System management method, system management device, system management program, and storage medium containing system management program

• US 20060190588A1
• Filed: 07/09/2004
• Published: 08/24/2006
• Est. Priority Date: 07/11/2003
• Status: Active Grant

• Current Assignee: Nippon Telegraph and Telephone Corporation
• Original Assignee: Nippon Telegraph and Telephone Corporation
• Inventors: Shimokura, Ken-chiro, Yamamoto, Tetsuya, Endo, Kimitaka, Imaeda, Takashi, Nakayama, Jouji, Yabuuchi, Tsutomu
• Granted Patent: US 7,617,238 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A system management method is disclosed for associating a process object and a process with each node in a tree structure, and operating each node based on the tree structure so as to manage the process object and the process, including: registering a registered user that performs operations for a general node corresponding to the process object or for a function node corresponding to the process; setting the function node as a child node of the general node corresponding to the process object for which the process corresponding to the function node should be performed, and setting the general node as a parent node of the function node; setting registered user operation authority for each registered user; and, when execution of the process corresponding to the function node is requested by the registered user, causing the function node to execute the process only when the process is permitted by the registered user operation authority, of the registered user requesting the process, set in the general node that is a parent node of the function node.

Claims

1. A system management method for associating at least a process object and at least a process that should be executed for each process object with each node in a tree structure, and operating each node based on the tree structure so as to manage the process object and the process, comprising:

a user registration step of performing a process for registering a user ID to be uniquely assigned to each registered user that performs operations for a general node corresponding to the process object or for a function node corresponding to the process, and storing the user ID in a storing means;

a node number assigning step of uniquely assigning a node number to each of the general node and the function node, and storing the node number in the storing means by associating the node number with the general node or the function node;

a node setting step of setting the function node as a child node of the general node corresponding to the process object for which the process corresponding to the function node should be performed, and setting the general node as a parent node of the function node, and storing information of the set child node into the storing means by associating the information with the general node that is the parent node;

an authority setting step of setting registered user operation authority for each registered user for each of the general nodes, and storing the registered user operation authority into the storing means by associating the registered user operation authority with the general node;

a process execution step of, when execution of the process corresponding to the function node is requested by the registered user, causing the function node to execute the process only when the process is permitted by the registered user operation authority, of the registered user requesting the process, set in the general node that is a parent node of the function node; and

in the authority setting step, providing a registered user in a general node with registered user operation authority including management authority for performing user registration for a predetermined node, and permitting the registered user to set registered user operation authority for other registered user within a limit of the registered user operation authority of the registered user.

2. The system management method as claimed in claim 1, comprising:

in the authority setting step, setting, for each of the general node, non-registered user operation authority that is operation authority of a non-registered user that is not registered by the user registration step, and storing the non-registered user operation authority in the storing means by associating the non-registered user operation authority with the general node; and

in the process execution step, when execution of the process corresponding to the function node is requested by the non-registered user, causing the function node to execute the process only when the process is permitted by the non-registered user operation authority set for the general node that is the parent node of the function node.

3. The system management method as claimed in claim 1, comprising:

in the authority setting step, further setting, for each of the general nodes, function node operation authority for each function node, and storing the function node operation authority in the storing means by associating the function node operation authority with the general node; and

in the process execution step, when execution of the process corresponding to the function node is requested by any of function nodes, causing the function node to execute the process only when the process is permitted by the function node operation authority, of the function node that requests the process, set for the general node that is the parent node of the function node.

4. The system management method as claimed in claim 1, comprising:

in a message sending step of sending a message in which at least any one of the function node or the user is a sending origination and at least any one of function nodes is a destination, detecting presence or absence of execution of a predetermined event process at the sending origination, and sending the message received from the sending origination according to the detection result; and

in a receiving step of receiving the message to the destination, when receiving the message, sending a message having the destination as a sending origination to the destination or causing the destination to execute a predetermined event process according to a condition that is set beforehand.

5. The system management method as claimed in claim 4, comprising:

in the message sending step and the message receiving step, sending and receiving an asynchronous message using a queue that temporarily stores the message.

6. The system management method as claimed in claim 5, comprising:

in the message sending step and the message receiving step, sending or receiving the asynchronous message according to a priority set for each message when sending or receiving the asynchronous message.

7. The system management method as claimed in claim 4, comprising:

in the message receiving step, when receiving the message, determining whether the message is a recursive message from the own node based on sending origination information of the message, and recursively performing message sending or the event process based on the sending origination information of the message when the message is the recursive message from the own node.

8. The system management method as claimed in claim 4, comprising:

in the message receiving step, receiving only a message sent from a sending origination set in a predetermined access list.

