Abstract: An approval workflow entrusting method and an approval workflow re-entrusting method are disclosed in the present invention, wherein the entrusting method includes one or more of the following modes: entrusting a user acting as an entrustor to a role acting as a trustee; entrusting a plurality of roles related to a user acting as an entrustor to a user or a role acting as a trustee; entrusting a plurality of forms related to all roles that are related to a user acting as an entrustor to one or more users or roles acting as trustees; entrusting a plurality of approval workflows related to all roles that are related to a user acting as an entrustor to one or more users or roles acting as trustees; and entrusting a plurality of process nodes related to all approval workflows related to all roles that are related to a user acting as an entrustor to one or more users or roles acting as trustees.

Abstract: A method for setting an operation time range of mailbox content and instant messaging content in a system is disclosed in the present invention, wherein a method for setting an operation time of mailbox content includes: selecting a role, a user or an employee as a mailbox user; setting a permission time range for each mailbox user, wherein said permission time range includes one or more of the following types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline; and the content within the permission time range of the mailbox user in a mailbox account used by the mailbox user being operated by said mailbox user.

Abstract: A method for authorizing a permission to operate content in a mailbox account or an instant messaging account in a system is disclosed in the present invention. The method for authorizing a permission to operate content in a mailbox account in a system includes: selecting one or more grantees; selecting one or more operated mailbox accounts; setting a permission time range, wherein said permission time range includes one or more of the following four types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, and a time range from a start time to a deadline; and setting a permission for said grantee to operate content within the permission time range in the operated mailbox account.

Abstract: A method for managing transaction processing in a management system is disclosed in the present invention, including: a transaction submitter appoints a user/an employee to process; otherwise, a transaction-processing request is assigned to a preset assigner, and the assigner appoints an assignee user/employee to process according to the content of the transaction-processing request submitted by the transaction submitter. The present invention provides a transaction submitter with a function to assign a certain user/employee to process, and the transaction cannot be transferred, thus preventing the privacy of the transaction from leaking, and ensuring that the transaction is fairly processed. A role having the nature of an independent individual is used as the assigner.

Abstract: A permission granting method and system based on one-to-one correspondence between roles and users is disclosed in the present invention, including the following sequential steps: S1: creating roles, where each role is an independent individual rather than a group or class; S2: respectively authorizing the roles created in step S1; and S3: relating a user to a role, where one role can only be related to a unique user in the same period, and one user can be related to one or more roles. A role in the present invention is an independent individual, and is different from a conventional role of a group or class nature. One role can be related to only one user in a same period of time, thereby significantly improving permission management efficiency in using a system, making dynamic authorization simpler, more convenient, clearer, and more explicit, and improving efficiency and reliability of permission setting.

Abstract: A method for authorizing an approval process and approval node thereof for a user is provided. The method for authorizing an approval process a user comprises: selecting a user in a system; displaying all approval processes in the system, and displaying current usage permission states of the selected user with respect to the approval processes; and authorizing usage permissions of the approval processes to the selected user. All of the approval processes or all approval nodes in the system are displayed after the user is selected, without omitting any approval process or any approval node, thereby facilitating quick authorization of related permissions to the user.

Abstract: Disclosed is a column value-based separate authorization method for statistical list operations, said method comprising a step of authorizing a statistical list operation and a step of selecting a grantee, said step of authorizing a statistical list operation comprising the following steps: S1: selecting a statistical list needing authorization; S2: selecting a column needing authorization in the statistical list, the selected column being a column determined by selection or determined automatically; S3: authorizing the operation for statistical data corresponding to all the column values in the selected column. The present invention enables separate authorization of the operation permissions for the statistical data in the statistical list according to the column values; one statistical list can meet different actual usage requirements after the authorization of different statistical data operation permissions.

Abstract: Disclosed is a method for authorizing operation permissions of statistical list, comprising a statistical list operation permission authorization step and a step to select an authorized object; said statistical list operation permission authorization step comprises the following steps: S1: selecting a statistical list that needs to be authorized, and displaying the names of columns in the statistical list that require operation permission control; S2: separately authorizing operation permission for each column; in the step to select an authorized object, selecting one or a plurality of authorized objects. The present invention can achieve separate authorization of the operation permissions of each column in a statistical list, increasing the range of applications of the statistical list, improving the fineness of system management, and truly meeting the requirements of usage during actual operation of enterprises and institutions.

Abstract: A method for managing an instant messaging account in a management system is disclosed in the present invention, including: creating a system role, wherein the role is an independent individual; relating a role-nature instant messaging account to the role according to work content of the role in the management system, wherein during the same period, one role-nature instant messaging account can only be related to one role, and one role can only be related to one role-nature instant messaging account; and creating a relation between a user and a role, and using the role-nature instant messaging accounts related to all roles related to the user as role-nature instant messaging accounts for the user and/or an employee corresponding to the user. According to the present invention, the employee obtains the role-nature instant messaging account through the role related to the corresponding user. When the employee resigns, the user corresponding to the employee is released from the relation to the role.

Abstract: A method for a user/an employee in a system to acquire an email account is disclosed in the present invention, including: relating a role-nature email account to a role according to work content of the role in the system, wherein during the same period, one role can only be related to one role-nature email account, and one role-nature email account can only be related to one role; said role is an independent individual not a group/a class, and during the same period, one role can only be related to a unique user, while one user is related to one or more roles; and creating a relation between a user and a role, wherein for any user, a role-nature email accounts related to all roles related to said user are used as role-nature email accounts of the user and/or an employee corresponding to the user.

