JP2004110549A - Network system and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable a user to easily grasp the presence/absence of access right to data shared on a network. <P>SOLUTION: Where a general user U1 having access right only to "folder A" folder between "folder A" folder and "folder B" folder logs in a server device providing shared service of a file, only an icon 30A showing "folder A" folder 212 is displayed on a client device of the general user (Fig.A). Where a general user U5 having access right only to "folder B" folder logs in, only an icon 30B showing "folder B" folder is displayed (Fig.B). Where a general user U3 having access right both of "folder A" folder and "folder B" folder logs in, both of the icon 30A showing "folder A" folder and the icon 30B showing "folder B"folder are displayed (Fig.C). <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a network system and a program, and in particular, includes a network system in which a plurality of terminal devices including a display unit for displaying information are connected via a network, and a display unit for displaying information. Executed by a server device that is connected to a terminal device via a network, and that manages storage means for storing data by setting an access right for a user of the terminal device and storing the data. Related to the program.
[0002]
[Prior art]
Conventionally, there is a network system including a so-called shared file system that can be accessed by a plurality of users on a network. For example, in a client / server type network system, a drive provided in the server device, that is, a storage device such as HDD, FD, CD-ROM, and MO is shared by a client device (terminal device) on the network and connected to the network. Data stored in the storage device can be shared by users of the client devices. Also, in a personal computer (hereinafter referred to as a personal computer) normally used as a client device, a file system folder managed by the personal computer is set as a so-called shared folder so that it can be referred to by other users via a network. In some cases, the client device may function as a server device.
[0003]
In such a network system, when a user accesses a shared file system by operating a client device, the data structure (hierarchical structure) of the shared file system is displayed on the client device operated by the user, and the network The user can check the data shared above. For example, if the client device operates in a GUI (graphical user interface) environment, an icon is displayed as if a folder or file below the folder is contained in a predetermined folder ( For example, see Patent Document 1). When viewing data from the shared file system or saving his / her data to the shared file system, the user can specify the data to be viewed from this display or specify the storage location of his / her data. (For example, refer patent document 2).
[0004]
By the way, some users do not want to be viewed by users other than themselves or users other than the group to which they belong, and in general, access rights can be set for data stored in a shared file system. (For example, refer to Document 3). This access right can be set for each file as well as for a drive or folder, so that the access right for a folder or file in the drive or a folder below the folder can be set together. Can also be set.
[0005]
[Patent Document 1]
JP-A-6-202841 [Patent Document 2]
JP 2001-195290 A [Patent Document 3]
JP-A-11-212849 [0006]
[Problems to be solved by the invention]
However, since the display of the data structure of the shared file system has been performed uniformly regardless of the access right, the presence or absence of the access right to the data (drive, folder, file) that the user wants to access depends on the data. I didn't understand without trying to access. That is, as a result of an attempt to access the data that the user wants to access, if the user has access right if the access is successful, and if there is no access right if an error occurs, the user has the access right only after the access attempt. There was a problem that it could not be confirmed whether or not there was.
[0007]
The present invention has been made to solve the above problems, and an object of the present invention is to provide a network system and a program that allow a user to easily grasp the presence or absence of access rights to data shared on a network. And
[0008]
[Means for Solving the Problems]
In order to achieve the above object, the invention described in claim 1 is a network system in which a plurality of terminal devices including display means for displaying information are connected via a network, and the plurality of terminals A storage means for storing data by setting an access right for a user of the terminal device and storing the data, and when the storage means is accessed from the terminal device, the terminal device Control that causes the display means to display the data structure at least in the access position of the storage means so that the state of the information indicating data having access rights to the user of the terminal device is different from the information indicating data having no access rights And means.
