Information processing device and information processing program

Abstract

To provide an information processing device and an information processing program for enabling a user to grasp that authority division is not performed in a second device in setting an authority holding person of each authority setting item so as to perform authority division in a first device in the case of supposing that the first device and the second device being authority setting object devices mutually perform the same authority division.SOLUTION: In an information processing system, an authority setting object device being a first device includes an authority division determination part 32 for acquiring an authority setting item belonging to another authority setting object device being a second device from the second device, and executing authority division determination processing for determining whether to perform authority division in the second device in the case of setting the authority setting of the second device being the same as authority setting of the first device, and a notification part 34 for notifying an authority setting person of the setting of the authority setting of the second device to be the same as the authority setting of the first device, and no performance of authority division in the second device in the case of determining that the authority division is not performed in the second device.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present invention relates to an information processing device and an information processing program. [Background technology]

[0002] Conventionally, for a device, an authority holder having authority for each of a plurality of authority setting items is set. In this specification, a device for which authority is set in this way is called an authority setting target device. By setting an authority holder for each authority setting item and then applying the setting to the authority setting target device, it is possible to prevent users other than the authority holder from operating the authority setting item.

[0003] For example, Patent Document 1 discloses a device management system in which a user is associated with a role that defines operation authority for each operation item of an MFP (Multi Function Peripheral), which is an authority setting target device, and when the user operates the MFP, the user can only perform operations indicated by the role with which the user is associated. Patent Document 1 further discloses that a system policy can be set to restrict the operation authority of all users, and that part of the operation authority set by the role can be restricted by the system policy. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2007-323324 Summary of the Invention [Problem to be solved by the invention]

[0005] Incidentally, when one authority setting target device has multiple authority setting items, it is advisable to divide the authority in the authority setting target device from the viewpoint of security. Authority division means that the authority holders for the multiple authority setting items of the authority setting target device are not all the same. The reason why authority division is necessary is that if authority division is not performed, if the authority of the authority holder is somehow taken over by a malicious user, the malicious user will be able to perform all operations on the authority setting target device.

[0006] On the other hand, it is assumed that a plurality of permission setting target devices are operated. While not limited to this, it is assumed that, when the permission setting target device is an image forming device, a plurality of image forming devices are installed and operated in an office. When a plurality of permission setting target devices are operated, it is preferable to make the permission settings of the plurality of permission setting target devices the same from the viewpoint of security or operation. Making the permission settings the same means making the permission holders of the corresponding permission setting items the same among the plurality of permission setting target devices.

[0007] Here, there are cases where the permission setting items differ among the permission setting target devices. In this case, assuming that the permission settings in the plurality of permission setting target devices are to be the same, even if permission is divided in a first device that is one of the plurality of permission setting target devices, the permission may not be divided in a second device that is a device other than the first device among the plurality of permission setting target devices.

[0008] For example, consider a case where a first device has permission setting items A and B, and a second device has only permission setting item A. In this case, suppose that in the first device, permission holder A is set for permission setting item A, and permission holder B is set for permission setting item B. This realizes permission division in the first device. However, if the permission settings are the same in the first and second devices, the second device does not have permission setting item B, and therefore only permission holder A is set for permission setting item A in the second device. In this case, permission division is realized in the first device, but permission division is not realized when viewed from the second device.

[0009] The object of the present invention is to enable a user to understand that when the authority holder for each authority setting item is set so that authority is divided in the first device, authority will not be divided in the second device, assuming that the authority settings are the same in the first device and the second device, which are the authority setting target devices. [Means for solving the problem]

