1227420 五、發明說明（1) --- 發明所屬之技術領域 本發明是有關於報表内容控管之系統及方法，且特別 是有關於一種依據權限控制多維度資料内容之系統及方1 法0 先前技術 現有多維度報表内容的權限控管與多重展現，主 基於主從架構（CLIENT/SERVER)的設計方式，需針斟每一疋 套資料庫系統各自各安裝一套用戶端程式，舉例來說，+ 多維度 > 料庫為微軟SQL Server 2000時，用戶端需要安 裝微軟的多維度報表分析工具，或是微軟的用戶端管理程 1」且主從架構的設計方式造成無法跨越防火牆及作到異 質系巧整合的問題。舉例來說，視窗（WIND〇ws)作業系統 對於貝料涊證方法不同於Un丨χ作業系統，由於視窗作業系 統無f對Unix作業系統之資料進行認證，造成作業系 統之貧料無法跨越視窗作業系統之防火牆，因此，益法做 到異質系統整合。 ~ * 維度報表的權限控制管理，在存取不同的資料 士源時、’官理者需要分別在各個多維度資料庫中進行設 定’無法對多維度表内容的權限進行集中 理。 ί ^ 4私式開發人員在針對不同使用者之身份，但其 具有查询相同條件限岳丨丨I ^ ώ 用ι制下之夕、准度報表吩，需依據不同使 用者身伤撰寫不同的程式碼及查詢語法，造成人力資源 的浪費及成本的支出。 以成人刀貝 發明内容1227420 V. Description of the invention (1) --- The technical field to which the invention belongs The present invention relates to a system and method for controlling report content, and more particularly to a system and method for controlling multi-dimensional data content based on authority1 In the prior art, the permission control and multiple display of the multi-dimensional report content are mainly based on the master-slave architecture (CLIENT / SERVER) design method. Each client system needs to be installed with a client program, for example. + Multi-dimensional> When the database is Microsoft SQL Server 2000, the client needs to install Microsoft's multi-dimensional report analysis tools or Microsoft's client management process1 "and the design of the master-slave architecture makes it impossible to cross the firewall and work. To the problem of ingenious integration. For example, the Windows (WINDOW) operating system is different from the Un 丨 χ operating system in the certification method. Because the Windows operating system does not have f authentication for Unix operating system data, the operating system cannot run across windows. The operating system's firewall, therefore, Yifa achieves heterogeneous system integration. ~ * Dimension report permission control management. When accessing different sources of data, ‘official managers need to set in each multi-dimensional database separately’. It is not possible to centralize the permissions of multi-dimensional table content. ί ^ 4 Private developers are targeting different user identities, but they have the same conditions to query. 丨 丨 I ^ ￥ It is necessary to write different reports based on the injuries of different users. Code and query syntax cause waste of human resources and cost. Adult Scallop Content
1227420 過濾器 維度資 根據多 生一多 據本發 由一電 括下列 度報表 符合一 下來，依據一多維度 主要目的就是提供一種可以達成 統整合及程式開發人員不需要撰 與查绚語法之依據權限控制多維 Ο 依據權限控制多維度資料内容之 度資料庫，此系統包括一權限資 組及一資料集合過濾器。 存複數個多維度資料存取規則。 輕接權限資料庫，用以根據一多 符合一共通查詢語法之一共通查 件及讀取來自權限資料庫之多維 多維度資料查詢條件，並且傳送 維度資料庫進行多維度資料查 五、發明說明（2) 有鑑於此 跨越防火牆、 寫不可重覆使 度資料内容之 依據本發 系統，適用於 料庫、一查詢 權限資料 查詢語法 維度報表查詢 詢條件，根據 度資料存取規 多維度資料查 詢。 資料集合 資料庫根據多 料集合，並且 資料集合，產 此外，依 内容之方法， 資料庫，其包 少包括一多維 詢條件，產生 ’本發明的 達到異質系 用之程式碼 系統及方法 明實施例之 至少一多維 語法生成模 庫，用以儲 生成模組， 條件，產生 共通查詢條 則，產生一 詢條件至多 ’耦接 料查詢 維度資 維度報 明實施 腦糸統 步驟， 查詢條 共通查 資料存 權限資料庫， 條件所傳送之 料存取規則， 表。 例之依據權限 所執行，適用 件。接著’根 詢語法之一共 取規則，修正 用以接收多維度 至少一多維度資 過濾修正多維度 控制多維度資料 於至少一多維度 首先，接收一查詢指令，其至 據多維度報表查 通查詢條件。接 共通-查詢條件並1227420 The filter dimension is based on multiple generations and multiple sources. The following statements are included in the report. The main purpose of multiple dimensions is to provide a basis for unified integration and the need for program developers to write and check syntax. Multi-dimensional authority control 0 Controls the degree database of multi-dimensional data content according to authority. This system includes a authority data group and a data collection filter. Store multiple multi-dimensional data access rules. Light access to the authority database, which is based on a common search query that matches one of the common query syntaxes and reads multi-dimensional and multi-dimensional data query conditions from the authority database, and sends the dimensional database for multi-dimensional