This application claims priority from Japanese Patent Application No. 2023-074083 filed on Apr. 28, 2023. The entire content of the priority application is incorporated herein by reference.
JP2022-103244A describes an image forming device configured to receive a login operation by an administrator and configured to perform a process permitted only to the administrator.
The image forming device described in JP2022-103244A does not receive a login operation by a user other than the administrator. Therefore, it is impossible to set execution permission for a specific process to the user other than the administrator. On the other hand, in a case where all users are permitted to perform the login operation, an unspecified user is permitted to perform the process permitted only to the administrator, and thus there is a concern that security may become low.
An object of the present disclosure is to provide an image forming device for improving user convenience and for keeping security from becoming low.
An image forming device including a user interface, a communication interface, a controller, and an image forming unit. The controller is configured to function as a Web server. the controller is configured to perform a login process of permitting a login operation performed by an administrator with respect to the image forming device, the controller is configured to perform a data providing process of providing the browser with Web page data for displaying a Web page corresponding to an administrator operation with respect to the Web page displayed by the browser, according to the administrator operation. in a case where the administrator logs in, the controller is configured to perform a designation process of receiving designation of a permitted user who is permitted to perform a part of the administrator operation, in the data providing process, in a case where the permitted user logs in, Web page data that displays a Web page for receiving the part of the administrator operation is provided to the browser. In a case where the controller receives an instruction from the browser, the controller is configured to perform a process corresponding to the received instruction, the instruction corresponding to the administrator operation received by the Web page for receiving the part of the administrator operation.
An image forming device including a user interface, a communication interface, a controller, and an image forming unit. The controller is configured to perform a login process of permitting a login operation performed by an administrator with respect to the image forming device. The controller is configured to perform a data providing process of providing a browser of a terminal with Web page data for displaying a Web page corresponding to an administrator operation with respect to a Web page displayed by the browser. The controller is configured to perform a designation process of receiving designation of a permitted user who is permitted to perform a part of the administrator operation, via an operation with respect to the Web page displayed on the browser, and of storing information indicating the permitted user who is designated in a memory. Web page data that displays a Web page for only receiving the part of the administrator operation is provided to the browser, according to a request from the browser. In a case where the controller receives an instruction from the browser, the instruction corresponding to the administrator operation received by the Web page for receiving the part of the administrator operation corresponding to the administrator operation, the controller is configured to perform a process corresponding to the received instruction.
An image forming device including a user interface, a communication interface, a controller, and an image forming unit. The controller is configured to perform a login process of permitting a login operation performed by an administrator with respect to the image forming device The controller is configured to perform a data providing process of providing a browser of a terminal with Web page data for displaying a Web page corresponding to an administrator operation with respect to a Web page displayed by the browser. The controller is configured to perform a designation process of receiving designation of a permitted user who is permitted to perform a part of the administrator operation and of receiving an operation of designating whether any administrator operation among a plurality of the administrator operations is permitted. Web page data that displays a Web page for receiving the part of the administrator operation is provided to the browser. In a case where the controller receives an instruction from the browser, the instruction corresponding to the administrator operation received by the Web page for receiving the part of the administrator operation, the controller is configured to perform a process corresponding to the received instruction corresponding to the administrator operation In a case where the Web page data for receiving only the part of the administrator operation is provided, the controller is configured to determine to use a first method or a second method.
An image forming device according to the present embodiment will be described by using a multifunction peripheral (MFP) as an example. An MFP 10 shown in
The MFP 10 includes a controller 11, a memory 12, a printer 13, a FAX IF 14, a scanner 15, a user IF 16, a communication IF 17, and a USB IF 18. These units are connected to a bus and configured to communicate with one another. Further, the word “IF” is an abbreviation of Interface.
The user IF 16 is an interface interposed between the controller 11 and a user who directly operates the MFP 10. The user IF 16 includes a touch panel and an operation key that is a physical key, for example. The communication IF 17 is an interface for connecting the MFP 10 to the network. The printer 13 is configured to print an image on a recording medium such as a sheet or a disk. As a recording method of the printer 13, an ink jet method, an electrophotographic method, or the like can be adopted. The scanner 15 is configured to read a document and configured to generate scan data. The MFP 10 may be configured to perform a combined operation obtained by combining a plurality of operations, such as a combination of an operation of generating the scan data and an operation of printing. In the present embodiment, the printer 13 and the scanner 15 are examples of an image forming unit.
