Method and apparatus for facilitating fine-grain permission management
OwnerRaymond Nginventor
Life of this patent
Estimating the term…
Abstract
One embodiment of the present invention provides a system that facilitates fine-grain permission management and delegated policy administration. During operation, the system creates a permission associated with a resource. The system also creates an admin permission associated with the permission. Next, the system associates the admin permission with a user. Finally, the system performs an administrative action on the permission, wherein the administrative action is enabled by the admin permission.
Claims25
A method for facilitating fine-grain permission management, the method comprising:
- creating a permission associated with a resource;
- creating an admin permission associated with the permission;
- associating the admin permission with a user;
- and
- performing an administrative action on the permission, wherein the administrative action is enabled by the admin permission.
A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for facilitating fine-grain permission management, the method comprising:
- creating a permission associated with a resource;
- creating an admin permission associated with the permission;
- associating the admin permission with a user;
- and
- performing an administrative action on the permission, wherein the administrative action is enabled by the admin permission.
An apparatus that facilitates fine-grain permission management, comprising:
- a creation mechanism configured to create a permission associated with a resource;
- wherein the creation mechanism further is configured to create an admin permission associated with the permission;
- an association mechanism configured to associate the admin permission with a user;
- and
- an execution mechanism configured to perform an administrative action on the permission, wherein the administrative action is enabled by the admin permission.
Dependencies are inferred from the claim text.