data inspection. V. Description of the invention (2) In view of this, the basis of this system is to cross the firewall and write non-repeatable data content, which is applicable to the warehouse, a query authority data query syntax dimension report query conditions, and multi-dimensional data query according to the data access rules. . The data set database is based on multiple data sets and data sets. In addition, according to the content method, the database includes a multi-dimensional query condition to generate the code system and method for achieving the heterogeneity of the present invention. At least one multi-dimensional grammar generation model library of the embodiment is used to store generating modules, conditions, and generate common query rules, and generate a query condition of up to 'coupling material query dimensions, data dimension declarations, and implementation of brain system steps. Commonly check the data storage authority database, the conditions of the material access rules transmitted by the conditions, tables. The example is based on the authority and applies to the application. Then one of the 'root query syntax' rules is used to modify the filter to receive at least one multi-dimensional data filter. Modify the multi-dimensional control to multi-dimensional data in at least one multi-dimensional. First, receive a query command to query the query according to the multi-dimensional report. condition. Then common-query condition and
1227420 五、發明說明（3) 且產生一多維度資料查詢條件。之後，依摅夕 最後，根據"i;:;讀取應：―多維度資料集合。 產生-多維度存取規則，修正多維度資料集合， 顯易其他"、特徵、和優點能更明 細說明如下：、乂佳貫施例，並配合所附圖式，作詳 實施方式 第1圖為顯示本發明實施例依據權限控制多維户 2容系統之系統架構示意圖，本發明實#度貝: ，資料内容系統，包括一應用程式飼服器二控唯制， 貝枓庫310〜330及一存取控制（Access c〇ntr〇i )伺服哭 200。存取控制伺服器20 0更包括—查詢語法生成模电口口 210、一權限資料庫220及一資料集合過濾模組23〇。 應用私式 <司服裔1 〇 〇 ’例如網路伺服器（W e b Server)，用以負貝用戶端1〇、2〇與存取控制伺服器2〇〇之 間的溝通，以及資料和應用程式的管理。 權限資料庫2 3 0，用以儲存複數個多維度資料存取規 則0 查詢語法生成模組2 0 0，用以根據用戶端1〇〜2〇透過應 用程式伺服為1 0 0所傳送之多維度報表查詢條件，產生符 合一共通查詢語法之對應共通查詢條件。查詢語法生成模 組2 0 0根據所產生之共通查詢條件及從權限資料庫2 2 〇中讀 取對應之多維度資料存取規則’產生一多維度-資料查詢條1227420 V. Description of the invention (3) and generate a multi-dimensional data query condition. After that, Yi Yixi Finally, according to "i;:;, the reading should be: ― Multi-dimensional data collection. Generation-multi-dimensional access rules, correction of multi-dimensional data collection, obvious other ", features, and advantages can be explained in more detail as follows: 乂 Jiaguan embodiment, and in conjunction with the attached drawings, detailed implementation of the first The figure is a schematic diagram showing the system architecture of a multi-dimensional user-control system based on permission control according to an embodiment of the present invention. The present invention implements a data content system, including an application feeder and two-control system. And an access control (Access cntr0i) servo cry 200. The access control server 200 further includes a query syntax generating module electrical port 210, a permission database 220, and a data set filtering module 23. Application private server 100 server, such as a web server, is used to communicate between the client 10, 20 and the access control server 200, and data. And application management. The authority database 2 3 0 is used to store a plurality of multi-dimensional data access rules. 0 The query syntax generation module 2 0 0 is used to transmit as many as 1 0 0 through the application server according to the client 10 ~ 20. Dimension report query conditions generate corresponding common query conditions that conform to a common query syntax. The query syntax generation module group 2 0 0 generates a multi-dimensional-data query bar according to the generated common query conditions and reads the corresponding multi-dimensional data access rule from the authority database 2 2 0.