The USB IF 18 is an interface configured to perform communication conforming to a universal serial bus (USB) standard. The USB standard is not particularly limited, and USB 2.0 standard, USB 3.0 standard, or the like can be adopted. A device connected to the USB IF 18 may be a portable type device such as a USB memory, and may be a USB connectable HDD. For example, the device may be a memory card configured to communicate with the MFP 10, via a card reader connected to the USB IF 18.
The controller 11 includes a CPU, an application specific integrated circuit (ASIC), and the like. The memory 12 may include a RAM, a ROM, an SSD, an HDD, and the like. A buffer that is provided in the controller 11 and that is used when various programs are executed may also be regarded as a part of the memory 12. The memory 12 may be a storage medium configured to be read by the controller 11. The storage medium configured to be read by the controller 11 is a non-transitory medium. The non-transitory medium also includes a recording medium such as a CD-ROM or a DVD-ROM, in addition to the examples described above. The non-transitory medium is also a tangible medium. On the other hand, an electric signal carrying a program downloaded from a server or the like on the Internet is a computer-readable signal medium, which is a kind of computer-readable medium, but is not included in the non-transitory computer-readable storage medium.
The memory 12 is configured to store firmware as a program to be executed by the controller 11. The present embodiment mainly describes a process of the controller 11 according to a command written in the program. That is, processes such as “judgment”, “selection”, “calculation”, “determination”, “specification”, “acquisition”, “reception”, and “control” to be described below represent processes of the controller 11. The process “acquisition” is used as a concept indicating that a request is not essential. That is, a process of receiving data without a request from the controller 11 is also included in a concept indicating that “the controller 11 acquires data”. Further, the term “data” in the present specification is represented by a controller-readable bit string. Data having substantially the same meaning and different formats are regarded as the same data. The same applies to “information” in the present specification.
The controller 11 also functions as a Web server for displaying a predetermined Web page on the PC 80 by performing the firmware. The controller 11 is configured to cause a browser 81 to be described later of the PC 80 to display the Web page by transmitting, to the PC 80, Web page data for displaying the Web page.
Next, a configuration of the PC 80 will be described. The PC 80 includes a communication IF, a memory, a controller, a display, and a user IF which are not shown. The memory of the PC 80 is configured to store an OS and the browser 81. The browser 81 is an abbreviation of a browser program. The controller of the PC 80 is configured to operate, in accordance with the browser 81, to cause the display to display the Web page corresponding to the Web page data transmitted from the MFP 10. In the present embodiment, the Web page that the controller 11, as the web server, causes the browser 81 of the PC 80 to display, and the PC 80 that displays this Web page are also examples of the user IF. A terminal is not limited to the PC 80 and may be a portable terminal such as a smartphone as long as the terminal is a device configured to perform wireless communication with the MFP 10 via a network.
Next, procedures of a process when the controller 11 of the MFP 10 functions as the Web server to cause the browser 81 of the PC 80 to display the Web page will be described with reference to
The user operates the PC 80 to input, to the browser 81, a URL for specifying the Web server of the MFP 10. The browser 81 is configured to transmit a GET request for HTTPS communication including the input URL, at a timing 10 (hereinafter, the timing is also referred to as “T”). Upon receiving the GET request from the browser 81, the controller 11 transmits an HTTPS response corresponding to the GET request.
The response returned at T11 includes the Web page data for displaying a home screen 30 before a login operation shown in
The home screen 30 shown in
In a case where an administrator inputs a password, which indicates administrator information, in an administrator password input field 34 displayed in the menu 32 and operates an administrator login button 35 with respect to the home screen 30 before the login operation, the browser 81 transmits, to the controller 11, information indicating that the administrator login button 35 is operated, and a POST request including the password, at T13. Upon receiving the POST request including the password, the controller 11 performs an authentication process using the password included in the POST request and display setting of Web page data corresponding to an authority of a login user at T14. In the present embodiment, the password input in the administrator password input field 34 is an example of the administrator information. The process performed by the controller 11 at T14 is an example of a data providing process.
In step S30, the controller 11 determines whether the administrator login button 35 is operated. Specifically, the controller 11 determines whether information indicating that the administrator login button 35 is operated is included in the POST request. In this example, since the administrator operates the administrator login button 35 (step S30: YES), the process proceeds to step S31, and a registered administrator password is acquired from the memory 12. The registered administrator password is a password used for authentication of the login operation by the administrator, and is registered in the memory 12 at the time of factory shipment in the present embodiment. The administrator can also change the registered administrator password registered in the memory 12.
