System and method for controlling access to user interface elements

• US 7,240,360 B1
• Filed: 01/08/2001
• Issued: 07/03/2007
• Est. Priority Date: 01/08/2001
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Phan, Cung Ngoc
• Primary Examiner(s): Song; Hosuk
• Application Number:
  US09/756,591
• Time in Patent Office: 2,367 Days
• Field of Search: 713164-167, 713200-202, 705 50- 52, 707/1, 707/9, 707/100, 726 27- 30, 726 2- 7
• US Class Current: 726/2
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices

Abstract

A method and system is disclosed for interactively controlling user access to a plurality of user interface elements contained in a graphical user interface of a computer program. An access control profile means is associated with each user of the computer program. An access control profile means is associated with each user interface element in the computer program. An authorized administrator can select an access control profile means for each user interface element. Each access control profile means includes an option to assign user access privileges to view the data contained in the user interface element, activate a function contained in the user interface element, and an option to assign user access privileges to edit the data contained in the user interface element. The authorized administrator can interactively assign these access privileges to each and every user interface element contained in the program, therefore controlling the manner and method in which each user interface element is displayed to a variety of users depending upon the user'"'"'s particular level of access privilege and use of the computer program, thus giving greater control of the computer program'"'"'s features and data to the administrator while increasing ease of use to the users and administrators of the computer program.

Claims

1. A computer-implemented method for controlling access to user interface fields in a point-of-sale system having a plurality of different user interface fields, the method comprising the steps of:

operating the point-of-sale system in a security setup mode of operation by;

accessing the plurality of user interface fields, wherein some of the user interface fields include a set of modifiable access properties that indicate a level of access needed to access that user interface field;

establishing an access profile for each user of the point-of-sale system, the access profile indicates the level of access of user interface fields that each user is allowed to access; and

controlling a value in each user interface field displayed on the point-of-sale system during a normal mode of operation by comparing the level of access indicated in the access profile of a user of the point-of-sale system with the level of access of each user interface field, wherein only those values in the user interface fields that have access property levels equal to or less than the level of access indicated in the access profile of the user are displayed.

2. The computer-implemented method of claim 1, wherein the access profile for each user of the point-of-sale system is indexed with the corresponding access properties for each said user interface field to be displayed on the point of sale system.

3. The computer implemented method of claim 1 further comprising hiding the value in each user interface field displayed on the point-of-sale system whose levels of access properties are greater than the levels of access indicated in the access profile of the user.

4. The computer-implemented method of claim 1, wherein accessing the plurality of user interface fields during operation of the point-of-sale system in a security setup mode comprises accessing user interface fields that are highlighted, wherein highlighted user interface fields are those user interface fields that include access properties that can be assigned a level of access.

5. The computer-implemented method of claim 1, wherein the access properties of a select user interface field comprise:

a form name that identifies the name of the display window where the select user interface field is located;

a control name that identifies the name of the select user interface field;

a form class that identifies the type of form; and

an access level that identifies the level of access of the select user interface field.

6. The computer-implemented method of claim 1, wherein the access properties that identify the level of access of the select user interface field further includes a disable read button and a disable change button, wherein if the disable read button is selected then a value in the select user interface field will be hidden from the user and if the disable change button is selected then a value in the select user interface field will be viewable to the user but can not be modified.

7. The computer-implemented method of claim 1, wherein controlling the value in each user interface field comprises preventing the rendering of a value in a select user interface field if the level of access in the access profile of the user indicates that the user is precluded from accessing the select user interface field.

8. The computer-implemented method of claim 1, wherein controlling the value in each user interface field comprises rendering a value in a select user interface field if the level of access in the access profile of the user indicates that the user has such privileges.

9. The computer-implemented method of claim 8, wherein controlling the value of each user interface field comprises allowing the user to modify a value in a select user interface field if the level of access in the access profile of the user indicate the user has such privileges.

10. A point-of-sale system that controls access to user interface fields, the point-of-sale system comprising:

an access control module configured to manage access of a plurality of user interface fields for each user of the point of sale system, the access control module comprising;

an access management module configured to allow an authorized administrator to set up access levels for user interface fields of the point-of-sale system;

an access control table configured to store access profiles for each user of the point-of-sale system as set up by the authorized administrator, each access profile indicates the level of access of user interface fields that each user is allowed to access; and

a display management module configured to instruct the point-of-sale system if values in user interface fields should be rendered by comparing the access levels of each user interface field to the access profile of a user, wherein the display management module displays values in user interface fields that have access levels equal to or less than the access levels of the access profile of the user.

11. The point-of-sale system of claim 10, further comprising a graphical user interface that contains one or more user interface fields.

12. The point-of-sale system of claim 10, wherein access levels of the user interface fields and the access profile of each user can be interactively changed by the authorized administrator.

13. The point-of-sale system of claim 10, wherein each access profile stored in the access control table is indexed according to access levels of the user interface fields.

14. The point-of-sale system of claim 10, wherein the display management module hides values in user interface fields in the point-of-sale system where access levels of user interface fields are greater than the access levels indicated in the access profile of the user.

15. The point-of-sale system of claim 10, wherein the display management module is configured prevent rendering a value in a select user interface field if the level of access in the access profile of the user indicates that the user is precluded from accessing the select user interface field.

16. The point-of-sale system of claim 10, wherein the display management module is configured to render a value in a select user interface field if the level of access in the access profile of the user indicates that the user has such privileges.

17. The point-of-sale system of claim 16, wherein the display management module is configured to allow the user to modify a value in a select user interface field if the level of access in the access profile of the user indicates the user has such privileges.