| 摘要 |
PURPOSE:To reduce the quantity of definition required for security and to make an application range flexible so as to easily lead the range, by dividing user groups into hierarchies like a tree structure, controlling the hierarchies and determining the validity of access by search based upon the hierarchies. CONSTITUTION:A user control information storing part 19 stores information indicating groups including respective users and user right information, a resource control information storing part 20 stores access right information to be applied to a user or a group capable of utilizing a resource at every resource and resource right information for these access rights and a group control information storing part 18 stores information for dividing the groups to be the set of users into hierarchies and controlling them. A right check processing part 12 searches a range based upon the hierarchy relation of groups in the storing part 18 based on the user right information in the storing part 19 and the resource right information in the storing part 20 and decides and determines the validity of access to an access request by the corresponding access right in the storing part 20. |