In step S32, the controller 11 compares the password included in the POST request with the acquired registered administrator password. In a case where the controller 11 determines that a result of the password comparison in step S32 indicates matching (step S33: YES), the process proceeds to step S34, and the controller 11 sets an authority flag indicating that an authority of the login user is “administrator”. In the present embodiment, for convenience, the administrator is also described as a type of the login user, but a configuration in which the administrator and the user are clearly different persons is not excluded. The authority flag is information indicating the authority of the login user, and the authority “administrator” indicates that the login user is the administrator. The authority flag retains a value when the administrator is in a login state, and is deleted when the administrator logs out. When the password and the registered administrator password partially match with each other as the comparison result in step S32, the controller 11 may permit the login operation.
In step S35, the controller 11 sets that the login operation by the administrator is successful, and the process proceeds to step S11 of
Since the login process is successful in step S11 of
The Web page data that can be provided by the controller 11 is configured to have a hierarchical structure including a tab hierarchy and a menu hierarchy. Here, the tab hierarchy forms the highest hierarchy in the hierarchical structure. The page element table 20 shown in
The menu hierarchy is a hierarchy subordinate to the tab hierarchy. In the page element table 20 shown in
The Web page is configured based on the tab information and the option information described above. Specifically, as described later, the tab information and the option information are displayed as the objects (the tabs, the option) in the menu 42 of the Web page while maintaining the hierarchical structure. The tabs and the options may be objects having a text feature and an icon feature. In a case where one of the tabs displayed in the menu 42 is operated, the option corresponding to the option information that is subordinate to the corresponding tab information is displayed in the page element table 20. In a case where one of the options displayed in the menu 42 is operated, the browser 81 designates a link destination (a URL) to the Web page data associated with the corresponding option information and requests the controller 11 for the Web page data.
For example, in a case where an option that is subordinate to the tab “FAX” displayed in the menu 42 is selected and operated, the controller 11 provides, to the PC 80, Web page data for displaying a Web page corresponding to registration of a setting value related to FAX communication, according to a request from the browser 81. Upon receiving a POST request including information that specifies the setting value designated by an operation via the Web page displayed by the browser 81, the controller 11 stores the designated setting value in the memory 12. For example, in a case where an option subordinate to the tab “Scan” displayed in the menu 42 is selected and operated, the controller 11 provides, to the PC 80, Web page data for displaying a Web page corresponding to registration of a setting value related to scan, according to a request from the browser 81. Upon receiving a POST request including information that specifies the setting value designated by an operation via the Web page displayed by the browser 81, the controller 11 stores the designated setting value in the memory 12.
Although not shown, in the page element table 20, the tab information “Print” and the option information subordinate to the tab information “Print”, which correspond to provision of a Web page for registering a setting value related to print as an operation of the MFP 10, may be registered. In the page element table 20, the tab information “Copy” and the option information subordinate to the tab information “Copy”, which correspond to provision of a Web page for registering a setting value related to copy as an operation of the MFP 10, may be registered.
In the present embodiment, an operation executed by operating a tab other than the tab “Home” and an option subordinate to the tab displayed in the menu 42 on the home screen 40 after the login operation is an example of the administrator operation. Specifically, an operation executed by operating one of the tabs “General”, “Address Book”, “Fax”, “Copy”, “Print”, “Scan”, “Administrator”, and “Network” and an option subordinate to the tab is an example of the administrator operation.
An in-page object refers to information corresponding to an object constituting a Web page (strictly, a content display portion) specified by the option information. In the page element table 20 shown in
Returning to
In step S13, the controller 11 sets a variable n corresponding to a tab number for specifying the tab information to “1”. The tab number is a number for specifying the tab information, and is registered in association with the tab information in the page element table 20 described above. The “n” is a variable, and in the present embodiment, the variables n including “1”, “2”, “3”, “4”, “5”, “6”, “7”, “8”, and “9” are respectively associated with the tab information “Home”, “General”, “Address Book”, “Fax”, “Copy”, “Print”, “Scan”, “Administrator”, and “Network” in this order.
In step S14, the controller 11 acquires the option information subordinate to the tab information “Home” specified by the tab number “1”, with reference to the page element table 20. In this example, since the option information “Status” and option information “Auto Refresh Interval” are subordinate to the tab information “Home” specified by the tab number “1”, the controller 11 acquires the option information “Status” and option information “Auto Refresh Interval” from the page element table 20. Hereinafter, the tab information specified by using the tab number is also referred to as “specified tab information”. Similarly, the option information specified by using the tab number and an option number to be described later is also referred to as “specified option information”.