[0010] The invention of claim 1 is an information processing device comprising a processor, wherein the processor acquires permission setting information indicating a permission holder who has permission for each of a plurality of first permission setting items for a first device that is one of a plurality of permission setting target devices, acquires a plurality of second permission setting items for which permission can be set for a second device that is a device other than the first device among the plurality of permission setting target devices, and when the permission holder for the second permission setting item is set to the permission holder for the first permission setting item corresponding to the second permission setting item indicated in the permission setting information, and if the permission holders for each of the plurality of second permission setting items are all the same, notifies a user that permission division has not been achieved on the second device. The invention according to claim 2 is the information processing device according to claim 1, characterized in that the processor notifies the user of the authority holders of the plurality of second authority setting items after the setting. The invention of claim 3 is the information processing device according to claim 2, characterized in that the processor receives from the user who has received the notification a modification authority setting instruction indicating the authority holder for each of the multiple modified first authority setting items, and when the authority holder for the second authority setting item is set to the authority holder for the first authority setting item corresponding to the second authority setting item indicated in the modification authority setting instruction, if the authority holders for the multiple second authority setting items are all the same, the processor again notifies the user that authority division has not been achieved in the second device. The invention of claim 4 is the information processing device described in claim 1, characterized in that the processor notifies the user that authority division is possible on the second device when the authority holders for each of the multiple second authority setting items after the setting are not all the same. The invention of claim 5 is an information processing device according to claim 1 or 4, characterized in that, when the authority holders for each of the plurality of second authority setting items after the setting are not all the same, the processor applies the authority holders for each of the plurality of second authority setting items after the setting as the authority holders for each of the plurality of second authority setting items. The invention according to claim 6 is the information processing device according to any one of claims 1 to 5, characterized in that the information processing device is the first device. The invention of claim 7 is an information processing program that causes a computer to acquire permission setting information indicating an authority holder who has authority for each of a plurality of first permission setting items for a first device that is one of a plurality of permission setting target devices, acquire a plurality of second permission setting items for which authority can be set for a second device that is a device other than the first device among the plurality of permission setting target devices, and when the authority holder for the second permission setting item is set to the authority holder for the first permission setting item corresponding to the second permission setting item indicated in the permission setting information, and when the authority holders for each of the plurality of second permission setting items are all the same, notify a user that permission division has not been achieved on the second device. [Effects of the Invention]

[0011] According to the invention of claim 1 or 7, assuming that the authority settings are the same on the first device and the second device, which are the authority setting target devices, when the authority holder for each authority setting item is set so that authority is divided on the first device, the user can understand that authority will not be divided on the second device. According to the invention of claim 2, the user can grasp the authority holder of each second authority setting item after setting for the second device, which is in a state where authority is not divided. According to the invention of claim 3, even if the authority setting for the first device is modified by modifying the authority setting for the first device, the user can understand that authority will not be divided in the second device when the authority settings for the first device and the second device are made the same. According to the invention of claim 4, when the authority settings of the first device and the second device are the same, the user can understand that the authority is also divided in the second device. According to the invention of claim 5, the authority settings can be made the same in the first device and the second device, and authority can be divided between the first device and the second device. According to the invention of claim 6, it is possible to make the permission settings of a first device and a second device identical to each other among a plurality of permission setting target devices, and to complete the process of dividing permissions among the first device and the second device, without the need to prepare a separate device such as a server. [Brief explanation of the drawings]

[0012] [Figure 1] 1 is a schematic diagram illustrating the configuration of an information processing system according to an embodiment of the present invention. [Figure 2] 1 is a schematic diagram illustrating the configuration of an authority setting target device according to the present embodiment. [Figure 3] FIG. 10 is a diagram illustrating an example of authority setting information of the first device. [Figure 4] FIG. 10 is a diagram illustrating an example of authority setting information of the second device. [Figure 5]FIG. 10 is a diagram illustrating an example of an authority undivided notification screen. [Figure 6] FIG. 10 is a diagram illustrating an example of an authority setting screen. [Figure 7] FIG. 10 is a diagram illustrating an example of an authority division notification screen. [Figure 8] 10 is a flowchart showing a flow of processing performed by the information processing device according to the present embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0013] FIG. 1 is a schematic diagram of the configuration of an information processing system 10 according to this embodiment. The information processing system 10 includes a plurality of authority setting target devices 12. As described above, the authority setting target devices 12 are devices for which authority holders having authority for each of a plurality of authority setting items are to be set. In this embodiment, the authority setting target devices 12 include a multifunction peripheral, a printer, a scanner, or the like, but are not limited to these devices. The plurality of authority setting target devices 12 are connected to each other so as to be able to communicate with each other via a communication line 14 such as a LAN (Local Area Network) or a WAN (Wide Area Network).

[0014] 1, the multiple permission setting target devices 12 include a first device 12a and a second device 12b. The information processing system 10 may include three or more permission setting target devices 12, but in this specification, the processing of the information processing system 10 will be described focusing on the first device 12a as an information processing device and the second device 12b as a permission setting target device 12 other than the first device 12a. Note that when there is no particular distinction between the first device 12a and the second device 12b, they will be collectively referred to as permission setting target devices 12.