1227420 五、發明說明（4) 件並且傳送多維度資料杳古旬你/生c夕 進行多維度資Wv句條件多維度資料庫 資料集合過濾器230，用以接•之祕ώ , 維^料查詢條件進行查詢後所傳送之^^庫根據多 依據多維度資料集合之各個維产愈 ^、准度貝枓集合， 為樹狀資料結構型態、，並且從ί限資料廑：階層關係轉換 維度資料存取規則，利用，^取對應之多 取的節點以過濾修正多維度人科:構中沒有權限存 報表。 再度貝枓集合，產生-多維度資料 !2圖為顯示本發明實施例依 内谷方法之操作流程示意圖及 =夕，.隹度貝枓 之權限資料庫之操作流程示意圖來為老4 :本發明實施例 發明實施例之操作流程將進行‘明： 目及第3圖’本 請參考第2圖系統管理者 策，產生一權限設定介此 先制定一權限控制政 定介面設定不同使用者身/驟/4〇〇)。接著，透過權限設 利用打勾的方式選取使用者者針？二榷：控制選取表單， 错此，達到設定不同使用者身电:仔取之椎限， 制。接下來，根據選取完成=貢料存取的限 多維度資料存取㈣表mf9f/㈣存取規則，產生 料存取規則表單儲存至權限^資。最後’將多維度資 請參考第3圖，用戶端;貝:4/二 而透過應用程式伺服器傳送一查 0213-A40123TWF(N1);B934;FRANKLIN.ptd 1227420 五、發明說明（5) 5旬指令，复包括 件，例如”地區"及”用戶端辨識資,料及一多維度報表查詢條 S600 )。存取批 銷售值"傳送至存取控制伺服器（步驟 到多維度報表工杳％司服器中之查詢語法生成模組正確接收 報表查詢條:法生成模組依據多維度 讀取對應之多I;::;;用戶端辨識資料從權 法（牛驟、又貝料存取規則，產生多維度資料查詢語 料庫It彳^痒並且傳送多維度資料查詢語法至多維度資 卄庫進仃多維度資料查詢。 多_ ^^為+顯示本發明實施例之共通查詢語法及對應之 者所二貝1Γ詢語法示意圖，查詢語法生成模組根據使用 妓、s 0 一询條件’例如”地區，，及”銷售值Π ’產生對應之 =t二δ條件70〇，並且依據用戶端辨識資料從權限資料 頃取對應之多維度資料存取規則，產生多維度資料查 1 U =720。其中，查詢語法生成模組將依據不同維度與 白層二取共通查5旬條件了丨〇。舉例來說，查詢語法生成模 i先讀取多維度報表查詢條件”地區，，，並依據用戶端辨識 例如銷售人員7 〇 〇從權限資料庫中讀取對應之多維 貝料存取規則’如果沒有受限即產生使用者可以讀取全 部"$區"資料之多維度資料查詢條件，如果有受限在”亞 州區 即產生八此讀取"亞洲區"資料之多維度資料查詢 "條件，接下來，再去查多維度資料中之，，亞洲區„下一階層 國豕疋否有文限，且產生對應之多維度資料查詢條件為 (([地區]、[亞洲區]、[台灣])}{([地區]、[亞洲區]、…1227420 V. Description of the invention (4) pieces and transmission of multi-dimensional data. In ancient times, you / students carried out multi-dimensional information. Wv sentence condition. Multi-dimensional database data collection filter 230, which is used to access the secrets. The ^^ database that is transmitted after the query is performed according to the multidimensional and multidimensional data collections, and the accuracy of the data set is a tree-like data structure type. Dimension data access rules, use ^ to take the corresponding number of nodes to filter and modify multi-dimensional humanities: there is no permission to store reports in the structure. Once again, the collection is generated, and multi-dimensional data is generated! 2 is a schematic diagram showing the operation flow of the method of the inner valley according to the embodiment of the present invention, and the illustration of the operation flow of the authority database of 隹 Degrees is from the old 4: this Inventive Example The operating procedure of the inventive example will be described in the following: “Refer to Figure 3 and Figure 3”. Please refer to Figure 2 for system administrator policies to generate a permission setting interface. Here, first set up a permission control policy interface to set different user profiles. / Shot / 400). Then, select the user's needle by ticking it through the permission setting? Second question: control the selection form. If