In step S15, the controller 11 performs a displayability determination process of determining whether the object corresponding to the in-page object included in the option information acquired in step S14 is to be displayed or non-displayed.
In step S50, the controller 11 sets, to “1”, a variable m corresponding to the option number for specifying the option information acquired in step S14. The option number is a number for specifying the option information, and is registered in association with the option information in the page element table 20 described above. The “m” is a variable. The option number refers to continuous values with respect to the option information subordinate to the tab information as one group. For example, in the option information subordinate to the tab information “Home” specified by the tab number “1”, an option number “1” corresponds to the option information “Status”, and an option number “2” corresponds to the option information “Auto Refresh Interval”.
In step S51, the controller 11 acquires data attributes for all in-page objects included in the specified option information at a current time point. The data attribute refers to information indicating which one among the authority “administrator”, an authority “sub-administrator”, and an authority “specific user” is allowed to access the in-page object. In the page element table 20 shown in
The data attribute “administrator secret data” refers to an attribute indicating that the login user can access to the in-page object only in a case where the authority flag is set to the authority “administrator”. The data attribute “management data” refers to an attribute indicating that the login user can access to the in-page object in a case where the authority flag is set to the authority “administrator” or the authority “sub-administrator”. The data attribute “specific user data” refers to an attribute indicating that the login user can access to the in-page object in a case where the authority flag is set to the authority “administrator” or the authority “specific user”. The data attribute “user data” refers to an attribute indicating that all users can access to the in-page object, that is, in a state of not logging in. The setting of the authority flag to the authority “administrator” is executed in step S34 of
In step S52, the controller 11 compares an authority of an account that has logged in with a data attribute associated with the specified in-page object at the current time point, and sets an object display flag indicating “display available” or “display unavailable” for each in-page object, according to a result of the comparison. Specifically, in a case where the authority of the user who has logged in is higher than the data attribute associated with the specified in-page object at the current time point, the object display flag “display available” is set for the specified in-page object at the current time point. On the other hand, in a case where the authority of the user who has logged in is lower than the data attribute associated with the specified in-page object at the current time point, the object display flag “display unavailable” is set for the specified in-page object at the current time point. In this example, since the administrator logs in, the authority flag is set to the “administrator” having the highest authority, and the object display flag “display available” is set for all the specified objects.
In step S53, the controller 11 determines whether the object for which the object display flag “display available” is set is included in the specified in-page object at the current time point, according to the process in step S52. In this example, since the authority flag is the “administrator”, the “display available” is set for all the specified in-page objects (step S53: YES), the process proceeds to step S54, and the controller 11 sets an option display flag “display available” for the option information specified by the option number at a current time point.
In step S55, the controller 11 determines whether the processes in step S51 to step S54 are executed with respect to all the option information subordinate to the specified tab information at the current time point. Specifically, the controller 11 determines whether a value of the variable m corresponding to the option number is equal to the total number of options subordinate to the specified tab at the current time point. In this example, since the processes in step S51 to step S54 are not executed with respect to all the option information subordinate to the specified tab information at the current time point (that is, the tab specified by the variable n “1”) (step S55: NO), the process proceeds to step S56, and the controller 11 increases the variable m corresponding to the option number by only 1, and changes the option information to be specified. Then, the process proceeds to step S51, and the controller 11 sets the object display flag for all the in-page objects included in the newly specified option information by the processes in step S51 and step S52 described above. Then, the controller 11 sets the option display flag by the processes in step S51 to step S54 described above.
In a case where the controller 11 executes the processes in step S51 to step S54 with respect to all the option information subordinate to the specified tab information at the current time point (in this example, the tab information specified by the variable n “1”) (step S54: YES), the process proceeds to step S16 of
In step S16, the controller 11 determines whether the option information for which the option display flag “display available” is set is included in the option information subordinate to the specified tab information at the current time point. In this example, since the option display flag “display available” is set for all the option information subordinate to the specified tab information at the current time point (step S16: YES), the process proceeds to step S17, and the controller 11 sets the tab display flag “display available” to the specified tab information at the current time point.
