摘要 |
PROBLEM TO BE SOLVED: To easily and appropriately update the access right of a system such as a medical information system to which the access right is precisely set for each individual. SOLUTION: Respective users are made correspondent to arbitrary groups and the access right is set for each group. Since the correspondence of groups and users is set to a belonging group file 24, the addition or deletion of a user can be performed to this belonging group file 24. When group data are updated, while referring to the belonging group file 24 and access right file 26, it is checked whether the group of no user exists or not and whether data not permitted access to anyone or data not to be accessed from anyone are to be generated or not. Even when the setting of access right to respective data is changed, the check is performed while referring to the access right file 26 so as not to generate the data not to be accessed from anyone. |