this is wrong, you can set the user's body power: the vertebral limit of the user. Next, according to the selected completion = restricted access to the multi-dimensional data access table mf9f / ㈣ access rules, the data access rule form is generated and stored to the authority. Finally, please refer to Figure 3 for the multi-dimensional information. Client: Be: 4/2 and send a check through the application server 0213-A40123TWF (N1); B934; FRANKLIN.ptd 1227420 V. Description of the invention (5) 5 The instructions include multiple pieces, such as "Region" and "Client identification information, and a multi-dimensional report query bar S600). Store batch sales value "and send it to the access control server (steps to the query syntax generation module in the multi-dimensional report tool% server correctly receive the report query bar: the method generation module reads the corresponding Multiple I; :: ;; The client-side identification data is generated from the weighting method (bump and data access rules), which generates a multi-dimensional data query corpus. It sends the multi-dimensional data query syntax to the multi-dimensional resource database. Dimensional data query. Multi _ ^^ is + shows the common query syntax of the embodiment of the present invention and the corresponding schematic diagram. The query syntax generation module is based on the use of prostitutes and s 0 to query conditions such as "region, , And "Sales value Π 'generates a corresponding = t 2 δ condition 70, and according to the client identification data, the corresponding multi-dimensional data access rule is obtained from the authority data, and a multi-dimensional data query 1 U = 720. Among them, The query grammar generation module will check the conditions in the 50th and the white layer according to different dimensions. For example, the query grammar generation module i first reads the multi-dimensional report query condition area, and Client identification, for example, salesperson 700 reads the corresponding multidimensional shell material access rule from the authority database. If there are no restrictions, it will generate a multi-dimensional data query condition that the user can read all the data of "$ 区". , If there are restrictions in the "Asian District", there will be eight conditions for reading this "Asian Area" multi-dimensional data query "condition, then next, check the multi-dimensional data, the Asian area" next Are there any restrictions on the hierarchy of the country, and the corresponding multi-dimensional data query conditions are (([region], [Asia region], [Taiwan])} {([region], [Asia region], ...
