Dynamic evaluation of access rights

An apparatus for evaluating an access right, the apparatus comprising:

• a memory store for storing an executable module;
• a processor, coupled to the memory store and when executing the executable module, causing the processor to perform operations of:
• receiving a set of access rules originally embedded in a secured file;
• obtaining respective rule items from the access rules;
• obtaining respective parameters corresponding to the rule items;
• comparing the parameters and the rule items, respectively;
• granting the access right if the comparing of the parameters and the rule items is considered successful;
• and
• denying the access right if the comparing of the parameters and the rule items is considered unsuccessful.

A method for evaluating an access right, the method comprising:

• obtaining a system rule set and an access rule set, wherein the access rule set is associated with the secured file;
• evaluating, respectively, each of items in the system rule set and the access rule set;
• granting the access right if the evaluating of each of the items in the system rule set and the access rule set produces a logic pass;
• and
• denying the access right if the evaluating of one of the items in the system rule set or the access rule set produces a logic failure.

A method for evaluating an access right, the method comprising:

• obtaining a first system rule set and a second system rule set;
• determining if one of the first and second system rule sets has a property of overriding other system rule sets;
• if one of the first and second system rule sets has a property of overriding other system rule sets,
• obtaining rule items from the one of the first and second system rule;
• obtaining respective parameters corresponding to the rule items;
• comparing the parameters and the rule items, respectively;
• granting the access right if the comparing of the parameters and the rule items is considered successful;
• and
• denying the access right if the comparing of the parameters and the rule items is considered unsuccessful;
• if one of the first and second system rule sets does not have a property of overriding other system rule sets,
• obtaining respective rule items from the first and second system rule sets;
• obtaining respective parameters corresponding to the rule items of the first and second system rule sets;
• comparing the parameters and the rule items of the first and second system rule sets, respectively;
• granting the access right if the comparing of the parameters and the rule items is considered successful;
• and
• denying the access right if the comparing of the parameters and the rule items is considered unsuccessful.