting system and method according to a preferred embodiment of the present invention with reference to related drawings. The same components will be described with the same reference symbols. > Referring to FIG. 1, user rights according to a preferred embodiment of the present invention ^ system 1 'includes at least an account creation module 1 1, a work group establishment module 1, 3, a role creation module 1 5 , Function item building module 17 and association building module 19. In this embodiment, the user authority setting system 1 is

200521788 V. Description of the invention (4) Used to set the permissions of a plurality of users 20, as shown in FIG. 2, the account creation module 11 establishes a plurality of user accounts 3 corresponding to these users 2 0; work group Group creation module 1 3 establishes multiple work groups 40 based on the organizational structure of multiple users 2 0; role creation module 15 establishes multiple functional roles 50 according to the work content of user 20; function item establishment Module 丨 7 establishes a plurality of functional items 6 0 corresponding to a plurality of execution items of a plurality of users 20 0 'Relationship establishment module 1 9 sets a plurality of user accounts 3 0, of which at least one user account 3 0 belongs to In at least one work group 4 q, set at least one functional role 5 0 has the right to use at least one functional item 60, and establish the association between the at least one work group 40 and at least one functional role 50. For example, the account creation module 11 maps users ~ ⑽ to user accounts ^ 丨 ~ A3; the work group creation module 13 creates a work group according to the organizational structure of users U1 U3; role creation Module 15 establishes a functional role R1 according to the work content of users U1 ~ U3; function item group 17 establishes function items F1 ~ F4; finally, the association establishment module 19 sets a user account "~ A3 belongs to the work group Group 〇1. The functional role R1 is set to have the authority to use the functional items F1 to F4 and to establish the association between the work group G1 and the functional role R 丨, which refers to the work group g1 to the functional role R1. For those who need attention, the user authority setting system 1 may be implemented in an electronic device, such as a conventional computer device, which includes a central processing unit, a storage device, and an input device. Among them, the central processing unit = Any conventional CPU architecture can be used, for example, including logic logic unit (ALU), register

200521788 V. Description of the invention (5) and controller, etc., to process and calculate various data, and control the operation of each component in the electronic equipment. The storage device may be any one of a hard disk drive, an optical disk drive, dynamic random aeeess memory (DRAM), or an electric erase program read only memory (EEPROM). Several computer-readable data storage devices. The input device may be a user turn interface such as a keyboard or a mouse, which allows a user to input data into an electronic device. According to the above description, each module in this embodiment may be a software module stored in a storage device. After the central processing unit reads each software module, it can realize the functions of each module through various components in the electronic device, such as input devices, storage devices, or other software modules. However, it should be noted that those familiar with the technology can also make the above software modules into hardware, such as application-specific integrated circuit (AS 1C) chips, etc. without violating the present invention. Spirit and Fan Shou. In addition, data such as user account 3 0, work group 40, functional role 50, and function item 60, which are created using the user authority setting system 1, can be stored in a database, such as An electronic database stored in a storage device. As mentioned above, the present invention is not limited to implementing the present invention in a manner of hardware, software, corpus callosum, or mixed use. To make the content of the present invention easier to understand, an example will be given below to explain the operation flow of the user authority setting system 1 according to the preferred embodiment of the present invention.

Page 10 200521788

V. Description of the invention (6) Please refer to FIG. 3. First, the account creation module is a user account for the personnel of the product sales department. The product sales department includes one head of department and three staff members. Therefore, the account creation module 丨 1 is to create user accounts A4 to A7, of which user accounts A4 to A6 correspond to three staff members, respectively, and user account A7 corresponds to the department head. The work group creation module 1 3 establishes a work group based on the organizational structure of the product sales department, which includes the salesperson work group G2 and the manager work group role creation module 1 5 establishes a functional corner based on the work content of the product sales department ^ : Because the product sales department must have a delivery person who is responsible for delivering the product to the customer, a sales estimator who is responsible for estimating the sales volume of the product, and a department manager who is responsible for managing the entire department. Functional roles should include the delivery role R2, the sales forecast role R3, and the manager role R4. Function project creation module 丨 7 Establishes function projects based on the execution projects of the product sales department, which includes work platform F5, product catalog F6, sales estimate F7 'customer profile 8', and sales plan F9. Finally, the association building module 19 sets the association of the above-mentioned user account, work group, functional role, and functional item. In this embodiment, the user account A4 ~ A7 of a staff member belongs to the salesperson work group G2 and the user account A7 of the department head belongs to the manager job f. The role R2 has the use of the work platform F5 and the product Directory |? 6 j limit, sales estimation role "has the authority to use sales estimation F7, department manager role R4 has the authority to use customer data F8 and sales plan F9,

