Patent ID: 8312508

Claim:
An information processing apparatus for processing an operation permission, which is referred to in a permission determination of an operation with respect to an application subject, comprising: an operation permission managing part configured to manage the operation permission; and an operation permission generating part configured to generate one operation permission in response to a permission issuance request for requesting an issuing the operation permission in which the permission issuance request indicates one or more user categories of a subject user, one or more categories of a resource which is a subject document, and one or more types of a subject operation to be the application subject, and to register the one operation permission to the operation permission managing part, said operation permission generating part includes: a dividing part configured to divide the one operation permission generated in response to the permission issuance request into a plurality of ranges, which are combinations from the one or more categories of the subject user, the one or more categories of the resource which is the subject document, and the one or more types of the subject operation, each being a minimum unit; and a priority order setting part configured to set a priority order to conduct an access control among existing operation permissions managed by the operation permission managing part and the operation permission requested by the permission issuance request, for each of the plurality of ranges each being the minimum unit into which the application subject is divided.