ACCESS RIGHT MANAGEMENT APPARATUS AND ACCESS RIGHT MANAGEMENT METHOD

1 . An access right management apparatus, comprising:

a processor and a memory; and

an indirect modification part configured to:

when first access right information is modified with a first modification content, the first access right information indicating an access right necessary for a first system to access an application, identify based on a predetermined database, second access right information indicating an access right necessary for a second system to access the application and having a relationship with the first access right information;

convert the first modification content of the first access right information to a second modification content corresponding to the second access right information; and

modify the identified second access right information with the second modification content.

2 . The access right management apparatus according to claim 1 , further comprising:

a data storage part configured to store attribute information of the first access right information and the second access right information as the predetermined database; and

an input-output part, wherein

the indirect modification part

identifies the second access right information based on the attribute information in the predetermined database; and

identifies a conversion rule used to convert the first modification content of the first access right information to the second modification content corresponding to the second access right information for modification of the identified second access right information with the second modification content, the conversion rule converting the first modification content of the first access right information to the second modification content in a different format, and

the input-output part displays information on the identified conversion rule.

3 . The access right management apparatus according to claim 2 , wherein the input-output part

determines based on predetermined determination information whether modification for the second access right information based on the conversion rule can be executed,

when determining that the modification for the second access right information can be executed, accepts from a user an input representing whether to confirm execution of the modification, and

when the accepted input confirms execution of the modification, modifies the identified second access right information.

4 . The access right management apparatus according to claim 3 , wherein the indirect modification part

acquires a plurality of the conversion rules,

manages a history of the input representing whether to confirm execution of the modification for the second access right information based on each of the plurality of conversion rules,

based on the database storing the attribute information of the first and the second access right information, identifies the strength of a relationship between each of the plurality of conversion rules and the second access right information, and

determines priorities for the plurality of conversion rules based on the identified strength of each relationship and the history of the input representing whether to confirm execution of the modification for the second access right information, and

based on the determined priorities, the input-output part displays the conversion rules for use in modifying the second access right information.

5 . The access right management apparatus according to claim 2 , wherein

the input-output part

accepts from the user, selection of an input to currently modify the second access right information with the second modification content based on the conversion rule, to not currently modify the same, or to not modify the same currently and in future, and

displays a history of the selection accepted in past.

6 . The access right management apparatus according to claim 2 , wherein

the application is accessible through at least one predetermined program, and

the data storage part stores a history of modification for the first and the second access right information and information on the program for accessing the application,

the access right management apparatus comprising:

a reuse part configured to accept specification of the application from the user and when the application is specified, displays the program that is able to access the specified application and access right information based on the stored history of modification and information on the program.

7 . The access right management apparatus according to claim 2 , wherein

the conversion rule includes a first conversion rule prohibited from being used,

the data storage part stores prohibition information storing the first conversion rule and access right information prohibited from being converted based on any of the conversion rules, and

the indirect modification part, when the conversion rule to modify the second access right information is identified, determines based on the prohibition information whether to modify the second access right information and only when determining to modify the second access right information, modifies the second access right information.

8 . The access right management apparatus according to claim 2 , further comprising

a direct modification part configured to modify the first access right information, wherein

the data storage part stores an initial conversion rule that defines the first modification content of the first access right information, and

the input-output part determines based on predetermined determination information whether modification for the first access right information based on the initial conversion rule can be executed and when determining that the modification for the first access right information can be executed, modifies the first access right information.

9 . The access right management apparatus according to claim 8 , wherein the direct modification part

acquires a plurality of the initial conversion rules,

manages a history of an input representing whether to confirm execution of modification for the first access right information based on each of the plurality of initial conversion rules,

based on the database storing the attribute information of the first and the second access right information, identifies the strength of a relationship between each of the plurality of initial conversion rules and the first access right information, and

determines priorities for the plurality of initial conversion rules based on the identified strength of each relationship and the history of the input representing whether to confirm execution of modification for the first access right information, and

based on the determined priorities, the input-output part displays the initial conversion rules for use in modifying the first access right information.

10 . The access right management apparatus according to claim 8 , wherein

the plurality of initial conversion rules include a first initial conversion rule prohibited from being used,

the data storage part stores exclusion information storing information on the first initial conversion rule and access right information prohibited from being converted with any of the initial conversion rules, and

when the initial conversion rule to modify the first access right information is selected, the direct modification part determines based on the exclusion information whether to modify the first access right information, and

only when determining to modify the first access right information, modifies the first access right information.

11 . An access right management method, implemented by an information processing apparatus comprising:

executing an indirect modification process to:

when first access right information is modified with a first modification content, the first access right information indicating an access right necessary for a first system to access an application, identify based on a predetermined database, second access right information indicating an access right necessary for a second system to access the application and having a relationship with the first access right information;

convert the first modification content of the first access right information to a second modification content corresponding to the second access right information; and

modify the identified second access right information with the second modification content.