[0015] Security rules in the environment in which the information processing system 10 is installed require that authority be divided among the authority setting target devices 12 included in the information processing system 10. As described above, authority division means that the authority holders for the multiple authority setting items held by the authority setting target devices 12 are not all the same. Furthermore, security or operation rules in the environment in which the information processing system 10 is installed require that the authority settings in the authority setting target devices 12 included in the information processing system 10 be the same. As described above, making the authority settings the same among the authority setting target devices 12 means that the authority holders for the corresponding authority setting items are the same among the multiple authority setting target devices 12.

[0016] Therefore, a permission setter, such as an administrator of the information processing system 10, who sets a permission holder for each permission setting item of each permission setting target device 12, must set a permission holder for each permission setting item of each permission setting target device 12 so as to satisfy the above two requirements. As will be described in detail later, the information processing system 10 supports the permission setter in setting a permission holder for each permission setting item of each permission setting target device 12 so as to satisfy the above two requirements.

[0017] FIG. 2 is a schematic diagram of the configuration of the authority setting target device 12. As shown in FIG.

[0018] The communication interface 20 includes, for example, a network interface card (NIC). The communication interface 20 performs a function of communicating with other devices, particularly other right setting target devices 12, via the communication line .

[0019] The input interface 22 includes, for example, various buttons and a touch panel, and is used to input instructions from a user, such as a right setting person, to the right setting target device 12.

[0020] The display 24 includes, for example, a liquid crystal panel or an organic EL (Electro Luminescence) panel. Various screens are displayed on the display 24 in response to instructions from a processor 30, which will be described later.

[0021] The memory 26 includes a hard disk drive (HDD), a solid state drive (SSD), an embedded multi-media card (eMMC), a read-only memory (ROM), or a random access memory (RAM). The memory 26 stores an information processing program for operating each unit of the authority setting target device 12. The information processing program may also be stored in a computer-readable non-transitory storage medium such as a universal serial bus (USB) memory or a CD-ROM. The information processing system 10 can read and execute the information processing program from such a storage medium. As shown in FIG. 2, the memory 26 also stores authority setting information 28.

[0022] The authority setting information 28 is information indicating a plurality of authority setting items that the authority setting target device 12 has (in other words, authority can be set in the authority setting target device 12) and an authority holder who has authority for each of the authority setting items. As will be described in detail later, in this embodiment, the processor 30, which will be described later, receives an authority setting instruction from the authority setter that indicates an authority holder for each authority setting item that the authority setting target device 12 has, and stores the authority setting information 28 of the content indicated by the authority setting instruction in the memory 26.

[0023] The processor 30, which will be described later, authenticates a user of the permission setting target device 12, and then refers to the permission setting information 28 to identify the user's permission to operate the permission setting target device 12. Needless to say, when a user performs an operation for which the user has permission, the processor 30 executes processing corresponding to the operation. On the other hand, the processor 30 prohibits the user from performing an operation for which the user does not have permission, or does not execute processing corresponding to the operation for which the user does not have permission, when the user performs an operation for which the user does not have permission.

[0024] Because the multiple permission setting target devices 12 have different functions, the permission setting items of the multiple permission setting target devices 12 may differ from one another. FIG. 3 is a diagram showing the contents of permission setting information 28a stored in memory 26 of the first device 12a, and FIG. 4 is a diagram showing the contents of permission setting information 28b stored in memory 26 of the second device 12b. In this embodiment, the first device 12a is a multifunction peripheral, and the first device 12a has multiple permission setting items 1 to 3 related to print setting permission for the print function and multiple permission setting items 4 to 6 related to document reading setting permission for the document reading function. On the other hand, in the example of FIG. 4, the second device 12b is a printer, and the second device 12b only has multiple permission setting items 1 to 3 related to print setting permission for the print function.

[0025] In the examples of FIGS. 3 and 4, a role such as "SA (System Administrator) 1" or "SA2" is associated with each authority setting item. A user DB (not shown) in which one or more user IDs that uniquely identify users are associated with each role is stored in the memory 26 or another device (e.g., a server) accessible from the authority setting target device 12. The authority setting target device 12 can identify the user associated with each authority setting item by referring to the authority setting information 28 and the user DB. Of course, a user ID may be directly associated with each authority setting item in the authority setting information 28.

[0026] Returning to FIG. 2, processor 30 refers to a processor in a broad sense and includes at least one of a general-purpose processor (e.g., a CPU (Central Processing Unit)) and a dedicated processing device (e.g., a GPU (Graphics Processing Unit), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or a programmable logic device). Processor 30 may not be a single processing device, but may be configured by the cooperation of multiple processing devices located in physically separate locations. As shown in FIG. 2, processor 30 performs the functions of an authority division determination unit 32, a notification unit 34, and an authority application unit 36 ​​in accordance with an information processing program stored in memory 26.