[0009]
According to the first aspect of the present invention, the storage means is shared by a plurality of terminal terminals connected to the network and can be accessed from each terminal device. That is, the storage means can be used as a shared file system on the network. The storage means can store the data by setting the access right of the user of the terminal device to the drive, folder or file. When the terminal device accesses the storage means, the display of the terminal device is displayed. According to the control means, the data structure at least at the access position of the storage means indicates information indicating data, for example, the status of the icon of the drive, folder, or file, depending on whether the user of the terminal device has access rights. Displayed differently. The user can grasp the data that he / she has access to by simply checking the display of this data structure, and as before, he / she can access the desired data without knowing whether he / she has the access right. There is no need to try.
[0010]
The network system can be easily realized by causing a server device on the network to execute the following program. That is, as described in claim 2, a terminal device having a display means for displaying information is connected via a network, and an access right is set for a user of the terminal device. A program executed by a server device that manages storage means for storing data to be usable in the terminal device, and the display means of the terminal device when the storage means is accessed from the terminal device In addition, the data structure at least in the access position of the storage means is displayed so that the state of the data indicating the data having the access right is different from the information indicating the data having no access right to the user of the terminal device. It is characterized by that.
[0011]
In this program, as described in claim 3, the information indicating the data without the access right may be hidden, and only the information indicating the data with the access right may be displayed. However, as described in claim 4, the form of the information indicating the data may be varied depending on the presence or absence of the access right.
[0012]
DETAILED DESCRIPTION OF THE INVENTION
Next, an example of an embodiment according to the present invention will be described in detail with reference to the drawings. FIG. 1 shows a network system to which the present invention is applied.
[0013]
A network system 10 shown in FIG. 1 includes a server device 12 that provides a file sharing service, and a client device 14 that is operated by a user and receives the file sharing service from the server device 12. It is configured to be connected to a network 16 such as the Internet or a LAN (Local Area Network) via connection means (not shown) such as (Terminal Adapter). The server device 12 and the client device 14 can communicate with each other via the network 16.
[0014]
Since a general computer can be used for the server device 12, only the portion related to the present invention will be described in detail below. The server device 12 includes a large-capacity database (DB) 20 that stores and manages various data as a storage unit of the present invention. Further, a management program 22 for managing and operating the DB 20 is read from the recording medium 24 such as a CD-ROM and installed in advance in the server device 12, and this management program 22 is activated while the server device 12 is activated. Is now resident in memory. The management program 22 may be downloaded from another device and installed by communication (wired or wireless).
[0015]
The server device 12 functions as a control unit of the present invention by executing the management program 22. Specifically, the server apparatus 12 shares the DB 20 on the network 16 by the management program 22 and manages the DB 20 so that it can be used by the users of the plurality of client apparatuses 14, that is, the DB 20 is handled as a shared file system. ing. Further, an access right can be set for data managed by the DB 20, and a user who uses the DB 20 is also managed by the management program 22. In other words, each data is allowed to be accessed only by a user having an access right. For this reason, although not shown in the figure, user information for identifying each user who uses the network system 10, for example, information indicating a user name and a password is registered in advance in the server device 12. Occasionally, a user name and a password are requested, and the user is authenticated by collating the input information with registered user information.
[0016]
The client device 14 is operated to input various types of information and requests, such as an input unit 14A such as a keyboard and a mouse, a display unit 14B such as a display, and a communication unit that performs information communication via the network 16 (not shown). ). In addition, the client device 14 has a GUI function. When the client device 14 logs in to the server device 12 and becomes able to access the shared file system, the data structure of the shared file system, that is, the folder and file under the management of the DB 20 are displayed as icons. 30 (see FIG. 6), and can be displayed on the display means 14B. The user selects an icon 30 corresponding to a desired folder or file by operating the input unit 14A, and browses data (also referred to as “opening a folder or file”), saves, or changes an access destination folder ( Various commands such as “Move folder”) can be transmitted to the server device 12. The client device 14 can use a conventionally known personal computer, mobile phone, PDA (Personal Data Assistants), and the like, and will not be described in detail. Hereinafter, a case where a personal computer having a GUI function is used will be described as an example.