200521788 V. Description of the invention (7) The relevance of business employees, therefore, the catalog F6 and sales to deal with the products of the product business entity pre-F8 and the sales company learned that the customers came to establish or check the content of the user as above Establish functional roles that can be matched and added to functional items. For example, in the number, and make the sales department new. In addition, the establishment of the organization structure is set to use a work subgroup for group G2 and delivery work group G3. In addition, the relevant information of the authorized user of the plan F 9 reads the description of a product, and establishes a functional role according to the organizational structure of the present invention. Therefore, the work item has already been set up as a complete account or a function item. A new salesperson is affiliated with the salesperson. Established using a work group to create at least one worker account 30 and the workgroup is affiliated with at least the role of R2 and the role of sales forecast. Work platform F 5, product limit, in order to use the function of work platform F5 to use the function of product catalog F 6 to review the current use of sales forecast F 7 to enter the production department. The supervisor of the production department can have the use of customer data in order to use customer data F 8 The function comes, and the plan is sold using the function of the sales plan F9. In addition to the work group, the user permission setting system 1 is more targeted to the user's work. This can effectively create user accounts and especially when working groups and functional roles, only need to set a certain When a work group, or even a certain item, can complete the user's permission setting, as long as a user account work group G2 is added, the product seller's permission can be immediately (not shown in the figure). Module 1 3 can also be based on the group of user 20. At this time, the association establishes the association of module 1 9 as a sub-group, and sets at least one work group 40 (when there are many jobs η ΙΙΗΙΙΗ 第12 pages of 200521788 V. Description of the invention (8) 'One ^ Group 40 hours)' Association building module 丨 g can also directly establish the association between at least one working subgroup and at least one functional role 50, or Set at least one work group 40 or at least one work subgroup to have the right to use at least one function item 60. In contrast, the role creation module 15 can also create at least one functional sub-role according to the work content of the user 20. At this time, the association establishment core group 19 is not determined that at least one functional sub-role has the use of at least one The permission of the function item 60, and set at least one functional sub-role to belong to the at least one functional role 50; the association building module 9 can directly establish at least one functional sub-role and at least one work group 4 〇 Or establish at least one functional role 50 or at least one functional sub-role with these usage accounts 30. It should be particularly noted that this embodiment also introduces the concept of "opening a path". That is, when there is a multi-layer structure formed by functional sub-roles, functional roles, workers, workers: times: groups (at least three of them), etc., it is possible to make mistakes, and not necessarily one layer. Corresponds to one level of connection (slanted directly from work group to functional sub-role, or directly from functional role to work sub-group). One of the great advantages of this is that if you only need to add a job to a member of a department (such as temporarily designating a ^ salesperson to handle internal education and training), you can open a path for this member to work, and There is no need to separate this member into a group and then give all the needed work. According to the foregoing description, the user authority system established by the user authority setting system 1 according to the preferred embodiment of the present invention is shown in FIG. 4. In this embodiment, FIG. 4 includes user accounts A01 ~ All, work subgroups g〇1 ~ g〇4, and work °.

surface

200521788 V. Description of the invention (9) Groups G01 ~ G03, functional roles R04, R04, functional secondary roles r (H ~ r05, and functional items F0 and F09), and their relationships are shown in the figure. As shown in FIG. 5, the present invention also discloses a user authority setting method, which is a method of applying the aforementioned user authority setting system 1 to set the authority of a plurality of users, which at least includes establishing a plurality of uses corresponding to these users. User account (s 0 1), at least one work group (S02) based on the user's organizational structure, at least one functional role (S 0 3) based on the user's work content, and the execution of multiple corresponding users A functional item of the project (S 0 4), setting at least one user account to belong to at least one work group (S05), setting at least one functional role to have permission to use at least one functional item (SO6), and establishing at least one Association between work group and at least one functional role (s07). It should be noted that according to the user authority setting method of the present invention, the aforementioned user authority setting system 1 is used for execution. The content of the steps is as described above, so it will not be repeated here. In addition, as shown in FIG. 6, according to another preferred embodiment of the present invention, the user authority setting method includes the following steps: establishing a plurality of corresponding And other user user accounts (S11); establish at least one work subgroup and at least one work group according to the user's organizational structure (S1 2 establish at least one functional sub-role and at least one function based on the user's work content Sexual roles (S1 3); establishing a plurality of function items (S14) corresponding to user execution items; setting at least one user account to belong to at least one work group or at least one work subgroup (s 丨 5); setting At least one functional role, at least one functional sub-role, at least one work group, or at least one worker

Page 14 200521788

V. Description of the Invention (ίο) Make subgroups have the right to use at least one functional item (s 丨 6 Set at least one functional sub-role to belong to at least one functional role (s 丨 7); Set at least one working subgroup Belong to at least one work group (s 丨 8);

Establishing the association between at least one work group and at least one functional role, establishing the association between at least one work subgroup and at least one functional role, establishing the association between at least one functional sub-role and at least one work group, Establish the association between at least one functional role and at least one user account, or establish the association between at least one functional sub-role and at least one user account (s9-9). It should be noted that according to the user authority setting method shown in FIG. 6, the user authority shown in FIG. 4 can be established.

