Computer and access control method in a computer

A computer system comprising:

• a storage system;
• and
• an administration computer in data communication with the storage system,
• the administration computer comprising:
• a first interface for a connection to a computer via a network;
• a second interface for a connection to the storage system via the network;
• a memory that stores first, second, and third programs;
• and
• a CPU that executes the first and second programs,
• wherein the CPU receives a request via the first interface including a user ID of the computer and authentication information of a user of the first program, and when the user ID and authentication information are authenticated by executing the first program, the CPU transmits a modified request to the second program, the modified request including program identifying information that identifies the first program,
• wherein when the modified request is received by the second program and the user ID and authentication information are authenticated by executing the second program, the CPU accesses the storage system via the second interface using an access authority that is established based on the program identifying information that identifies the first program,
• wherein when a second request including the user ID of the computer and the authentication information of the user is received by the CPU and the user ID and the authentication information are authenticated by executing the second program, the CPU accesses the storage system via the second interface using an access authority based on the user ID,
• wherein when the modified reciuest is transmitted to the second program and the user ID and the authentication information are authenticated by executing the second program, the CPU transmits a second modified request to the third program, the second modified request including the program identifying information that identifies the first program and a program identifier that identifies the second program,
• wherein when the second modified request is transmitted to the third program and the user ID and authentication information are authenticated by executing the third program, the CPU accesses the storage system via the second interface with the access authority established based on the program identifying information that identifies the first program and the program identifier that identifies the second program.

A method for operating an administrative computer in a system comprising a storage system, the method in the administrative computer comprising steps of:

• executing first, second, and third programs;
• receiving a request from a user computer via a first interface, the request including an ID of the computer and authentication information of a user of the first program,
• transmitting a modified request to the second program when the user ID and authentication information are authenticated by executing the first program, the modified request including program identifying information that identifies the first program,
• when the modified request is received by the second program and when the user ID and authentication information are authenticated by executing the second program, then accessing a storage system via a second interface using an access authority that is established based on the program identifying information that identifies the first program,
• wherein when a second request including the user ID of the computer and the authentication information of the user is received and when the user ID and the authentication information are authenticated by executing the second program, then accessing the storage system via the second interface using an access authority based on the user ID,
• wherein when the modified request is transmitted to the second program and the user ID and the authentication information are authenticated by executing the second program, then transmitting a second modified request to the third program, the second modified request including the program identifying information that identifies the first program and a program identifier that identifies the second program,
• wherein when the second modified request is transmitted to the third program and the user ID and authentication information are authenticated by executing the third program, then accessing the storage system via the second interface with the access authority established based on the program identifying information that identifies the first program and the program identifier that identifies the second program.