[0017]
Next, the operation of the present embodiment will be described.
[0018]
In the following, specifically, as shown in FIG. 2, as users of the network system 10, general users U1 to U5, a system administrator SS that manages the entire network system 10, and users to which the general users U1 to U3 belong An example will be described in which the group manager GS1 that manages the group (1) and the group manager GS2 that manages the user group (2) to which the general users U3 to 5 belong are available. That is, user information for identifying each of these administrators and general users is registered in the server device 12 in advance, and this user information includes the user groups (1) and (2) in the group. Information indicating the user to which the user belongs is also included. In the network system 10, among the above users, the system administrator SS and the group managers GS 1 and GS 2 each share a folder for the shared file system provided by the server device 12, that is, data under the management of the DB 20. The group access right can be set.
[0019]
When the user wants to use data managed by the DB 20 of the server device 12 or to store his / her own data in the DB 20, the user operates the input unit 14 </ b> A of the client device 14 to connect the server device to the server device 14. 12 sends a login request.
[0020]
The server device 12 constantly monitors a so-called login request for requesting a connection from the client device 14 due to the residence of the management program 22, and when the login request transmitted from the client device 14 is received, the management program 22 is activated. Then, the control process shown in FIG. 3 is started.
[0021]
That is, when the server apparatus 12 receives a login request from the client apparatus 14, as shown in FIG. 3, first, in step 100, for example, a login screen 200 as shown in FIG. The information for identifying the user, that is, the login name and the password are received by displaying them on the 14 display means 14B.
[0022]
The login screen 200 shown in FIG. 4 is provided with an input field 202 for inputting a login name and an input field 204 for inputting a password. When the assigned login name and password are input in the input field 202 and the input field 204, information indicating the input login name and password is transmitted from the client device 14 to the server device 12 via the network 16. .
[0023]
Until the server apparatus 12 receives the information indicating the login name and password, the server apparatus 12 returns from step 102 to step 100 and waits for the client apparatus 14 to transmit information indicating the login name and password. When the information indicating the login name and password transmitted from the client device 14 is received, the process proceeds from step 102 to step 104. In step 104, user authentication is performed by comparing the transmitted login name and password information (that is, user input information) with user information registered in advance in the server device 12, and the input information is registered. If it is authenticated as a legitimate user in accordance with the existing user information, the process proceeds to the next step 106 on the assumption that the login of the user is permitted. Although omitted in FIG. 3, the server device 12 rejects the login of the user when the input information does not match the registered user information.
[0024]
In step 106, in the predetermined folder under the management of the DB 20, that is, in the shared file system provided by the server device, a predetermined folder set in advance to be accessed first when the user logs in is set as the access position. Then, it is confirmed whether or not the user has the access right to the data in the predetermined folder. In the present embodiment, since the access right is set for the folder as described above, the presence / absence of the access right for the folder in the predetermined folder is confirmed.
[0025]
In the next step 108, only the information indicating the data having the access right is displayed on the display means 14B of the client device 14 as the data structure of the DB 20, and the command is accepted in the next step 110.
[0026]
Specifically, as shown in FIG. 5, the “Home” folder 210 is set as a folder that is first accessed when the general users U1 to U5 log in, and is located below the “Home” folder 210. An access right is set to permit access to the user belonging to the user group (1) for the folder 212 of the “folder A”, and the user belonging to the user group (2) for the “folder B” folder 214. An example in which the access right is set so as to permit access to the URL (a character string in square brackets indicates a folder name) will be described. That is, the file 216 under the folder 212 can be browsed only by users belonging to the user group (1), and the file 216 under the folder 214 can be browsed only by users belonging to the user group (2).