In addition, the present invention further provides a recording medium, which records a computer-selectable user authority setting program. The user authority setting program has at least a work group creation code segment, which is used for the computer to perform The user's organizational structure creates at least one work group; the role creation code snippet is used to allow the computer to create at least one functional role based on the work content of these users; the functional project creation code snippet is used to Let the computer establish a plurality of function items corresponding to the execution items of the users, and establish a code snippet for association, which is used to let the computer set at least one of the 4 user accounts to belong to at least one of the work group, settings The functional role has a right to use at least one of the functional items, and establishes an association between the work group and the functional role. At this time, the computer system running the user authority setting program can be regarded as a user authority setting system (as shown in Fig. 1). In summary, since the user authority setting system and method according to the present invention

Page 15 200521788 V. Description of the invention (11) The legal system has at least a working group established for the user's organizational structure and a functional role established for the user's work content, so it can effectively create a user account And its corresponding work items, especially when the work group's functional roles and function items have been set, only the user account added by the association building module setting belongs to a work group, etc. Relationship to complete the permissions setting for that user. Therefore, even if the business grows larger or the work content changes rapidly, it can still effectively grasp and establish the latest user rights, and it can also save a lot of manpower and time. The above description is only exemplary, not restrictive. Anyone who departs from the spirit and scope of the present invention and makes respect for it # 1 t Π 禾 肌 Seeking political modification or # # shall be included in the scope of the attached patent application.

200521788 Schematic description (five), [Schematic description] Figure 1 is a schematic diagram showing a user authority setting system according to a preferred embodiment of the present invention; Figure 2 is a schematic diagram showing a comparison according to the present invention. The user authority established by the user authority setting system of the preferred embodiment; FIG. 3 is a diagram showing the user authority established for the personnel of the product sales department; FIG. 4 is a diagram showing the preferred embodiment according to the present invention Another user right created by the user right setting system;

FIG. 5 is a flowchart showing a flow of a user authority setting method according to a preferred embodiment of the present invention; and FIG. 6 is a flowchart showing a flow of a user authority setting method according to a preferred embodiment of the present invention. Explanation of component symbols: 1 User permission setting system 11 Account creation module 13 Work group creation module

15 Role creation module 17 Function item creation module 19 Association creation module 2 〇 User User account 4 0 Workgroup

Page 17 200521788

Schematic description 50 Functional role 60 Functional item A1-A7 User account A01 ~ All User account F01 ~ F09 Functional item F1-F4 Functional item F5 Work platform F6 Product catalog F7 Sales estimate F8 Customer information F9 Sales plan G01 ～ G03 Work group G1 Work group G2 Salesperson work group G3 Manager work group gO 1 ～ g04 Work subgroup R01 ～ R04 Functional role R1 Functional role R2 Delivery role R3 Sales estimate role R4 Department manager Role rO 1 to r05 Functional sub-role SOI to S07 Flow of user authority setting method S11 to S19 Flow of user authority setting method 200521788 Schematic description of U1 to U3 users page 19 II ·

Claims (1)