[0027] When the authority setting target devices 12 included in the information processing system 10 have the same authority setting, the authority division determination unit 32 executes an authority division determination process to determine whether authority is divided in each of the authority setting target devices 12 included in the information processing system 10. Here, the first device 12a, which is one of the authority setting target devices 12, is focused on, and the process of the authority division determination unit 32 of the first device 12a will be described.

[0028] First, the permission setter sets a permission holder for each of the permission setting items 1 to 6 (see FIG. 3) of the first device 12a as a plurality of first permission setting items. As a result, a permission setting instruction indicating the permission holder for each of the permission setting items 1 to 6 that have been set is sent to the processor 30. The permission setter may input the permission setting instruction using the input interface 22, or may send the permission setting instruction to the first device 12a from a user terminal that the permission setter uses. As described above, the first device 12a has permission setting items 1 to 6. Here, it is assumed that the permission setter has set the permission holder for permission setting items 1 to 3 to "SA1" and the permission holder for permission setting items 4 to 6 to "SA2."

[0029] In this specification, "setting" an authority holder means that an authority holder for an authority setting item is in a selected state, and in the set state, the authority holder is not yet stored in the memory 26 as the authority setting information 28. In other words, in the set state, the authority holder is not reflected in the authority setting target device 12. In this specification, "applying" an authority holder means storing the set authority holder in the memory 26 as the authority setting information 28 and bringing the processor 30 into a state where it can operate based on the authority setting information 28, in other words, reflecting the authority holder in the authority setting target device 12.

[0030] When receiving a permission setting instruction from the permission setter, the permission division determination unit 32 determines whether permission will be divided in the first device 12a when the permission holder for each permission setting item of the first device 12a is set as instructed in the permission setting instruction. Here, as described above, the permission setting instruction indicates that the permission holder for permission setting items 1 to 3 is set to "SA1" and the permission holder for permission setting items 4 to 6 is set to "SA2." Therefore, the permission division determination unit 32 determines that permission will be divided in the first device 12a according to the permission setting indicated by the permission setting instruction. If permission will not be divided in the first device 12a according to the permission setting indicated by the permission setting instruction—in other words, if the permission setting instruction indicates that the permission holder for all permission setting items of the first device 12a is to be the same—the notification unit 34, described below, may output a notification to the permission setter, urging the permission setter to reconsider the permission setting for the first device 12a, for example, by displaying a notification screen on the display 24 or the display of the permission setter's user terminal.

[0031] When it is determined that authority is to be divided in the first device 12a according to the authority setting indicated by the authority setting instruction, the authority division determination unit 32 acquires a plurality of authority setting items of other authority setting target devices 12 included in the information processing system 10. Here, focusing on the second device 12b, the authority division determination unit 32 acquires a plurality of authority setting items as a plurality of second authority setting items for the second device 12b. Specifically, the authority division determination unit 32 transmits item request information for requesting the plurality of authority setting items of the second device 12b to the second device 12b. In response to the item request information from the first device 12a, the processor 30 of the second device 12b transmits information indicating the plurality of authority setting items of the second device 12b (which may be, for example, authority setting information 28 stored in the memory 26 of the second device 12b) to the first device 12a.

[0032] When the authority setting items of the second device 12b are acquired from the second device 12b, the authority division determination unit 32 sets the authority setting of the second device 12b to the authority setting of the first device 12a indicated in the authority setting instruction received from the authority setter. That is, the authority division determination unit 32 sets the authority holder of each authority setting item of the second device 12b to the authority holder of the corresponding authority setting item of the first device 12a indicated in the authority setting instruction.

[0033] Here, it is assumed that the second device 12b has authority setting items 1 to 3 as the multiple authority setting items. In this case, the authority division determination unit 32 sets the authority holder of authority setting item 1 in the second device 12b to "SA1," who is the authority holder of authority setting item 1 of the first device 12a indicated by the authority setting instruction. Similarly, the authority division determination unit 32 sets the authority holder of authority setting item 2 to "SA1," and the authority holder of authority setting item 3 to "SA1."