[0027]
In this case, when the general user U1 logs in, the general user U1 belongs to the user group {circle around (1)}, and among the “folder A” folder 212 and the “folder B” folder 214, the “folder A” folder 212 is included. Only have access. Therefore, for example, as shown in FIG. 6A, only the icon 30A indicating the “folder A” folder 212 is displayed on the display unit 14B of the client device 14.
[0028]
When the general user U5 logs in, the general user U5 belongs to the user group {circle around (2)}, and among the “folder A” folder 212 and the “folder B” folder 214, only the “folder B” folder 214 exists. Since there is an access right, only the icon 30B indicating the “folder B” folder 214 is displayed as shown in FIG.
[0029]
When the general user U3 logs in, the general user U3 belongs to both the user groups (1) and (2), and therefore accesses both the “folder A” folder 212 and the “folder B” folder 214. Since there is a right, as shown in FIG. 6C, both the icon 30A indicating the “folder A” folder 212 and the icon 30B indicating the “folder B” folder 214 are displayed.
[0030]
As described above, when the user logs in, only the icon 30 indicating the folder to which the user has access right is displayed, so that only the accessible folder can be selected by the user. In other words, it is not necessary for the user to try accessing without knowing whether he / she has the access right as in the prior art, and the user can reliably access the folder in which the icon 30 is displayed.
[0031]
The user confirms the display on the display unit 14B of the client device 14, operates the input unit 14A, selects the desired folder icon 30 from the displayed icons 30, and inputs a command. The input command is transmitted from the client device 14 to the server device 12.
[0032]
When the server device 12 receives a command for requesting movement of the folder to be accessed from the client device 14, the process proceeds from step 112 to step 116 in FIG. 5 to step 116, and the access position is moved to the requested folder. Then, the presence / absence of the user's access right to each data in the folder is confirmed, and the process returns to step 108. As a result, even after the folder to be accessed is moved, the display unit 14B of the client device 14 can select only the accessible folder to which the user has access right from the data in the moved folder. The display, that is, the display of the data structure at the access position of the DB 20 is updated.
[0033]
If a command other than moving a folder, such as a command requesting data browsing or data storage, is received from the client device, the process proceeds from step 112 to step 118 through step 114, and the received command is Perform appropriate processing. Thereafter, until the user logs off, the process returns from the next step 120 to step 110, and the same processing is repeated, and the user operates the input unit 14A of the client device 14 and the server device 12 of the client device 14. When the user logs off from the server device 12 because the connection is automatically cut off or the connection is automatically cut off (time over) without any command input for a predetermined time or more, affirmative determination is made in step 120, The process of 3 ends.
[0034]
In the above description, for the sake of simplicity of explanation, the case where the access right is set only for the folder has been described as an example. However, naturally, the access right may be set for the file, and in this case, Of course, it is only necessary to display on the display means 14B that only the file having the access right can be selected by displaying only the icon indicating the file to which the login user has the access right among the files stored in the folder. Yes. In addition, access rights may be set for drives (various storage means such as HDDs, FDs, CD-ROMs, MOs, etc. used in the DB 20). In this case as well, a drive for which the login user has access rights may be used. Only the icon having the access right may be selected and displayed on the display means 14B by displaying only the icon shown.
[0035]
In this way, when the user logs in to the server device 12 from the client device 14 and displays the icon 30 indicating the data managed in the DB 20 of the server device 12 on the display unit 14B of the client device 14, the server device 12 Control is performed so that only icons indicating data (folders in the above example) to which the logged-in user has access rights are displayed. As a result, the user can easily grasp the data for which he / she has access rights simply by confirming whether or not the icon 30 is displayed. In other words, since the data can be accessed if the icon 30 is displayed, it is not necessary to try the access without knowing whether the user has the access right as in the conventional case.
