| 摘要 |
The present invention solves the problem of access control in a large data base with a large number of users by defining access rights separately for each application run on the data base. A plurality of data base roles are defined, in terms of the basic data base procedures CRUD, (create, read, update and delete), which a user is entitled to use in respect of the various value sets stored in the data base. A given user is given access to a set of roles on an application-by-application basis. When a user logs-in to a particular data base application, to which he has access, a procedure is run by the file server on which the data base is stored. The file server generates the access rights for that user in respect of that application. The user rights are then stored in the file server, preferably on a cache memory, for the time in which the application in question is running on the file server. Preferably, when the user logs-out of that application the access rights are deleted from store. |
