Loading patent…
AssigneeMicrosoft Corporation
InventorsDennis Minium, Bulat Shelepov, Xiongjian Fu
Estimating the term…
A method and apparatus for providing an extensible grouping mechanism for security applications for use in a computer system. Groups may be established and maintained by non-system administrators and used to control actions that are taken with respect to objects, such as files and other resources. The groups and associated security functions may be implemented across a plurality of different software products and optionally integrated into an existing security mechanism maintained by system administrators. Software products used in the system may be arranged to request authorization to perform requested actions with respect to objects access to which is not controlled by a systems administrator. Permission information used to determine the authorization for a user to perform a requested action may be stored for a plurality of software products in a common location.
An apparatus for use in a computer system including a plurality of users and a plurality of software products, each for performing at least one action with respect to an object, the apparatus comprising:
A method for operating a computer system, the computer system including a plurality of users, the method comprising:
A computer readable medium including instructions that constitute a software product for use in a computer system including a plurality of users, a group service having a store of groups, each group including at least one of the plurality of users, and an authorization service that determines permission for at least one user to perform an action with respect to an object based on permission information, the permission information indicating at least one action that may be performed with respect to an object by at least one group or user, the instructions, when executed, causing the computer system to perform a method comprising:
Dependencies are inferred from the claim text.