# US 10,122,717 B1 · Hierarchical case model access roles and permissions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,122,717 B1
- Document ID: US10122717B1
- Status: Granted
- Kind: B1
- Application number: 14/145,048
- Filed: 2013-12-31
- Granted: 2018-11-06
- Earliest claimed: 2013-12-31
- Assignees: Open Text Corporation
- Applicants: Open Text Corporation
- Inventors: Satyapal P. Reddy; Muthukumarappa Jayakumar; Arnaud Viltard; Ravikumar Meenakshisundaram
- Web page: https://patentgrep.com/patent/US10122717B1

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- G06F 21/604: {Tools and structures for managing or administering access control systems}
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Hierarchical case model access roles and permissions are described. A system creates, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node. The system assigns another set of access permissions to the reference. . The system determines access to the child node based on the set of access permissions in response to a request associated with the case role to access the child node.

## Claims

### Claim 1

A system for hierarchical case model access roles and permissions, the system comprising:
a hardware processor;
a processor-based application, which when executed on a computer, will cause the processor to;
at design time, create, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node, the reference inheriting a first set of access permissions associated with the case role from the parent node, the first set of access permissions including at least one access permission associated with content management;
at design time, assign, for the child node, at least one additional access permission to create a second set of access permissions assigned to the reference to the case role associated with the parent node, the second set of access permissions comprising the inherited first set of access permissions and the at least one additional access permission;
create an instance of the case model from the case model; and
at run time, determine access to an instance of the child node based on the second set of access permissions in response to a request associated with the case role to access the instance of the child node, wherein the instance of the child node is in the instance of the case model.

### Claim 2 (depends on 1)

The system of claim 1, wherein the second set of access permissions includes a permission assigned from a group comprising a create permission, a read permission, an update permission, a delete permission, and a no access permission.

### Claim 3 (depends on 1)

The system of claim 1, wherein assigning the second set of access permissions to the reference is based on inheriting a third set of access permissions associated with the case role.

### Claim 4 (depends on 3)

The system of claim 3, wherein assigning the second set of access permissions to the reference comprises assigning an additional access permission to the reference that is absent from the third set of access permissions associated with the case role.

### Claim 5 (depends on 1)

The system of claim 1, wherein the processor-based application will, when executed, further cause the processor to:
create an additional case role for the child node;
assign a fourth set of access permissions to the additional case role; and
determine access to the child node based on the fourth set of access permissions in response to a request associated with the additional case role to access the child node.

### Claim 6

A computer-implemented method for hierarchical case model access roles and permissions, the method comprising;
at design time, creating, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node, the reference inheriting a first set of access permissions associated with the case role from the parent node, the first set of access permissions including at least one access permission associated with content management;
at design time, assigning, for the child node, at least one additional access permission to create a second set of access permissions assigned to the reference to the case role associated with the parent node, the second set of access permissions comprising the inherited first set of access permissions and the at least one additional access permission;
creating an instance of the case model from the case model; and
at run time, determining access to an instance of the child node based on the second set of access permissions in response to a request associated with the case role to access the instance of the child node, wherein the instance of the child node is in the instance of the case model.

### Claim 7 (depends on 6)

The method of claim 6, wherein the second set of access permissions includes a permission assigned from a group comprising a create permission, a read permission, an update permission, a delete permission, and a no access permission.

### Claim 8 (depends on 6)

The method of claim 6, wherein assigning the second set of access permissions to the reference is based on inheriting a third set of access permissions associated with the case role.

### Claim 9 (depends on 8)

The method of claim 8, wherein assigning the second set of access permissions to the reference comprises assigning an additional access permission to the reference that is absent from the third set of access permissions associated with the case role.

### Claim 10 (depends on 6)

The method of claim 6, wherein the method further comprises:
creating an additional case role for the child node;
assigning a fourth set of access permissions to the additional case role; and determining access to the child node based on the fourth set of access permissions in response to a request associated with the additional case role to access the child node.

### Claim 11

A computer program product, comprising a non-transitory computer-readable medium haying a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to cause the one or more processors to:
at design time, create, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node, the reference inheriting a first set of access permissions associated with the case role from the parent node, the first set of access permissions including at least one access permission associated with content management;
at design time, assign, for the child node, at least one additional access permission to create a second set of access permissions assigned to the reference to the case role associated with the parent node, the second set of access permissions comprising the inherited first set of access permissions and the at least one additional access permission;
create an instance of the case model from the case model; and
at run time, determine access to an instance of the child node based on the second set of access permissions in response to a request associated with the case role to access the instance of the child node, wherein the instance of the child node is in the instance of the case model.

### Claim 12 (depends on 11)

The computer program product of claim 11, wherein the second set of access permissions includes a permission assigned from a group comprising a create permission, a read permission, an update permission, a delete permission, and a no access permission.

### Claim 13 (depends on 11)

The computer program product of claim 11, wherein assigning the second set of access permissions to the reference is based on inheriting a third set of access permissions associated with the case role.

### Claim 14 (depends on 13)

The computer program product of claim 13, wherein assigning the second set of access permissions to the reference comprises assigning an additional access permission to the reference that is absent from the third set of access permissions associated with the case role.

### Claim 15 (depends on 11)

The computer program product of claim 11, wherein the program code includes further instructions to:
create an additional case role for the child node;
assign a fourth set of access permissions to the additional case role; and
determine access to the child node based on the fourth set of access permissions in response to a request associated with the additional case role to access the child node.