Abstract: A method for presetting contacts of an instant messaging account and presetting an address book according to a messaging relationship between roles is disclosed in the present invention, including: creating roles in a system, wherein during the same period, one role can only be related to a unique user, while one user is related to one or more roles; one user corresponds to one employee, and one employee corresponds to one user; establishing a relation between a user/an employee and an instant messaging account, wherein one user/employee is related to one instant messaging account, and one instant messaging account is related to one user/employee; and setting a messaging relationship between a messaging role and a messaged role according to the work content of the roles in the system.

Abstract: A method for authorizing operation permissions of form-field values is disclosed in the present invention, including a step of authorizing operation permissions of form-field values and a step of selecting a grantee; the step of authorizing operation permissions of form-field values includes: S1: selecting a form to be authorized, and displaying fields in the form that need operation permission control; and S2: authorizing the operation permissions to each value of the fields respectively, where the grantee is one or more roles, the role is an independent individual rather than a group or class, one role can only be related to a unique user during the same period, and one user is related to one or more roles. The present invention can achieve respective authorization for the operation permissions of form-field values, and improves the fineness of system management. In this method, multiple authorized roles can be selected at the same time to batch authorization, thus improving the authorization efficiency.

Abstract: A method for authorizing form-related information is disclosed in the present invention, including: selecting a grantee; selecting a form, and displaying candidate relation information of said form, wherein when there is one grantee, in said candidate relation information, items thereof that are selected and saved in the candidate relation information when the grantee is authorized at last time are automatically selected, and a corresponding item is selected from said candidate relation information; when there are two or more grantees, in said candidate relation information, no item thereof is selected, and a corresponding item is selected from said candidate relation information; and after authorizing the relation information of the form to the grantee, saving permissions of the relation information of the grantee's form.

Abstract: A form-authorizing method based on time property fields of a form is disclosed in the present invention, including: selecting one or more grantees; selecting a form, and displaying time property fields of which permission time ranges need to be set in the selected form; respectively setting a permission time range for each time property field, wherein the permission time range comprises one or more of the following six types: a time range from a time point, which is determined by going backwards from a current time for a fixed time length, to the current time, a time range from a start time to a current time, a time range from a deadline to a system initial time, a time range from a start time to a deadline, a time range where a time field value is null, and a time range from a system initial time to a current time; and after completing setting the permission time ranges, saving the settings.

Abstract: A method for authorizing operation permissions of form data is disclosed in the present invention, including a step of selecting form data, where one or more pieces of form data, operation permissions of which need to be authorized are selected; a step of selecting a grantee, where one or more grantees to which operation permissions need to be authorized are selected; and a step of authorizing operation permissions, where the operation permissions of the selected form data are authorized to the selected grantee.

Abstract: A method for setting permissions of a user in a system in an information exchange unit is disclosed in the present invention, including: setting multiple information sections for the information exchange unit; setting participation roles for each information section respectively, wherein the participation role includes one or more roles in the system; and setting permissions of each of the participation roles in the information section, wherein each role is an independent individual not a group/a class, one role can only be related to a unique user during the same period, and one user is related to one or more roles; and creating relations between users and roles in the system. According to the present invention, when an employee changes his/her work content or is transferred from a post, permissions of the employee in an information section of the information exchange unit do not have to be set separately.

Abstract: An authorization method for displaying current permission status of all system users includes: selecting one form; selecting one element item of one of the elements of the form; displaying all system users in the system after the element item is selected, and displaying the current permission status of each system user for the selected element item; and authorizing the selected element item for one or more of the system users. After all system users in a system are displayed, current permission status of each system user for the selected element item is displayed, thereby making it convenient for an authorization operator to make modifications on this basis and authorize the selected element item for the system user, and improving authorization efficiency.

Abstract: A method for setting approval roles at workflow approval nodes based on form fields is disclosed in the present invention, including: setting a system organization structure; and selecting one of a role attribute field, a department attribute field or a submission role of the approval process in a form as a level subject; after selecting the level subject, determining a level by using the selected subject as a judgment criterion; and filling in a specific level value. In the present invention, according to requirements, the role attribute field, the department attribute field or the submission role involved in the form may be used as a criterion for determining a department level. If a signing role in a contract form is selected as a level subject, the signing role (rather than a submission role by default all the time) is used as a criterion for determining a level, so as to determine an approval role of an approval node. The method is more flexible and convenient in use, and high in universality.

Abstract: Disclosed in the present invention is a method for authorizing an authorization operator in a system, comprising: a system operator selects one or more authorization operators, configuring one or more grantees for each authorization operator; respectively configuring, by each authorization operator, a permission for each grantee requiring permission configuration among all the grantees corresponding to the authorization operator; and executing, by said grantee, a corresponding operation according to the configured permission. According to the present invention, a plurality of the authorization operators may be configured, and each grantee may be authorized by the corresponding authorization operator having a clear understanding of the permission of the grantee, so that an error will not easily occur in an authorization operation.

Abstract: A method for setting a permission to view an operation record based on a time range is disclosed in the present invention, including: selecting a grantee; setting one or more viewed objects for each grantee, wherein said grantee and said viewed object are the same type as a role, a user, and an employee; and setting a viewing-permission time range for each grantee, wherein said grantee obtains the permission to view the operation records of its corresponding viewed object within the viewing-permission time range of the grantee.