JPH01248251A - File protecting method - Google Patents

Abstract

PURPOSE:To prevent the repetition of a useless processing by deciding an operation of a file or a directory from a person of the same group in accordance with whether he knows a password except an access right to the same group or not. CONSTITUTION:Whether a person for operating a file is an owner of its file or not is examined by a user ID 6, and when he is the owner, whether he has an access right or not is examined by an access right 2 of the owner. Also, when he is not the owner of the file, whether its person is a member of the same group or not is examined by a group ID 7, and when he is in the same group, whether he has an access right or not is examined by an access right 3 in the same group. When he has no access right, whether a password which its person has operated coincides with a pass word of its file or not is examined by a password 4, and when the passwords have coincided, an operation of the file is permitted temporarily. In such a way, some specific person of the same group can operate the file or the directory.

Description

[Detailed Description of the Invention] [Industrial Application Field] This invention is directed to a file or directory (management book)
The present invention relates to a file protection method that protects against operations.

[Prior Art] Figure 3 is an internal configuration diagram of a file applied to a conventional file protection method. In the figure, 1 indicates the file name;
2 for the owner of the file, 3 for the same group, 5
are the access rights that indicate whether to allow other general users to read, write, or execute the file, 6 is the user ID, and 7 is the group I.
D and 8 are files containing programs and data.

Next, the operation will be explained. FIG. 4 is a flowchart showing the flow of the operation. When working with files,
First, it detects whether the operation is read, write, or execute.

Next, in step STI, it is checked based on the user ID 6 whether the person operating the file is the owner of the file.

If it is the owner, it is checked in step ST2 whether or not it has access rights using the owner's access rights 2.

In addition, if it is determined in step STI that the person is not the owner of the file, it is checked in step ST3 whether the person attempting to operate the file is a member of the same group using the group ID7, and if the person is a member of the same group, then in step ST4 whether or not he or she has access rights is determined. How about access rights in the same group 3
Find out by.

Furthermore, if the person is not in the same group, it is checked in step ST6 whether or not the user has access rights using general user access 11!5.

If you have access rights by performing the above steps, Ste Knob ST7
Perform file operations with . In either case, nothing will be done unless you have access rights.

(Problem to be Solved by the Invention) Conventional file protection methods are structured as described above, so if only the file owner has access rights to the file, no one in the same group can access the file. When you try to do so, you don't have access rights, so the file owner or superuser needs to change the rights.

Further, in this case, if the rights of the superuser are changed in this way, there is a problem that access rights cannot be granted only to a specific person in the same group.

As an approximation technique, there is Chapter 6 of rUN I XJ, written by Haruhisa Ishida and published by Kyoritsu Publishing Co., Ltd.

This invention was made to solve the above problems, and is a file protection system that allows a specific person in the same group to manipulate a file or directory even if the same group does not have access rights. The purpose is to obtain a method.

[Means to solve the problem]

In the file protection method according to the present invention, a password is set in a file or directory so that users in the same group who do not have access rights are allowed to operate the file or directory.

[Effect]

The file protection method in this invention is such that a certain person in the same group knows the password of the file or directory to which only the owner of the file or directory has access rights. Or have the ability to operate directories.

〔Example〕

An embodiment of the present invention will be described below with reference to the drawings. In the figure, ■ is the file name, 2 is the owner of the file, 3 is the same group, and 5 is the read r, write W, execution X of each file for other general users.
Each access right indicates whether access is allowed.

Furthermore, 6 is a user ID, 7 is a group ID, and 8 is a file containing programs and data.

The parts up to this point are the same as the conventional example shown in FIG. 3, and 4 is a password for another general user's file.

Next, the operation will be explained. FIG. 2 is a flowchart showing the operation. When operating on a file, the first step is to detect whether the operation is reading, writing, or executing.

Next, in step STI of FIG. 2, it is checked three times using the user ID 6 whether the person operating the file is the owner of the file.

If it is the owner, it is checked in step ST2 whether or not it has access rights using the owner's access 112.

If the file owner is not the file owner in Step 7 STI, it is checked in Step ST3 whether the person attempting to operate the file is a member of the same group using group ID7, and if the person is a member of the same group, access rights are granted in Step ST4. Whether there is access rights in the same group 3
Find out by.

Here, if you do not have access rights, in step 7 step ST5, use password 4 to check whether the password operated by the person who is trying to operate the file matches the password of the file eight times, and if the passwords match, temporarily The file operation in step ST7 is permitted.

Furthermore, if the passwords do not match in step ST5, it is the same as before (file operations are not permitted).

Furthermore, if it is determined in step ST3 that the person is not in the same group, it is checked in step ST6 whether or not the person has access rights based on the general user's access rights 5. If the user has access rights through the above operations, the file is operated in step ST7. In either case, nothing will be done unless you have access rights.

Note that in the above embodiment, the judgment is based only on file access rights, but the present invention can be similarly applied to not only file access rights but also directory access rights.

〔Effect of the invention〕

As described above, according to the present invention, when a file or directory operation is performed by a person in the same group, in addition to the access 1η for the same group, the judgment is made based on whether or not the password is known. Alternatively, the directory owner or superuser can temporarily access the file or directory without changing the file or directory's access permissions, thereby eliminating the need to repeat unnecessary processing. It will be done.

[Brief explanation of the drawing]

FIG. 1 is a file internal configuration diagram of a file protection method showing an embodiment of the present invention, FIG. 2 is a flowchart showing the operation of the same embodiment, and FIG. 3 is a file internal configuration diagram of a conventional file protection method. FIG. 4 is a flowchart showing the operation of the conventional file protection method. 2 is the file access right of the file owner, 3 is the file access right of the same group, 4 is the password access right to the file, 5 is the general user's access right, 6 and 7 are the group ID, and 8 is the file. In addition, in the figures, the same reference numerals indicate the same or equivalent parts. Figure 4

Claims (1)

[Claims] In a file management system for a computer system, etc., access rights are set for the owner of a file or directory, the same group, and other general users to allow reading, writing, and execution. Set a password for each
The above is only performed when the user identification label confirms that the person operating the file or directory is the owner of the file or directory, and then confirms that the person who operates the file or directory has access rights using the access rights of the owner of the file or directory. If the person operating the file or directory is not the owner of the file or directory, after confirming that the person is from the same group using the group identification label, the access rights of the same group are granted. A file protection method characterized in that when the access right cannot be confirmed, it is checked whether the password is known, and if the password is known, the operation of the file or directory is permitted.