[0034] Next, the authority division determination unit 32 determines whether authority division is performed in the second device 12b in which the authority holder for each authority setting item is set as described above. In the above example, the same authority holder "SA1" is set for all of the multiple authority setting items 1 to 3 that the second device 12b has. Therefore, in this case, the authority division determination unit 32 determines that authority division is not performed in the second device 12b if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction. On the other hand, if the authority holders for the multiple authority setting items 1 to 3 that the second device 12b has are not all the same (in other words, if the authority holder for at least one authority setting item is different from the authority holder for the other authority setting items), the authority division determination unit 32 determines that authority division is performed in the second device 12b if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction.

[0035] If the authority division determination unit 32 determines that authority division will not be performed in the second device 12b if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction, the notification unit 34 notifies the authority setter who input the authority setting instruction to the first device 12a that authority division has not been performed in the second device 12b. In this embodiment, the notification unit 34 notifies the authority setter by displaying an authority undivided notification screen on the display 24 or the display of the user terminal of the authority setter.

[0036] FIG. 5 is a diagram showing an example of a permission-undivided notification screen 40. The permission-undivided notification screen 40 may include a notification message 42 indicating that permission division has not been achieved in permission setting target devices 12 other than the first device 12a. The notification message 42 may clearly indicate the other permission setting target devices 12 for which permission division has not been achieved (the second device 12b in this example). Furthermore, in addition to or instead of the notification message 42, the permission-undivided notification screen 40 may display permission settings 44 of the permission setting target device 12 for which permission division has not been achieved (the second device 12b in this example). Specifically, the notification message 42 may display a plurality of permission setting items 44a possessed by the second device 12b and permission holders 44b for each permission setting item 44a set by the permission division determination unit 32. Furthermore, the permission-undivided notification screen 40 may display permission settings 46 of the first device 12a (contents of permission setting instructions input by the permission setter to the first device 12a). Specifically, it is preferable that a plurality of authority setting items 46a that the first device 12a has and an authority holder 46b for each authority setting item 46a are displayed.

[0037] The user can easily understand from the permission undivision notification screen 40 that permission division will not be performed on the second device 12b if the permission setting of the second device 12b is set to the same as the permission setting of the first device 12a indicated by the permission setting instruction input by the user. Note that the method of notifying the permission setter is not limited to the above-described method. For example, in addition to or instead of displaying the permission undivision notification screen 40, the notification may be performed by outputting audio from a speaker (not shown) of the first device 12a or a speaker of the user terminal of the permission setter.

[0038] The permission undivided notification screen 40 may include a permission assignment change button 48. The permission setter can change the permission settings of the first device 12a by operating the permission assignment change button 48. Specifically, when the permission assignment change button 48 is operated, the processor 30 displays a permission assignment change screen for changing (modifying) the permission settings of the first device 12a on the display 24 or the display of the user terminal of the permission setter.

[0039] FIG. 6 is a diagram showing an example of an authority assignment change screen 50. The authority assignment change screen 50 includes a plurality of authority setting items 52 of the first device 12a and an authority holder input section 54 for inputting an authority holder for each authority setting item 52. In the example of FIG. 6, the authority holder input section 54 includes a plurality of check boxes 54a corresponding to a plurality of authority holders ("SA1," "SA2," and "SA3" in the example of FIG. 6) that can be input for each authority setting item 52. The authority setter can change the authority holder for each authority holder input section 54 by checking each check box 54a. Here, it is assumed that the authority setter has changed the authority holder for authority setting item 3 from "SA1" to "SA2," and changed the authority holder for authority setting items 4 to 6 from "SA2" to "SA3."

[0040] The authority assignment change screen 50 may include an authority assignment check button 56. By operating the authority assignment check button 56, the authority setter can confirm whether authority division will be performed in the second device 12b when the authority settings of the second device 12b are set to the same as the authority settings changed on the authority assignment change screen 50.

[0041] Specifically, when the authority assignment check button 56 is operated, the processor 30 receives a modification authority setting instruction indicating the authority holder for each of the multiple authority setting items of the first device 12a changed on the authority assignment change screen 50. Then, first, the authority division determination unit 32 determines whether authority is divided in the first device 12a according to the authority setting indicated in the modification authority setting instruction. Again, if authority is not divided in the first device 12a, the notification unit 34 may notify the authority setter. If authority is divided in the first device 12a according to the authority setting indicated in the modification authority setting instruction, the authority division determination unit 32 sets the authority holder for each authority setting item of the second device 12b to the authority holder for the corresponding authority setting item of the first device 12a indicated in the modification authority setting instruction. Here, the authority holder for authority setting items 1 and 2 in the second device 12b is maintained as "SA1", the authority holder for authority setting item 3 is changed from "SA1" to "SA2", and the authority holder for authority setting items 4 to 6 is changed from "SA2" to "SA3".

