Method for setting approval node an approval process based on countersignature

Abstract

The invention discloses a method for setting an approval node in an approval process based on countersignature. The method comprises the following steps of firstly setting countersignature as an approval mode for the approval node, summarizing all countersigning comments of a node approval role at a countersigning node to provide a reference for the later approval role of the approval node; and secondly, setting one or more approval roles for the countersigning node. According to the invention, the countersigning comments are summarized at the countersigning node so as to provide a powerful reference for the later approval role of the approval node. In a working process, the main body of an approval operation is the role while is an independent individual. Even if an employee / user changes,it is just required to re-associate the new employee with the role of in approval process; or if the approval authority of the employee changes, it is just required to adjust the approval authority of the role in a targeted manner and is not required to reset / adjust the process. Therefore, the setting in convenient, errors and omission are avoided, the normal operation of an enterprise is not influenced, and the reliability of the working process is greatly improved.

Description

Technical field [0001] The invention relates to an approval node approval method for management software systems such as ERP, and in particular to a method for setting an approval node based on countersignature in an approval process. Background technique [0002] Role-based access control (RBAC) is the most researched and most mature database authority management mechanism in recent years. It is considered to be an ideal candidate to replace traditional mandatory access control (MAC) and discretionary access control (DAC). Traditional autonomous access control has high flexibility but low security. Mandatory access control is highly secure but too restrictive; role-based access control combines both, which is not only easy to manage, but also reduces complexity, cost and the probability of errors , Which has been greatly developed in recent years. The basic idea of ​​role-based access control (RBAC) is to divide different roles according to different functional positions in the...

AI Technical Summary

Problems solved by technology

[0008] In the above statement, both 2 and 3 need to authorize the role of class / group nature, but the method of authorization and workflow control through the role of class / group / position / type of work has the following disadvantages: 1. When user permissions change Difficult to operate: In actual system use, it is often necessary to adjust user permissions during operation. For example, when dealing with changes in employee permissions, the permissions of an employee associated with a role change. We cannot Changes in employee permissions change the permissions of the entire role, because the role is also associated with other employees whose permissions have not changed

[0010] 2. It is difficult to remember the specific permissions contained in the role for a long time: If the role has many permission function points, it is difficult to remember the specific permissions of the role over time, and it is even more difficult to remember the permission differences between roles with similar permissions. The permissions of the role are also easy to confuse; if you want to associate a new user, you cannot accurately determine how to choose the association

[0011] 3. Due to the change of user permissions, more and more roles will be created (if no new roles are created, the direct authorization to users will be greatly increased), and it is more difficult to distinguish the specific differences between the permissions of each role

[0012] 4. When transferring a post, if you want to assign many permissions of the transferred user to several other users, you must distinguish these permissions of the transferred user during processing, and then create roles to associate with the other users. users, such an operation is not only complicated and time-consuming, but also prone to errors

Images