In step S18, the controller 11 determines whether the setting of the tab display flag in step S17 is executed with respect to all the tab information registered in the page element table 20. Specifically, the controller 11 determines whether a value of the variable n is equal to the total number of pieces of tab information. Here, since the setting of the tab display flag in step S17 is not executed with respect to all the tab information (step S18: NO), the process proceeds to step S19, and the controller 11 increases the variable n corresponding to the tab number by only “1”, and changes the tab information to be specified. Then, the process proceeds to step S14, and the controller 11 acquires, from the page element table 20, the option information subordinate to the newly specified tab information (in this example, the tab information specified by the variable n “2”). Then, in step S15, the controller 11 executes the displayability determination process described above on the newly acquired option information. Thereafter, the controller 11 executes the setting of the tab display flag in step S17 described above on the newly specified tab information. Therefore, the tab information, the option information, and the in-page object are registered in the page element table 20, the tab display flag (display available or display unavailable) is set to the tab information, the option display flag (display available or display unavailable) is set to the option information, and the object display flag (display available or display unavailable) is set to the in-page object.
In a case where the controller 11 executes the process in step S17 with respect to all the tab information registered in the page element table 20 (step S18: YES), the process proceeds to step S20. In step S20, the controller 11 reflects values of the tab display flag, the option display flag, and the object display flag, and generates Web page data including tabs, options, and objects that are displayable.
Returning to
In a case where the administrator operates the tab “Administrator” in the menu 42 on the home screen 40 after the login operation, all options subordinate to the tab “Administrator” can be displayed in the menu 42, as shown in
Thereafter, in a case where the user operates any option displayed in the menu 42 on the home screen 40 after the login operation, the browser 81 designates a link destination (URL) of Web page data corresponding to the selected option, and transmits a GET request for requesting the Web page data to the controller 11, at T17. Upon receiving the GET request, the controller 11 generates the Web page data corresponding to the operated option, according to the GET request. In this case, similarly to the process in step S20 described above, the controller 11 reflects the values of the tab display flag, the option display flag, and the object display flag, and generates the Web page data including tabs, options, and objects that are displayable. In the present embodiment, the processes executed by the controller 11 at T14 and T15 and a process that is executed by the controller 11 to provide Web page data according to a request from the browser 81 to be described later, are examples of the data providing process.
Next, as shown in
In step S60, the controller 11 generates the Web page data for displaying the account/authority management screen 50 shown in
Upon receiving the response, the browser 81 of the PC 80 analyzes the Web page data and displays the account/authority management screen 50. The account/authority management screen 50 is a Web page for receiving registration operations of a plurality of accounts 1 to 10. On the account/authority management screen 50, a content display portion 53 includes a user input field 54, a password input field 55, and an authority input field 56, in accordance with the accounts to be registered. The user input field 54 is a field that receives an input of a user name for creating an account. The password input field 55 is a field that receives an input of a password. The authority input field 56 is a field that is capable of receiving input of one of the authority “sub-administrator” and the authority “specific user” described in the page element table 20.
In this example, it is assumed that account information indicating a user name “user A”, a password “xxxx1”, and the authority “sub-administrator” is registered as an “account 1” in management information 21 to be described later. That is, the account information is registered in the management information 21 stored in the memory 12. It is assumed that the administrator inputs a user name “user B” in the user input field 54, a password “xxxx2” in the password input field 55, and the authority “specific user” in the authority input field 56 as an “account 2”, and operates a submit button 57. In the present embodiment, the “specific user” is a user who is permitted to operate an address book managed by the MFP 10. The browser 81 transmits a POST request including the newly input account information (the user name, the password, and the authority) to the MFP 10. In a case where the administrator operates a cancel button 58, values newly input to the user input field 54, the password input field 55, and the authority input field 56 are canceled, and the account/authority management screen 50 returns to a display screen reflecting the information registered in the management information 21.
In a case where the POST request including the account information is received in step S61 (step S61: YES), the process proceeds to step S62, and the controller 11 registers the account information (the user name, the password, and the authority) included in the POST request to the management information 21 stored in the memory 12. The management information 21 refers to information for registering the account information input by using the account/authority management screen 50, and the password and the authority are registered in association with the user name. In the present embodiment, the processes executed by the controller 11 in step S60 to step S62 of
Next, a process in a case where the home screen 30 before the login operation is operated by using the user name “user A”, which is registered by using the account/authority management screen 50, to perform the login process will be described with reference to
In a case where the controller 11 receives the POST request and acquires the information indicating that the user login button 38 is operated from the POST request (
In step S38, the controller 11 compares the user password included in the POST request with a registered password associated with the user name “User A” in the management information 21. In a case where it is determined that a result of the password comparison indicates matching (step S39: YES), the process proceeds to step S40, and the controller 11 sets the authority (in this example, the sub-administrator) registered in the account information to the authority flag corresponding to the login user.