[0042] Next, the authority division determination unit 32 determines whether authority division will be performed in the second device 12b when the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the modification authority setting instruction. Here, the authority holder for authority setting items 1 and 2 of the second device 12b is "SA1," but the authority holder for authority setting item 3 is "SA2." Therefore, in this case, the authority division determination unit 32 determines that authority division will be performed in the second device 12b when the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the modification authority setting instruction.

[0043] On the other hand, even if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the modification authority setting instruction, if the authority holders for the multiple authority setting items 1 to 3 of the second device 12b are all the same, the notification unit 34 may again notify the authority setter that authority division will not be performed in the second device 12b if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the modification authority setting instruction. For example, the notification unit 34 may again display the authority undivided notification screen 40 (see FIG. 5 ) on the display 24 or the display of the user terminal of the authority setter.

[0044] If the authority division determination unit 32 determines that authority division will be performed in the second device 12b if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction or the modification authority setting instruction, the notification unit 34 notifies the authority setter who input the authority setting instruction to the first device 12a that authority division can be performed in the second device 12b. In this embodiment, the notification unit 34 notifies the authority setter by displaying an authority division notification screen on the display 24 or the display of the user terminal of the authority setter.

[0045] FIG. 7 is a diagram showing an example of an authority division notification screen 60. The authority division notification screen 60 may include a notification message 62 indicating that authority division is possible in authority setting target devices 12 other than the first device 12a. Furthermore, the authority division notification screen 60 may display authority settings for multiple authority setting target devices 12 in addition to or instead of the notification message 62. Specifically, the screen 60 may display multiple authority setting items 64a possessed by the second device 12b and authority holders 64b for each authority setting item 64a set by the authority division determination unit 32. The screen 60 may also display authority settings 66 for the first device 12a (contents of the authority setting instruction or modification authority setting instruction input into the first device 12a by the authority setter). Specifically, the screen 60 may display multiple authority setting items 66a possessed by the first device 12a and authority holders 66b for each authority setting item 66a.

[0046] The user can easily understand from the authority division notification screen 60 that authority division will be performed on the second device 12b when the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction or modification authority setting instruction input by the user. Note that the method of notifying the authority setter is not limited to the above-described method. For example, in addition to or instead of displaying the authority division notification screen 60, the notification may be performed by outputting audio from a speaker (not shown) of the first device 12a or a speaker of the user terminal of the authority setter.

[0047] Like the authority undivided notification screen 40, the authority division notification screen 60 may also include an authority assignment change button 48. The authority setter can further change the authority setting of the first device 12a by operating the authority assignment change button 48. The authority division notification screen 60 also includes an authority division completion button 68. The operation when the authority division completion button 68 is operated will be described later.

[0048] When the authority division determination unit 32 determines that authority division will occur in the second device 12b if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction or the modification authority setting instruction, the authority application unit 36 ​​applies the authority holders for each of the multiple authority setting items of the first device 12a as indicated by the authority setting instruction or the modification authority setting instruction from the authority setter, and applies the authority holders for each of the multiple authority setting items of the second device 12b set by the authority division determination unit 32 as the authority holders for each of the multiple authority setting items of the second device 12b.

[0049] Specifically, when the authority setter operates the authority division completion button 68 on the authority division notification screen 60, the authority application unit 36 ​​stores, in the memory 26 of the first device 12a, authority holders for the multiple authority setting items of the first device 12a, indicated in the authority setting instruction or the modification authority setting instruction from the authority setter, as authority setting information 28 of the first device 12a. The authority application unit 36 ​​also transmits, to the second device 12b, information indicating authority holders for each of the multiple authority setting items of the second device 12b, set by the authority division determination unit 32. In response to the received information, the authority application unit 36 ​​of the second device 12b stores, in the memory 26 of the second device 12b, authority holders for the multiple authority setting items of the second device 12b, indicated by the information, as authority setting information 28 of the second device 12b.

[0050] The configuration of the information processing system 10 according to this embodiment is as described above. Note that, although this embodiment has been described focusing on the second device 12b as the authority setting target device 12 other than the first device 12a, the first device 12a can execute the same process for multiple authority setting target devices 12 other than the first device 12a.