〇213-A4〇123TWF(Nl);B934;FRANKLIN.ptd 第9頁 1227420 五、發明說明（6) [中國])}，即表示丨丨國家丨丨受限在「台 度資料存取規則下。 七及[中國]之多維 田多維度資料庫正確接收到多維度 多維度資料庫將根據多維度資料查詢；二值 S630) 貝枓集合至貝枓集合過遽模組(步驟 ”比：Γ多維度資料在不同階層中權限的限制，會造成較 ^階層中對於低階層資料節點數值的加總出現錯 貢料集合過滤模組將根據多維度資料集合中之 =2亡下階層關係、’將多維度資料集合從陣列形態 狀貨料結構狀態(步驟S640 )。接下來，依據對應 ^維度資料存取規則，將樹狀資料結構中沒有讀取權限 的卽點刪除，產生一更新樹狀資料結構（步驟S65〇)。之 後在更新樹狀資料結構中，由底層葉節點開始重新計算 上一層的加總直到最上層之根節點，藉此修正多維度資f 木合之數值（步驟Μ 6 〇 )’即修正多維度資料集合。 第5圖為本發明實施例之多維度資料集合之樹狀資料 結構不意圖，在多維度資料集合之樹狀資料結構中包括至 )3個節點亞洲8 〇 〇、歐洲81 〇、所有地區8 2 〇及對應之節 數值90 0〜930。 最後，資料集合過濾模組透過應用程式伺服器傳送修 正後多維度資料集合，即用戶端所查詢的多維度資料報表 至用戶端（步驟S67 0 )。 又 第6圖為本發明實施例之儲存媒體示意圖「參考第6〇213-A4〇123TWF (Nl); B934; FRANKLIN.ptd Page 9 1227420 V. Description of Invention (6) [China])}, it means that the country is restricted under the "Taiwan Data Access Rules" VII and [China] Multidimensional Field Multidimensional Database Correctly Received Multidimensional Multidimensional Database Will Query Based on Multidimensional Data; Binary S630) Beam Set to Beam Set Over Module (Steps) Ratio: Γ Restrictions on the permissions of multi-dimensional data in different hierarchies will cause the sum of the values of lower-level data nodes in the higher-level data to appear wrong. The data collection filter module will be based on the relationship between the multi-dimensional data set = 2 and the lower-level relationship, ' The multi-dimensional data set is removed from the array material state (step S640). Next, according to the corresponding ^ -dimensional data access rule, the points that do not have read permission in the tree-like data structure are deleted to generate an updated tree. Data structure (step S65). After updating the tree-like data structure, the bottom leaf nodes start to recalculate the sum of the previous layer up to the root node of the top layer, thereby correcting the value of the multi-dimensional resource f tree (step M). 6 〇) That is, the multi-dimensional data set is modified. FIG. 5 is a tree data structure of the multi-dimensional data set according to an embodiment of the present invention, and the tree data structure of the multi-dimensional data set includes up to 3 nodes of Asia 800, Europe 81 〇, all regions 8 2 0, and the corresponding section value of 90 0 ~ 930. Finally, the data set filtering module sends the corrected multi-dimensional data set through the application server, that is, the multi-dimensional data report queried by the client to the client (step S67 0). FIG. 6 is a schematic diagram of a storage medium according to an embodiment of the present invention.
Ι1Η 〇213-A40123TW(Nl);B934;FRANKLIN.ptd 第10頁 1227420 五、發明說明（7) 圖，本發明實施例之儲存媒體將說明如下。 用以i發明實施例之儲存媒體95 0，其儲存-電腦程式， 内=至一電腦系統中，並且執行權限控制多維度資料 法9 60 ’上述方法包括下列步驟，首先，接收-據多‘二j ϊ至少包括一多維度報表查詢條件。接著，根 ΐΐ;;;表查詢條件，產生符合-共通查詢語法之-共 通:;二杜、。之後，依據一多維度資料存取規則，修正共 據；Γΐ 生—多維度資料查詢條件。接下來，依 條件’從多維度資料庫讀取對應之-多 維度資料:產ί，”多維度資料存取規則’修正多 大果二產生一多維度報表。 内容ί ί矫：ΐ t發明所提出之依據權限控制多維度資料 多安…内容之權限控管獨立於 異質系統整合及對多；=夕内卜：可：達成跨越防火牆、 理。此外，裎m ϋ報表内谷之權限進行集中化管 用者身份，產1二之？用查詢語法生成模組根據不同使 免逐-用同：ΓΓ多維度資料時，可以避 序。 