In step S42, the controller 11 sets that the login operation by the user is successful, and the process proceeds to step S11 of
In step S11 of
In step S13, the controller 11 sets the variable n corresponding to the tab number to “1”. In step S14, the controller 11 acquires the option information subordinate to the tab information “Home” that is specified by the tab number “1” with reference to the page element table 20. In step S15, as described above, the controller 11 executes the displayability determination process.
In step S52 of the displayability determination process, the controller 11 compares the authority of the account that has logged in with the data attribute associated with the specified in-page object at the current time point, and sets the object display flag indicating “display available” or “display unavailable” for each in-page object according to the result of the comparison. In this example, since the authority flag is set to the “sub-administrator”, in a case where the data attribute associated with the specified in-page object at the current time point is any one of the “management data”, the “specific user data”, and the “user data”, the controller 11 sets the object display flag “display available” for the in-page object. On the other hand, in a case where the data attribute associated with the specified in-page object at the current time point includes the “administrator secret data”, the controller 11 sets the object display flag “display unavailable” for the in-page object.
In this example, in-page objects “Password Settings”, “User Account List”, “All Settings Reset”, and “Factory Reset”, which are included in option information subordinate to the tab information “Administrator” specified by the variable n “8” corresponding to the tab number, are associated with the data attribute “administrator secret data”. The in-page objects “All Settings Reset” and “Factory Reset” are also associated with the data attribute “management data”, in addition to the data attribute “administrator secret data”. The above indicates that each of the in-page objects “All Settings Reset” and “Factory Reset” is constituted by a plurality of objects, and includes objects associated with the data attributes “administrator secret data” and “management data”.
Since the authority flag is the “sub-administrator”, the controller 11 sets the object display flag “display unavailable” for the in-page objects “Password Settings”, “User Account List”, “All Settings Reset”, and “Factory Reset” included in the option information subordinate to the specified tab information “Administrator”, in step S52 described above.
Since no in-page object for which the object display flag “display available” is set is included in the specified option information “Login Password” in step S53 described above (step S53: NO), the process proceeds to step S55 without the controller 11 setting the option display flag “display available”. That is, the controller 11 maintains the option display flag “display unavailable”. Similarly, since no in-page object for which the object display flag “display available” is set is included in the specified option information “User Account Manager” in step S53 described above (step S53: NO), the controller 11 maintains the option display flag “display unavailable”. In a case where the user other than the administrator is permitted to the “Login Password” as an object related to a setting operation of the authentication information of the administrator and the “User Account Manager” as an object related to a designation operation of the permitted user, an excessive reduction in security may occur, and thus the user is not permitted thereto. On the other hand, since the in-page object for which the object display flag “display available” is set is included in the specified option information “Restriction Management”, “Reset Menu”, or the like in step S53 described above (step S53: YES), the controller 11 sets the option display flag “display available” in step S54. In a case where the controller 11 executes the setting of the flags in step S52 and step S54 with respect to all the option information subordinate to the specified tab information at the current time point (step S55: YES), the process proceeds to step S16 in
In a case where the controller 11 executes the process in step S17 with respect to all the tab information registered in the page element table 20 (step S18: YES), the process proceeds to step S20. In step S20, the controller 11 reflects the values of the tab display flag, the option display flag, and the object display flag, and generates the Web page data including tabs, options, and objects that are displayable.
On the other hand, in a case where the sub-administrator operates the tab “Administrator” displayed in the menu 62, options corresponding to the option information “Login Password” and “User Account Manager”, for which the option display flag “display unavailable” is set, among all the option information subordinate to the tab information “Administrator”, are not displayed. This is because the data attributes of the option information “Login Password” and “User Account Manager” are the “administrator secret data”, and an access authority of the “administrator secret data” is higher than that of the authority “sub-administrator”. In other words, in a case where the administrator logs in, Web page data in which the number of options is the first number is provided to the browser 81 as shown in
In a case where the option “Login Password” is selected and operated, the controller 11 provides, to the PC 80, Web page data for displaying a Web page corresponding to an operation for registering the registered administrator password. Upon receiving a POST request including the password input by the operation via the Web page displayed on the browser 81, the controller 11 updates the registered administrator password registered in the memory 12 to the password included in the POST request and registers the password.