9. A system management apparatus for associating at least a process object and at least a process that should be executed for each process object with each node in a tree structure, and operating each node based on the tree structure so as to manage the process object and the process, comprising:

storing means for storing each piece of information of a general node corresponding to the process object, a function node corresponding to the process, and a registered user for operating the general node or the function node;

user registration means for performing a process for registering a user ID to be uniquely assigned to each registered user and storing the user ID in the storing means;

node number assigning means for uniquely assigning a node number to each of the general node and the function node, and storing the node number in the storing means by associating the node number with the general node or the function node;

node setting means for setting the function node as a child node of the general node corresponding to the process object for which the process corresponding to the function node should be performed, and setting the general node as a parent node of the function node, and storing information of the set child node into the storing means by associating the information with the general node that is the parent node;

authority setting means for setting registered user operation authority for each registered user for each of the general nodes, and storing the registered user operation authority into the storing means by associating the registered user operation authority with the general node; and

process execution means for, when execution of the process corresponding to the function node is requested by the registered user, causing the function node to execute the process only when the process is permitted by the registered user operation authority, of the registered user requesting the process, set in the general node that is a parent node of the function node,

wherein the authority setting means provides a registered user in a general node with registered user operation authority including management authority for performing user registration for a predetermined node, and permits the registered user to set registered user operation authority for other registered user within a limit of the registered user operation authority of the registered user.

10. The system management apparatus as claimed in claim 9, wherein:

the authority setting means includes means for setting, for each of the general node, non-registered user operation authority that is operation authority of a non-registered user that is not registered by the user registration means, and storing the non-registered user operation authority in the storing means by associating the non-registered user operation authority with the general node; and

the process execution means includes means for, when execution of the process corresponding to the function node is requested by the non-registered user, causing the function node to execute the process only when the process is permitted by the non-registered user operation authority set for the general node that is the parent node of the function node.

11. The system management apparatus as claimed in claim 9, wherein:

the authority setting means includes means for further setting, for each of the general nodes, function node operation authority for each function node, and storing the function node operation authority in the storing means by associating the function node operation authority with the general node; and

the process execution means includes means for, when execution of the process corresponding to the function node is requested by any of function nodes, causing the function node to execute the process only when the process is permitted by the function node operation authority, of the function node that requests the process, set for the general node that is the parent node of the function node.

12. The system management apparatus as claimed in claim 9, comprising:

message sending means for sending a message in which at least any one of the function node or the user is a sending origination and at least any one of function nodes is a destination; and

receiving means for receiving the message to the destination, the message sending means including means for detecting presence or absence of execution of a predetermined event process at the sending origination, and sending the message received from the sending origination according to the detection result, and

the receiving means including means for, when receiving the message, sending a message having the destination as a sending origination to the destination or causing the destination to execute a predetermined event process according to a condition that is set beforehand.

13. The system management apparatus as claimed in claim 12, wherein:

each of the message sending means and the message receiving means includes means for sending and receiving an asynchronous message using a queue that temporarily stores the message.

14. The system management apparatus as claimed in claim 13, wherein:

each of the message sending means and the message receiving means includes means for sending or receiving the message according to a priority set for each message when sending or receiving the asynchronous message.

15. The system management apparatus as claimed in claim 12, wherein the message receiving means includes:

means for, when receiving the message, determining whether the message is a recursive message from the own node based on sending origination information of the message; and

means for recursively performing message sending or the event process based on the sending origination information of the message when the message is the recursive message from the own node.

16. The system management apparatus as claimed in claim 12, wherein the message receiving means includes means for receiving only a message sent from a sending origination set in a predetermined access list.

17. A program for casing a computer to perform a system management process for associating at least a process object and at least a process that should be executed for each process object with each node in a tree structure, and operating each node based on the tree structure so as to manage the process object and the process, the program causing the computer to perform:

a user registration step of performing a process for registering a user ID to be uniquely assigned to each registered user that performs operations for a general node corresponding to the process object or for a function node corresponding to the process, and storing the user ID in a storing means;

a node number assigning step of uniquely assigning a node number to each of the general node and the function node, and storing the node number in the storing means by associating the node number with the general node or the function node;

a node setting step of setting the function node as a child node of the general node corresponding to the process object for which the process corresponding to the function node should be performed, and setting the general node as a parent node of the function node, and storing information of the set child node into the storing means by associating the information with the general node that is the parent node;

an authority setting step of setting registered user operation authority for each registered user for each of the general nodes, and storing the registered user operation authority into the storing means by associating the registered user operation authority with the general node; and

a process execution step of, when execution of the process corresponding to the function node is requested by the registered user, causing the function node to execute the process only when the process is permitted by the registered user operation authority, of the registered user requesting the process, set in the general node that is a parent node of the function node,

the authority setting step including a step of providing a registered user in a general node with registered user operation authority including management authority for performing user registration for a predetermined node, and permitting the registered user to set registered user operation authority for other registered user within a limit of the registered user operation authority of the registered user.

18. A computer readable recording medium storing a program as claimed in claim 17.