[0036]
In the above description, the case where the logged-in user displays the data icon 30 having the access right and hides the data icon 30 without the access right has been described as an example, but the present invention is limited to this. It is not a thing. That is, the state of the data icon 30 with the access right and the state of the data icon 30 without the access right may be different so that the user can visually distinguish whether the access right is present or not. The 30 forms may be different. This is because data of a plurality of icons 30 having different forms according to the presence or absence of access rights is prepared in advance and stored in the server device, and the processing of step 108 in FIG. This can be realized by changing the process to select and display the icon 30.
[0037]
Specifically, for example, when the user who has logged in the form of the icon 30 has access rights to the “folder A” folder 212 shown in FIG. 5 and does not have access rights to the “folder B” folder 214, that is, As shown in FIG. 7A, even if the display of the icon 30A of the “folder A” folder 212 with access right is darkened and the display of the icon 30B of the “folder B” folder 214 without access right is lightened. Good. Further, as shown in FIG. 7B, the icon 30 of the “folder B” folder 214 is displayed with a mark 32 indicating that there is no access right, for example, and is displayed according to the presence or absence of the access right. The icons 30 may have different states. Although not shown, the color of the icon 30A of the “folder A” folder 212 with access right and the color of the icon 30B of the “folder B” folder 214 without access right may be changed.
[0038]
In this way, by displaying the icons 30 in different forms according to the presence or absence of access rights, the user can easily determine which data he / she has access rights by simply checking the display. Can be confirmed.
[0039]
In the above description, the case where the icon 30 is displayed as “information indicating data” of the present invention has been described as an example, but the present invention is not limited to this. For example, in a client device that operates in a CUI (character based user interface) environment in which icons cannot be displayed, instead of the GUI, a list of folder names and file names is generally displayed as text instead of the icons 30. In this case, the file name of data without access right may be deleted to display a list, or a predetermined character character for distinguishing the presence or absence of access right may be added and displayed.
[0040]
In the above description, the case where the present invention is applied to the case where the icons 30 of folders and files under the access folder are displayed, that is, the data structure at the access position of the DB 20 has been described. However, the present invention is not limited to this. It is not something. That is, the present invention can be applied to the case where the entire data structure of the DB 20 or all data structures below a predetermined folder are displayed.
[0041]
【The invention's effect】
As described above, the present invention has an excellent effect that the user can easily grasp the presence / absence of the access right to the data shared on the network.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a network system according to an embodiment.
FIG. 2 is a conceptual diagram for explaining an example of a relationship between users who use a network system.
FIG. 3 is a flowchart illustrating a control process performed in the server device by executing a management program.
FIG. 4 is an example of a login screen.
FIG. 5 is a diagram illustrating an example of a data structure in a database.
6A to 6C are diagrams illustrating examples of icons displayed on the client device when each user logs in to the server device from the client device.
7A and 7B are diagrams showing another display example of icons. FIG.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 Network system 12 Server apparatus 14 Client apparatus 14A Input means 14B Display means 16 Network 22 Management program 30 Icon 32 Mark 200 Login screen 210 Folder 212 Folder 214 Folder 216 File

Claims (4)

A network system in which a plurality of terminal devices having display means for displaying information are connected via a network,
A storage unit that is shared by a plurality of the terminal devices and stores data by setting access rights for users of the terminal devices;
When the storage means is accessed from the terminal device, the display means of the terminal device has a data structure at least at the access position of the storage means, and information indicating data that the user of the terminal device has access rights to And control means for displaying the information different from the information indicating the data without access right,
A network system comprising: A storage device connected to a terminal device having a display means for displaying information via a network and configured to store data by setting an access right for a user of the terminal device. A program executed on a server device that is managed to be usable,
When the storage means is accessed from the terminal device, the display means of the terminal device shows the data structure at least at the access position of the storage means, and the user of the terminal device has the access right A program for displaying information and information indicating data having no access right so that the states are different. 3. The program according to claim 2, wherein information indicating data having no access right is hidden and only information indicating data having the access right is displayed. The program according to claim 2, wherein a form of information indicating the data is changed according to presence or absence of the access right.

Images