Access control list conversion system, and method and program threrfor

摘要

An access control list conversion system includes: a first rule judgment unit 12 that judges whether an access control rule is a permission rule or a prohibition rule; a temporary storage unit 15 that stores the access control rule which is judged to be the permission rule; a second rule judgment unit 13 that judges whether the actor user of the prohibition rule is the same as the actor user of the permission rule and whether the access target resource of the prohibition rule includes the access target resource of the permission rule; a resource DB that stores resource information in which all of the latest information of the access target resource is systematically recorded; and a resource expansion unit that removes the access target resource of the permission rule from the access target resource of the access control rule which is judged to have the actor user as that of the permission rule and to include the access target resource of the access control rule, with reference to the resource information.