Computing system with access control to application module functions using assignable permission groups and user profiles

Abstract

A computing system 10 is provided with a user administration module 142 to manage association of customizable permission groups 145 with corresponding sets of application module functions of application software modules 142, 1431, 1432, 1433, 1434 in the system 10, association of customizable user profiles 146 with corresponding sets of the permission groups 145, and assignment of the user profiles 146 to system users. System permissions of a user are ascertained based on the permission groups 145 associated with the assigned user profile 146, and the application module functions associated with the permission groups 145. Application data 1410 of the application software modules and the permission groups 145 have data access attributes and data access settings. Processing of data 1410 is further restricted to those whose data access attribute matches the data access setting of the permission group 145 authorizing the processing.