JPH03220640A - Access protection system for library member - Google Patents

Abstract

PURPOSE:To protect each member of a library from access by providing an access protection indicating means, an access protection information automatic register means, an access verifying means, and an access protection maintaining means. CONSTITUTION:A library generating means 1 is provided with the access protection indicating means which receives the indication from a user to indicate the access protection of a member 6 registered in a library 5. A data managing part 8 includes the access protection information automatic register means, which automatically registers access protection information of the member 6 in the library 5 by the indication of the access protection indicating means, and the access verifying means which refers to access protection information of the member 6 to verify the access right of a program which accesses the member 6 in the library 5. A librarian 11 includes the access protection maintaining means which maintains access protection information and changes the indication of access protection. Thus, each member of the library can be protected from access.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to an access protection method for library members in which a plurality of members are registered in a computer system.

[Conventional technology]

Traditionally, basic functions provided by operating systems, such as setting and verifying access privileges based on the user's charging unit name and user name when writing or reading data, have been performed on a file (library) basis. It became.

[Problem to be solved by the invention]

The conventional access protection method described above is file-based, so access protection for library members is
There is a problem in that the access protection set for each file is applied uniformly to all members in the library, and the same access rights are uniformly set to all members in the library.

Additionally, if you try to extend access protection to each member of a library, one library usually has tens to hundreds of members, so the access protection is tens to hundreds of times greater than that for each file. With the increase in information,
There was a problem in that calculation of the area for storing file protection information at the time of system generation became complicated.

Furthermore, protection information has a list structure, and member protection information is positioned at a lower node of file protection information, so when processing all members at once, such as saving a library to magnetic tape, you can Access privileges are verified by referring to file protection information and member protection information, which poses a problem in that operational overhead doubles.

The purpose of the present invention is to enable access protection to be set for each member of a library, to eliminate the need for operating system capacity calculations for areas that store access protection information for members, and to control access privileges when users access members. An object of the present invention is to provide a library member access protection method that requires less operating system overhead for verification.

[Means to solve the problem]

The library member access protection method of the present invention is a library member access protection method for a library of a computer system in which a plurality of members are registered. (B) access protection instruction means for instructing protection of member access; (B) according to instructions from the access protection instruction means, access protection information of library members registered in the library is automatically transferred to the library when the library member is registered; access protection information automatic registration means for registering; (C) access verification means for verifying the access authority of a program that accesses the library member by referring to the access protection information of the library member according to instructions from the access protection instruction means; (D) access protection maintenance means for maintaining access protection information of the library members and changing instructions for access protection of the library.

5- [Example] Next, an example of the present invention will be described with reference to the drawings.

FIG. 1 is a block diagram of a computer system showing an embodiment of the library member access protection method of the present invention.

The computer system shown in FIG. 1 includes a library creation means 1, a text editor 2, a disk 3, a data management section 8, a compiler 9, a magnetic tape device 101, a librarian 11, and a printer 12.

Further, the library creation means 1 includes an access protection instruction means for receiving an instruction from a user and instructing to protect access of members registered in the library.

The data management unit 8 also includes access protection information automatic registration means for automatically registering access protection information of members registered in the library according to instructions from the access protection instruction means in the library at the time of member registration, and access protection instruction means. and access verification means for verifying the access authority of a program that accesses a member of the library by referring to the access protection information of the member.

Furthermore, the librarian 11 includes access protection maintenance means for maintaining access protection information of library members such as changing, deleting, displaying, saving, and restoring the access protection information, and changing the library access protection instructions themselves. There is.

Next, the operation will be explained.

When the library creation means 1 receives an instruction from the user to protect the access of each registered member when creating a library, it secures an area on the disk 3 to store the library 5, and also sets a VTOC (VOLUME T
ABLE OF C0NTENTS) 4(7)7 In the access protection instruction information storage area 43, the presence or absence of a member's access protection instruction, which is instruction information that instructs the data management unit 8 to register the member's protection information and verify the access authority, is stored. The information 42 shown is stored.

The disk 3 is an external storage device, and has a storage area for a library 5 and a VTOC 4 that manages information regarding files in the device. ■TOC 4 includes a library name 41 and the presence or absence of access protection instructions for members of the library. The management member 7 having the access protection information of the member 6 is stored in the library 5.

Using the text editor 2, the user newly registers the member 6 in the library 5. The data management unit 8 that performs data management, which is a basic function of the operating system, uses V when the text editor 2 starts creating the member 6.
Referring to TOC 4, if library creation means 1 instructs that each member of library 5 is access protected, then management member 7 of member 6 that stores access protection information of member 6 already exists in library 5. Find out. If there is a management member 7, the data management unit 8 checks the member 6 stored in the management member 7 to determine whether the user of the text editor 2 who is trying to create the member 6 has the authority to create the member 6. Verify from the access protection information. If the management member 7 does not exist, the data management unit 8 registers the member 6 when the text editor 2 registers the member 6.
The management member 7 of the member 6 is automatically registered, and the initial value of the access protection information of the member 6 is stored. The initial value of the access protection information conforms to the system of file-based access protection, which is a standard function of the operating system, and the access privileges of member 6 are set in advance by the operating system so that they do not conflict with the access privileges of library 5. I'll decide. Furthermore, management member 7 has a one-on-one relationship with member 6.
Corresponding to this, there is a management member for each member, and the name of management member 7 is named according to a special rule so that it can be easily associated with the corresponding member 6, and so that it cannot be accessed by users. do.