[0051] The flow of processing by the first device 12a according to this embodiment will be described below with reference to the flowchart shown in FIG.

[0052] In step S10, the first device 12a receives, from the authority setter, an authority setting instruction indicating the authority holder for each of the plurality of authority setting items of the first device 12a.

[0053] In step S12, the authority division determination unit 32 determines whether authority is divided in the first device 12a when the authority holder for each authority setting item of the first device 12a is set as indicated in the authority setting instruction received in step S10.

[0054] If it is determined that authority will not be divided in the first device 12a, the process proceeds to step S14. In step S14, the notification unit 34 notifies the authority setter that authority will not be divided in the first device 12a if the authority holder for each authority setting item in the first device 12a is set as instructed in the authority setting instruction. The authority setter who receives this notification can review the authority setting of the first device 12a and input the authority setting instruction to the first device 12a again in step S10.

[0055] If it is determined that the authority is to be divided in the first device 12a, the process proceeds to step S 16. In step S16, the authority division determination unit 32 acquires a plurality of authority setting items that the second device 12b has.

[0056] In step S18, the authority division determination unit 32 executes an authority division determination process to determine whether authority is divided in the second device 12b when the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction received in step S10.

[0057] If it is determined that the authority will not be divided in the second device 12b, the process proceeds to step S20. In step S20, the notification unit 34 notifies the authority setter that the authority will not be divided in the second device 12b if the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated in the authority setting instruction received in step S10.

[0058] In step S22, the authority division determination unit 32 determines whether or not a modification authority setting instruction indicating the changed authority setting for the first device 12a has been received from the authority setter who received the notification in step S20. If a modification authority setting instruction has not been received from the authority setter, the process ends.

[0059] If a modification authority setting instruction is received from the authority setter, the process proceeds to step S24, where the authority division determination unit 32 of the first device 12a determines whether authority will be divided in the first device 12a when the authority holder for each authority setting item of the first device 12a is set as indicated in the modification authority setting instruction received in step S22.

[0060] If it is determined that authority will not be divided in the first device 12a, the process proceeds to step S20. In step S20, similar to step S14, the notification unit 34 notifies the authority setter that authority will not be divided in the first device 12a if the authority holder for each authority setting item in the first device 12a is set as indicated in the modification authority setting instruction. Thereafter, the process proceeds again to step S22, where the authority setter can further modify the modification authority setting instruction.

[0061] If it is determined in step S24 that authority will be divided in the first device 12a, the process returns to step S18. In step S18 again, the authority division determination unit 32 determines whether authority will be divided in the second device 12b when the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the modification authority setting instruction received in step S22.

[0062] In step S18, if it is determined that authority division will be performed in the second device 12b when the authority setting of the second device 12b is set to the same as the authority setting of the first device 12a indicated by the authority setting instruction or the modification authority setting instruction, proceed to step S26.

[0063] In step S26, if the notification unit 34 sets the authority setting of the second device 12b to the same authority setting of the first device 12a indicated by the authority setting instruction or the modification authority setting instruction, the notification unit 34 notifies the authority setter that authority division will be performed in the second device 12b, and the authority application unit 36 ​​determines whether the authority setter has completed the authority setting of the multiple authority setting target devices 12. For example, the authority application unit 36 ​​determines whether the authority setter has operated the authority division completion button 68 on the authority division notification screen 60 (see FIG. 7). If it is determined that the authority setter has not completed the authority setting of the multiple authority setting target devices 12 (for example, if the authority assignment change button 48 on the authority division notification screen 60 has been operated), the process returns to step S22, and the authority division determination unit 32 determines whether a modification authority setting instruction has been received from the authority setter.

[0064] If it is determined that the permission setter has completed permission setting for the multiple permission setting target devices 12, the process proceeds to step S28. In step S28, the permission application unit 36 ​​stores, in the memory 26 of the first device 12a, permission holders for the multiple permission setting items of the first device 12a, indicated by the permission setting instruction received in step S10 or the modification permission setting instruction received in step S22, as permission setting information 28 of the first device 12a. Furthermore, the permission application unit 36 ​​transmits, to the second device 12b, information indicating permission holders for each of the multiple permission setting items of the second device 12b, set by the permission division determination unit 32 in step S18. Upon receiving the information, the permission application unit 36 ​​of the second device 12b stores, in the memory 26 of the second device 12b, the permission holders for the multiple permission setting items of the second device 12b, indicated by the information, as permission setting information 28 of the second device 12b.

