Method and system for role-based authorization in web shopping
AssigneeSap SE
InventorsWolfgang Sattler, Sumit Sharma, Winfried Gerg
Life of this patent
Estimating the term…
Abstract
Embodiments of the present invention relate to a method and system for role-based authorization in web shopping. According to the embodiments, operations available to a user of a web shop may be filtered based on the user's role, and correspond authorization level, within an organization.
Claims14
A system comprising:
- a computer server provided in communication with a terminal of a system user and executing program instructions that cause the server to:
- authenticate a user to an interactive web shop;
- store authentication data for users and communicate the authentication data to the user logon processing instructions;
- process an interactive web shopping session with an authenticated user;
- determine a scope of user access to functions of the web shop during the web shopping session;
- and
- during the web shopping session, control a progression of stages in the web shopping session according to a process script that defines a complete set of operational stages available in the web shopping session and a corresponding function set for each stage, the process script controlling, based on user authorization instructions, which successive operational stages are available to the user and which functions from the corresponding function set are available at a particular stage in the progression, and to display only those navigation keys that are associated with permitted successive operational stages,
- wherein the process script includes a root stage with a corresponding function set and a plurality of subsequent stages, each subsequent stage having a corresponding function set.
A method, in an interactive web shopping session with a web shop, comprising:
- interacting with a user according to a predefined process script that identifies stages of interaction in the web shopping session, the process script defining a complete set of stages available in the web shopping session and a corresponding function set for each stage;
- consulting a rights matrix defining a plurality of user roles and permissions therefor;
- determining which successive stages are available to the user and a scope of the user's access to available functions of the web shop based on information in the rights matrix;
- and
- filtering, by the predefined process script and as the user interacts with the web shopping session, a function set of the web shop based on the available successive stages and scope of the user's access, and presenting a new stage of interaction with the filtered function set and only those navigation keys that are associate with permitted successive stages to the user,
- wherein the process script includes a root stage with a corresponding function set and a plurality of subsequent stages, each subsequent stage having a corresponding function set.
A method, in an interactive web shopping session, comprising:
- for a user, consulting a rights matrix defining user roles and permissions therefor,
- presenting operational stages for the web shopping session to the user according to a predetermined process script that defines a complete set of operational stages available in the web shopping session and a corresponding function set for each operational stage;
- during the web shopping session, as new operational stages are reached:
- identifying, by the predefined process script, based on information in the rights matrix, with reference to the permissions associated with the user's role, which successive operational stages are available to the user and which functions are available to the user at each stage, and presenting content of the respective new operational stages to the user and displaying therein only those navigation keys that are associated with the permitted successive operational stages,
- wherein the process script includes a root stage with a corresponding function set and a plurality of subsequent stages, each subsequent stage having a corresponding function set.
A machine-readable medium comprising computer-executable instructions to perform a method for interactive web shopping, the method comprising:
- for a user, executing a process script identifying successive stages in the web shopping session, process script defining an inter-related set of operational stages of the web shopping session that are available to a user with full rights and a corresponding function set for each successive stage;
- consulting a rights matrix defining a plurality of user roles and permissions therefor;
- and
- determining, by the process script, which successive stages are available to the user and a scope of the user's access to available functions of the web shop based on information in the rights matrix, and at a particular stage of the identified stages, the process script filtering the corresponding function set of the web shop based on the scope of the user's access and providing the filtered function set and only those navigation keys that are associate with permitted successive stages to the user,
- wherein the process script includes a root stage with a corresponding function set and a plurality of subsequent stages, each subsequent stage having a corresponding function set.
A method comprising:
- in response to a user request to establish an interactive web shop session, executing a process script to control a progression of stages in a web shopping session, the process script defining a complete set of operational stages available in the web shopping session and a set of functions available at each corresponding stage;
- consulting, at stages of the progression, by the process script, a rights matrix, including an organizational mapping comprising definitions of permitted operational stages and corresponding functions at each stage per a user's role in an organization, identifying permitted successive stages and available functions corresponding to each stage to a reduced subset of functions permitted in each stage, wherein the process script includes a root stage with a corresponding function set and a plurality of subsequent stages, each subsequent stage having a corresponding function set;
- and
- displaying to the user only the permitted functions and those navigation keys that are associated with permitted successive stages.
Dependencies are inferred from the claim text.