Then, the compiler 9 selects the already registered member 6.
See. The data management unit 8 refers to the VTOC 4 when the compiler 9 starts referencing the member 6, and if the library creation means 1 instructs the member 6 to be access-protected, the data management unit 8 references the member 6 by the compiler 9. It is checked whether or not the management member 7 of the member 6 that stores the access protection information of already exists in the library 5. If there is a management member 7, the data management unit 8 determines whether the user of the compiler 9 who attempts to refer to the member 6 has the authority to refer to the member 6, based on the access information of the member 6 stored in the management member 7. Verify from protected information. If there is no management member 7, the data management unit 8 will not verify the access authority of a user who attempts to refer to the remember 6 by the compiler 9, and any user can freely access the member 6 within the scope of the access authority of the library 5. can be accessed.

The management member 7 having the access protection information of the member 6,
The librarian 11 maintains the member 6, which is the original library member.

The librarian 11 is provided with functions necessary for maintaining the management member 7 such as registration, modification, deletion, and reference of the management member 7 from the data management unit 8, for example, in the form of a macro, and performs functions before or after the registration of the member 6. Registration of management member 7, deletion of management member 710-, that is, cancellation of access protection for member 6,
The access protection information is displayed on the printer 12 within the scope of the user's access authority and according to the user's request. The librarian 11 also saves the library members 6 to the magnetic tape device 10, and conversely saves the library members 6 to the magnetic tape device 10.
When library member 6 is restored to library 5, management member 7 is also evacuated and restored at the same time, and member 6
and the management member 7 are guaranteed to be synchronized. Furthermore, the librarian 11 can change the information 42 indicating the presence or absence of instructions for access protection of library members recorded in the vTOC 4 by the library creation means 1 through the function of the data management unit 8, and Within the scope of the unit's access authority, you can cancel the instruction information for member access protection that has already been recorded, or create a member in a library where member access protection is not specified using the same function as library creation method 1. Instruction information for instructing the data management unit 8 to protect access to can be recorded in the access protection instruction information storage area 43.

In the library member access protection method of this embodiment,
Since the member's access protection information is stored in the same library 5 as the member 6 as the management member 7 of member 6, the protection information storage area can be easily stored in each library without the need for complicated capacity calculations in the operating system. Since management member 7 is also included as part of the library members, users can
Seems like a natural extension of the functionality of 1. A text editor 2 that accesses the library 5 other than the library creation means 1, data management section 8, and librarian 11
Since the compiler 9 does not require any special modification, it can be easily realized.By verifying the access authority of the member 6 as a function of the data management unit 8, it is possible to accurately verify the access authority. Since management member 7 exists in the same library 5 as member 6, when performing batch processing such as saving all members in library 5, copying them to another library, and displaying directory information, the management member 7 exists in the same library 5 as member 6. If you open the library, the data management unit 8 remembers the user's library access privileges until the user closes the library, so you can check the access privileges of each member without verifying the library access privileges for each member. Only authority verification is required, and there is little overhead during operation.

Furthermore, the librarian 11 can change the contents of the access protection instruction information storage area 43 of the VTOC 4, and can subsequently register the management member 7 that stores the access information of the already registered member 6. Access protection for members can be instructed to the library 5 created before this function is implemented, and access protection information for members 6 can be registered. In other words, member access protection can be applied even to libraries created before implementing this function.

〔Effect of the invention〕

As explained above, the present invention stores the access protection information of library members 13- in the same library as managed members, thereby making it possible to set access protection for each member of the library, and to store the access protection information of each member. There is no need for the operating system to calculate the capacity for the storage area, and furthermore, there is an effect that the operating system requires less overhead for verifying access authority when a user accesses a member.

[Brief explanation of drawings]

FIG. 1 is a block diagram of a computer system showing an embodiment of the library member access protection method of the present invention. 1...Library creation means, 2...Text editor, 3...Disk, 4...
・・VTOC15・・・・Library, 6・・・・
...Member, 7...Administrative member, 8...
・Data management section, 9... Compiler, 10...
... Magnetic tape device, 11 ... Librarian, 12 ... Printer, 41 ... Library name, 14-42 ... Member access protection Information indicating the presence or absence of an instruction; 3...Access protection instruction information storage area.

Claims (1)

[Scope of Claims] 1. In a method for protecting library member access to a library of a computer system in which a plurality of members are registered, (A) access of a library member registered in the library upon receiving instructions from a user; (B) access protection instruction means for instructing protection of the library member; (B) access protection information for a library member to be registered in the library is automatically registered in the library at the time of registration of the library member according to instructions from the access protection instruction means; protection information automatic registration means; (C) access verification means for verifying the access authority of a program that accesses the library member by referring to the access protection information of the library member according to instructions from the access protection instruction means; ) An access protection method for library members, comprising: access protection maintenance means for maintaining access protection information for the library members and changing instructions for access protection for the library. 2. The library member access protection method according to claim 1, wherein the access protection maintenance means maintains the library member access protection information including changing, deleting, displaying, saving, and restoring the access protection information;
A method for protecting access to a library member, comprising: changing an instruction for protecting access to the library.