200521788 VI. Application Patent Scope 1. A user authority setting system and system, which is used to set the authority of the repeat, including: An account creation module, which is used for > i ^ user account; Wei ’s set of building modules corresponding to these users is used to structure and establish at least one work group according to the organization of these users. To create at least one functional role; the Gongyue dagger project creation model and group, which are used to establish a plurality of functional items corresponding to at least one execution item of these users; and the association establishment module 'its Set at least one of these user accounts to belong to; a work group, set at least one of the functional roles to have access to at least one of the functional items, and establish at least one of the work group and at least one The relevance of this functional role. 2. The user authority setting system described in item 1 of the scope of patent application, wherein the work group creation module further establishes at least one work subgroup according to the organizational structure of the users, and the association establishment module system Set the association between the user accounts and the work subgroups, and set any of these work subgroups to belong to at least the work group. 3. The user authority setting system described in item 2 of the scope of patent application, wherein the association establishing module further sets the association between at least one of the working subgroups and at least one of the functional roles. 200521788 VI, 4 zhonggong 5 junior middle school 8, junior middle school 8, who applied for a patent scope, user rights settings as described in item 2 of the patent application scope, etc. The association building module is set at least A work group or at least one of the sub-groups has a right to use at least one of the function items. 2. The user permission setting system described in item 1 of the scope of patent application '^ The role creation module is further established to ^ functional sub-role based on the work content of these users. The user authority setting system as described in item 5 of the scope of patent application '^ The association establishment module determines the authority of at least one of these functional sub-roles to use these functional items, and sets at least these One of the functional secondary roles belongs to at least this functional role. • The user authority setting system described in item 6 of the scope of the patent application, where the association establishing module further establishes the association between the functional sub-role and the work group. According to the user right setting system described in item 6 of the scope of the patent application, its association building module is further built with at least one functional role or at least one first-level functional sub-role and at least one of these user accounts. Relevance. A method for setting user permissions, which is used to set a plurality of use permissions, including: 200521788… 6. Apply for a patent to establish a plurality of user accounts corresponding to these users; establish at least according to the organizational structure of these users A work group '· Establish at least one functional role according to the work content of the users; Create a plurality of functional items corresponding to the execution items of the users; Set at least one of the user accounts belonging to at least one A working group; setting at least one of the functional roles to have permission to use at least one of the functional items; and establishing an association between at least one of the working group and at least one of the functional roles. 10. The method for setting user rights as described in item 9 of the scope of patent application 'further includes: establishing at least one work subgroup according to the organizational structure of these users; setting up these user accounts and these work subgroups Group association; and setting at least one of the work subgroups to belong to at least one work group. 11. The method for setting user rights as described in item 10 of the scope of patent application 'further includes: establishing at least one of the work subgroups' association with at least one of the functional roles. 1 2. The method for setting user rights as described in item 10 of the scope of patent application, further comprising: setting at least one of the work group or at least one of the work subgroups having at least one of using the functional items Permissions. Page 22 200521788 Scope of patent application 1 3. The method for setting user rights as described in Fangu Application No. 9 further includes: establishing at least one functional sub-role based on the work content of these users. 14. The method for setting user rights as described in Item 13 of the scope of patent application, further includes: 'setting at least one of these functional sub-roles to have at least one of the rights to use these functional items; and setting at least these One of the functional secondary roles belongs to at least one of the functional roles. 15. The method for setting user rights as described in item 14 of the scope of patent application, further comprising: establishing an association between at least one of the functional sub-roles and at least one of the work groups. 16. The user authority setting method described in item 14 of the scope of patent application, further comprising: establishing an association between at least one of the functional roles or at least one of the functional sub-roles and at least one of the user accounts Sex. 1 7. A recording medium, which records a computer-readable user authority setting program that can be read by a computer (readab 1e) to set the authority of a plurality of users, which enables 200521788 6. Scope of patent application According to these users, the user permission setting program includes: a work group creation code snippet, which is used to allow a computer user to establish at least one work group;-a role Create a code snippet, which is used to allow the computer to create at least one functional role based on the work content; ☆ Create a code snippet corresponding to a function item, which is used to allow the computer and other users to execute a plurality of execution items Function items; create code snippets with fewer than one association, which is used to let the computer set up: # One of the user accounts of the function belongs to at least one of the workgroup, executes, and has at least one sex role The authority of at least one of the functional items, establishing the association between the work group and the functional role. 18. The recording medium as described in item 7 of the scope of patent application, wherein the work group creation code snippet is more available for the computer to establish at least one work subgroup according to the organizational structure of the users, and the association Creating a code snippet allows a computer to set the association between the user accounts and the work subgroups, and set at least one of the work subgroups to belong to at least one of the work groups. 19. The recorded media described in § 18 of the scope of the patent application, wherein the association establishing procedure # code segment is more computer-friendly. The association between at least one work subgroup and at least one functional role. Recording media related to seven, in which the 20, as the 18th in the scope of patent application 200521788 6. Scope of patent application The establishment of a code snippet can allow a computer to establish at least / the work group or at least the first-class work subgroup to have the right to use at least one of these functional items. 2 1. The recording medium as described in item 7 of the scope of patent application, wherein the role creation code snippet allows the computer to establish at least one functional sub-role based on the work content of these users. 2 2. The recording medium as described in item 2 丨 of the scope of patent application, wherein the association establishment code snippet allows the computer to set at least, the functional sub-roles have the authority to use at least one of the functional items, And set at least one of these functional secondary roles to belong to at least one of the functional roles. 23. The recording medium as described in item 22 of the scope of patent application, wherein the association establishment code segment further allows a computer to establish association between at least one of the functional sub-roles and at least one of the workgroups. 24. The recording medium as described in item 22 of the scope of the patent application, wherein the association establishment code snippet can further allow the computer to create at least one of the functional role or at least one of the functional sub-roles and at least one of these uses. Of the user account. n