[0065] Although the embodiment of the present invention has been described above, the present invention is not limited to the above embodiment, and various modifications are possible without departing from the spirit of the present invention.

[0066] For example, in the above embodiment, the functions of the authority division determination unit 32, the notification unit 34, and the authority application unit 36 ​​were possessed by the first device 12a, which was one of the multiple authority setting target devices 12, but these functions may also be possessed by a device other than the multiple authority setting target devices 12, for example, a server that is communicatively connected to the multiple authority setting target devices 12.

[0067] Furthermore, in the above embodiment, the authority setting of the first device 12a is set by an authority setter, but the authority setting of the first device 12a does not have to be set by an authority setter. For example, the authority division determination unit 32 may determine whether authority division will be performed in the second device 12b when the authority setting of the second device 12b is set to the same as the initial authority setting of the first device 12a, and the notification unit 34 may notify a user (e.g., an administrator of the information processing system 10) of the determination result. Alternatively, when a computer such as a server automatically sets authority settings for the first device 12a according to a predetermined rule, the authority division determination unit 32 may determine whether authority division will be performed in the second device 12b when the authority setting of the second device 12b is set to the same as the automatically set authority setting of the first device 12a, and the notification unit 34 may notify a user (e.g., an administrator of the information processing system 10) of the determination result.

[0068] In the above embodiment, the authority division determination unit 32 executes the authority division determination process when it receives, from the authority setter, an authority setting instruction indicating the authority holder for each of the multiple authority setting items of the first device 12a, as a trigger. However, the timing of executing the authority division determination process is not limited to this. For example, in a state where authority settings have already been applied in the first device 12a, the authority division determination unit 32 may acquire authority setting information 28 from the memory 26 and execute the authority division determination process in response to an instruction from the user. [Explanation of symbols]

[0069] 10 Information processing system, 12 Authority setting target device, 14 Communication line, 20 Communication interface, 22 Input interface, 24 Display, 26 Memory, 28, 28a, 28b Authority setting information, 30 Processor, 32 Authority division determination unit, 34 Notification unit, 36 Authority application unit, 40 Authority undivision notification screen, 50 Authority assignment change screen, 60 Authority division notification screen.

Claims

1. a processor; The processor: acquire authority setting information indicating an authority holder having authority for each of a plurality of first authority setting items for a first device that is one of the plurality of authority setting target devices; acquiring a plurality of second authority setting items for which authority can be set for a second device that is a device other than the first device among the plurality of authority setting target devices; when the right holder of the second right setting item is set to the right holder of the first right setting item corresponding to the second right setting item indicated in the right setting information, and when the right holders of the plurality of second right setting items are all the same, notifying the user that authority division has not been achieved in the second device; 1. An information processing device comprising:

2. The processor: notifying the user of the authority holders of the plurality of second authority setting items after the setting; 2. The information processing apparatus according to claim 1, wherein:

3. The processor: receiving, from the user who has received the notification, a modification authority setting instruction indicating an authority holder for each of the modified first authority setting items; when the authority holder of the second authority setting item is set to the authority holder of the first authority setting item corresponding to the second authority setting item indicated in the modification authority setting instruction, and when the authority holders for the plurality of second authority setting items are all the same, notifying the user again that authority division has not been completed in the second device.

3. The information processing apparatus according to claim 2, wherein:

4. The processor: If the authority holders for the plurality of second authority setting items after the setting are not all the same, the user is notified that authority division is possible in the second device.

2. The information processing apparatus according to claim 1, wherein:

5. The processor: When the authority holders of the plurality of second authority setting items after the setting are not all the same, the authority holders of the plurality of second authority setting items after the setting are applied as the authority holders of the plurality of second authority setting items.

5. The information processing apparatus according to claim 1, wherein the information processing apparatus is a computer.

6. the information processing device is the first device, 6. The information processing device according to claim 1, wherein the information processing device is a computer.

7. On the computer, acquires authority setting information indicating an authority holder having authority for each of a plurality of first authority setting items for a first device that is one of the plurality of authority setting target devices; acquiring a plurality of second authority setting items for which authority can be set for a second device that is a device other than the first device among the plurality of authority setting target devices; when the right holder of the second right setting item is set to the right holder of the first right setting item corresponding to the second right setting item indicated in the right setting information, and when the right holders of the plurality of second right setting items are all the same, notifying the user that authority division has not been achieved in the second device; An information processing program characterized by:

Images