In a case where the sub-administrator operates an option “Reset Menu” 67A subordinate to the tab “Administrator”, as described above, the browser 81 displays a Web page 65 related to the option “Reset Menu” 67A shown in
Upon receiving a POST request indicating that the object 68A corresponding to the in-page object “Machine Reset” in the Web page 65 shown in
Although not displayed on the Web page 65 shown in
Next, a process in a case where the home screen 30 before the login operation is operated by using the user name “user B”, which is registered by using the account/authority management screen 50, to perform the login process will be described. As described above, in the home screen 30 before the login operation, the user name “user B” is input in the user name input field 36, the user password “xxxx2” is input in the password input field 37, and the user login button 38 is operated. At T13, the browser 81 transmits, to the MFP 10, the POST request including the user name in the user name input field 36, the password information in the password input field 37, and the information indicating that the user login button 38 is operated.
In a case where the controller 11 receives the POST request and acquires the information indicating that the user login button 38 is operated from the POST request, the controller 11 executes the login process described above in step S10. The controller 11 sets the authority flag “specific user” in step S40 of the login process. In step S11, the login process is successful (step S11: YES), and thus the process proceeds to step S12, and the controller 11 acquires all the tab information in the Web page constituting the site from the page element table 20 stored in the memory 12.
In step S15, the controller 11 executes the displayability determination process described above. In step S52 of the displayability determination process, the authority flag is the “specific user”, and thus in a case where the data attribute associated with the specified in-page object at the current time point is one of the “specific user data” and the “user data”, the controller 11 sets the object display flag “display available” for the in-page object. On the other hand, in a case where the data attribute associated with the specified in-page object at the current time point includes the “administrator secret data” and the “management data”, the controller 11 sets the object display flag “display unavailable” for the in-page object.
In this example, in the tab information “Home” specified by the variable n “1” corresponding to the tab number, the in-page objects included in the option information “Status” and “Auto Refresh Interval” are associated with the data attribute “user data”. In the tab information “Address Book” specified by the variable n “3”, in-page objects included in option information “Address”, “Import”, and “Export” are associated with the data attribute “specific user data”. On the other hand, in the tab information other than the above, in-page objects included in the option information are associated with one of the data attributes “management data” and “administrator secret data”.
Since the authority flag is the “specific user” in the process of step S52 described above, the controller 11 sets the object display flag “display available” for the in-page objects included in the option information subordinate to the tab information “Home” and “Address Book” respectively specified by the variables n “1” and “3” corresponding to the tab numbers. On the other hand, in the process of step S52, the controller 11 sets the object display flag “display unavailable” for the in-page object included in the option information subordinate to the tab information other than the tab information specified by the variables n “1” and “3”.
In the process of step S54 described above, the controller 11 sets the option display flag “display available” for the option information subordinate to the tab information “Home” and “Address Book” respectively specified by the variables n “1” and “3”. On the other hand, in the process of step S54, the controller 11 sets the option display flag “display unavailable” for the option information subordinate to the tab information other than the tab information specified by the variables n “1” and “3”.
In the process of step S17 described above, the controller 11 sets the tab display flag “display available” for the tab information “Home” and “Address Book” respectively specified by the variables n “1” and “3”. On the other hand, in the process of step S17, the controller 11 sets the tab display flag “display unavailable” for the tab information other than the tab information specified by the variables n “1” and “3”.
In a case where the option “Address” displayed in the menu 72 on the home screen 70 after the login operation is selected and operated, the controller 11 provides, to the PC 80, Web page data that displays a Web page for registering, in the address book, transmission destination information, which indicates a transmission destination to be used in a transmission operation of the MFP 10, according to a request from the browser 81. Here, the address book is the information stored in the memory 12, and includes a mail address that is the transmission destination information to be used for mail transmission of the scan data as an operation of the MFP 10, and a telephone number that is transmission destination information to be used for FAX transmission as an operation of the MFP 10. Upon receiving, from the browser 81, a POST request including the transmission destination information input by an operation via the Web page, the controller 11 registers the transmission destination information in the address book stored in the memory 12.
In a case where the option “Import” displayed in the menu 72 is selected and operated, the controller 11 provides, to the PC 80, Web page data that displays a Web page for importing a file in which the transmission destination information is written, according to a request from the browser 81. Storing the information included in the acquired file in the memory 12 is called Import for convenience. Upon receiving a POST request including an input file path by an operation via the Web page, the controller 11 acquires the file indicated by the file path from an external device, and registers the transmission destination information included in the acquired file to the address book registered in the memory 12.