吏用之程式碼與查詢語法的反覆程 雖然本發明已以較佳者#仓丨担 限定本發明’任何熟習此ς:者：：土離：j:非用以 當可作些許之更動與“ 耗圍當視後附之申請專利範圍所界定者為準 之保護I1Η 〇213-A40123TW (Nl); B934; FRANKLIN.ptd Page 10 1227420 V. Description of the invention (7) Figure. The storage medium according to the embodiment of the present invention will be described as follows. The storage medium 95 0 of the embodiment of the invention is stored in a computer program, internal = to a computer system, and executes a permission control multi-dimensional data method 9 60 'The above method includes the following steps. First, receive-according to the data' Two j ϊ include at least one multi-dimensional report query condition. Then, based on ;;; querying the table conditions, generating-common:-Erdu, matching-common query syntax. After that, modify the common data according to a multi-dimensional data access rule; Γΐ—multi-dimensional data query conditions. Next, according to the condition 'read the corresponding from the multi-dimensional database-multi-dimensional data: production,' multi-dimensional data access rules' amend the results of a multi-dimensional report to produce a multi-dimensional report. Content ί ΐ: ΐ t 发明 所The proposed basis is to control multi-dimensional data and security based on permissions ... Content control is independent of heterogeneous system integration and multiple-to-many; = Xi Neibu: Yes: to achieve cross-firewall and management. In addition, 裎 m ϋ the authority of the inner valley of the report is centralized Use the identity of the user to produce one or two? Use the query syntax to generate a module to avoid the need to use the same: ΓΓ multi-dimensional data, you can avoid ordering. Iterative procedures of the code and query syntax although the present invention has It is better to #Care 丨 Define the invention 'Anyone familiar with this :::: away from: j: non-used when you can make a few changes and "consumption as defined by the scope of the attached patent Quasi-protection
1227420 圖式簡單說明 第1圖為顯示本發明實施例依據權限控制多維度資料 内容糸統之系統架構不意圖， 第2圖為顯示本發明實施例依據權限控制多維度資料 内容方法之操作流程示意圖； 第3圖為顯示本發明實施例之權限資料庫之操作流程 不意圖， 第4圖為顯示本發明實施例之共通查詢語法及對應之 多維度資料查詢語法示意圖； 第5圖為本發明實施例之多維度資料集合之樹狀資料結 構示意圖； 第6圖為本發明實施例之儲存媒體示意圖。 符號說明 , 10 、20〜用戶端； 1 0 0〜應用程式伺服器； 2 0 0〜存取控制伺服器； 2 1 0〜查詢語法生成模組； 22 0〜權限資料庫； 23 0〜資料集合過濾模組； 31 0〜330〜多維度資料庫； 7 0 0〜銷售人員； 7 0 0〜共通查詢條件； 72 0〜多維度資料查詢條件； 8 0 0〜亞洲； 8 1 0〜歐洲； -1227420 Brief description of the diagram. The first diagram is to show the system architecture of controlling multi-dimensional data content based on permissions according to the embodiment of the present invention. The second diagram is to show the operation flow of the method of controlling multi-dimensional data content according to the embodiments of the present invention. 3 is a schematic diagram showing the operation flow of the authority database of the embodiment of the present invention, FIG. 4 is a schematic diagram showing the common query syntax and the corresponding multi-dimensional data query syntax of the embodiment of the present invention; FIG. 5 is the implementation of the present invention A schematic diagram of a tree-like data structure of an example multi-dimensional data set; FIG. 6 is a schematic diagram of a storage medium according to an embodiment of the present invention. Symbol description, 10, 20 ~ client; 1 0 ~ app server; 2 0 ~ access control server; 2 1 ~~ query syntax generation module; 22 0 ~ authority database; 23 0 ~ data Collection filter module; 31 0 ~ 330 ~ multi-dimensional database; 7 0 0 ~ sales staff; 7 0 0 ~ common query conditions; 72 0 ~ multi-dimensional data query conditions; 8 0 0 ~ Asia; 8 1 0 ~ Europe ;-
0213-A40123TWF(Nl);B934;FRANKLIN.ptd 第12頁 1227420 圖式簡單說明 82 0〜所有地區； 9 0 0〜9 3 0〜節點數值。0213-A40123TWF (Nl); B934; FRANKLIN.ptd Page 12 1227420 Schematic description 82 0 ~ all areas; 9 0 0 ~ 9 3 0 ~ node value.
IH11I 第13頁 0213-A40123TWF(Nl);B934;FEANKLIN.ptdIH11I Page 13 0213-A40123TWF (Nl); B934; FEANKLIN.ptd