Loading patent…
AssigneeInternational Business Machines Corporation
InventorsPatricia Diana Griffin, Gary Cole, Gregory Alan Wilson
Estimating the term…
A method, system, apparatus, and computer program product are presented for managing access to resources with a role-based access control model that includes dynamic update functionality using role filters and capability filters. Rather than directly connecting individual users to a role, a role filter is defined for a role. The role filter is evaluated to determine which users should be matched to a given role, and matching users are then automatically associated with the given role. In addition to its role filter, each named role contains a set of capabilities. Each capability contains a set of access conditions and a capability filter. Each access condition has a set of rights. Rather than directly connecting individual resources to a capability, the administrator can define a capability filter for each capability. As target instances are added, deleted, or changed, capability filters are re-evaluated to maintain the appropriate set of relationships.
A method for controlling access rights of a requesting principal to a protected resource in a computer system, wherein a principal is associated with at least one role, the method comprising:
An apparatus for controlling access rights of a requesting principal to a protected resource in a computer system, wherein a principal is associated with at least one role, the apparatus comprising:
A computer program product in a computer readable medium for use in a data processing system for controlling access rights of a requesting principal to a protected resource, wherein a principal is associated with at least one role, the computer program product comprising:
Dependencies are inferred from the claim text.