In a case where the option “Export” displayed in the menu 72 is selected and operated, the controller 11 provides, to the PC 80, Web page data that displays a Web page for exporting the file in which the transmission destination information registered in the address book is written. Writing the information stored in the memory 12 in the file and providing the file is called Export for convenience. Upon receiving the POST request including the input file path by the operation via the Web page, the controller 11 provides the file including the transmission destination information registered in the address book of the memory 12 to the external device, according to the file path. The external device used for Import and Export may be a USB memory connected to the USB IF 18, and may be a device capable of communicating via the communication IF 17. The server and the PC 80 are examples of the device configured to communicate via the communication IF 17.
The embodiment described above can achieve the following effects.
In a case where the administrator logs in, the controller 11 of the MFP 10 receives designation of the permitted user who is permitted to perform a part of the administrator operation via an operation on the Web page displayed on the browser 81 of the PC 80. In a case where the sub-administrator or the specific user designated by the administrator logs in, the controller 11 provides, to the browser 81, Web page data that displays a Web page for receiving only the part of the administrator operation, according to a request from the browser 81. Upon receiving, from the browser 81, an instruction corresponding to the administrator operation received by the Web page for receiving the part of the administrator operation, the controller 11 executes a process corresponding to the received instruction. Accordingly, the sub-administrator or the specific user designated by the administrator can cause the MFP 10 to execute the process corresponding to the part of the administrator operation by an operation on the Web page displayed on the browser 81. As a result, it is possible to achieve both improvement in user convenience and restriction of security degradation.
The controller 11 is configured to receive designation of an administrator operation to be permitted among a plurality of administrator operations in association with the user who is designated, and in a case where any user among a plurality of permitted users logs in, the controller 11 provides, to the browser 81, Web page data that displays a Web page for receiving only the administrator operation permitted to the permitted user in a login state. Accordingly, since a part of the administrator operation to be permitted can be designated to the MFP 10, in advance, in association with the permitted user, the authority related to the administrator operation can be granted to the user within a range recognizable by the administrator.
The controller 11 can designate an administrator operation other than an operation related to the authentication information on the administrator and an operation related to the designation of the permitted user as the administrator operation to be permitted among the plurality of administrator operations. In a case where any user among the plurality of permitted users logs in, the controller 11 provides, to the browser 81, the Web page data that displays the Web page for receiving only the administrator operation permitted to the permitted user who logs in. In a case where the user other than the administrator is permitted to perform the operation related to the authentication information on the administrator and the operation related to the designation of the permitted user, the excessive reduction in security may occur, and thus the user is not permitted to the two operations.
The controller 11 can designate an operation related to the address book among the plurality of administrator operations as the administrator operation to be permitted. In a case where a user who is permitted to perform the operation related to the address book logs in among the plurality of permitted users, the controller 11 provides, to the browser 81, Web page data that displays a Web page for receiving the operation related to the address book. The user convenience is improved by allowing the user other than the administrator to perform the operation related to the address book, and thus the user is permitted to perform the operation.
While the invention has been described in conjunction with various example structures outlined above and illustrated in the figures, various alternatives, modifications, variations, improvements, and/or substantial equivalents, whether known or that may be presently unforeseen, may become apparent to those having at least ordinary skill in the art. Accordingly, the example embodiments of the disclosure, as set forth above, are intended to be illustrative of the invention, and not limiting the invention. Various changes may be made without departing from the spirit and scope of the disclosure. Therefore, the disclosure is intended to embrace all known or later developed alternatives, modifications, variations, improvements, and/or substantial equivalents. Some specific examples of potential alternatives, modifications, or variations in the described invention are provided below:
In the embodiment described above, the controller 11 is configured to cause the browser 81 of the PC 80 to display the Web page by the function as the Web server, and is configured to receive the designation of the permitted user by the administrator. Alternatively, the controller 11 may be configured to receive the designation of the permitted user according to an operation on the user IF 16 by the administrator. In addition, the controller 11 may be configured to receive the designation of the permitted user according to an instruction from the PC 80, without using the function of the controller 11 as the Web server.
The image forming device is not limited to the MFP 10, and may be a printing apparatus including only the printer 13.
Number | Date | Country | Kind |
---|---|---|---|
2023-074083 | Apr 2023 | JP | national |