Access control to resource content

摘要

A method, system, and computer program product are provided for performing access control. Regarding an arbitrary document or the like in a logical hierarchy structure, there is provided a method for determining whether a range of access authority set for a certain user with respect to a document or the like exceeds a range of access authority set for the user with respect to the folder positioned immediately above the folder is provided, when a change in contents of the access authority set for each user or a new document or the like by being moved or copied from another document is created or the documents moved or copied. Where the exceeding is determined, a new folder for direct access is created and access authority is set equal to or exceeds the range of access authority determined to exceeding the range of access authority set for the user.

主权项

1. A method of managing access to documents or folders by users, by execution of computer code by a processor of a computer, in accordance with access authority set for each user with respect to each document or folder, in a contents sharing system for sharing access to documents or folders by a plurality of users, the method comprising the steps of:
determining, for an arbitrary document or folder in a logical hierarchy structure including documents and folders logically associated with each other and arranged hierarchically under a root folder, whether or not a range of access authority set for at least one user with respect to the document or folder exceeds a range of access authority set for the user with respect to a folder positioned immediately above the document or folder in the hierarchy structure; creating, in the case where the exceeding is determined in the determining step, a new folder for direct access immediately under a predetermined folder in the hierarchy structure, and setting access authority with respect to the new folder for direct access with a range equal to or exceeding the range of access authority set for the user with respect to the document or folder; and creating an access link with the new folder for direct access as a source and the document or folder as a target, subsequent to the creating and setting step.