Back to results
US 2008/0178285 A1Published application
Provisional administrator privileges
AssigneeMicrosoft Corporation
InventorsBrian Perlman, Richard S. Eizenhoefer, Wen-Pin Scott Hsu
Life of this patent
Estimating the term…
Abstract
A system grants “provisional privileges” to a user request for the purpose of provisionally performing a requested transaction. If the provisionally-performed transaction does not put the system in a degraded state, the transaction is authorized despite the user request having inadequate privileges originally.
Claims20
A computer-readable medium having computer-executable instructions for performing a transaction on a system, comprising:
- receiving from a user process a request to perform the transaction, the user process having privileges, the privileges being insufficient to authorize the user process to perform the transaction;
- capturing a baseline snapshot that represents a current state of the system;
- provisionally authorizing the user process to perform the transaction;
- capturing an updated snapshot that represents an updated state of the system, the updated state of the system reflecting the performance of the provisionally authorized transaction;
- comparing the updated snapshot to the baseline snapshot to determine if the provisionally authorized transaction put the system in a degraded state;
- and
- authorizing the transaction if the provisionally authorized transaction did not put the system in a degraded state.
4 more elements
A computer-readable medium having computer-executable instructions for performing a transaction on a system, comprising:
- receiving from a user process a request to perform the transaction, the user process having privileges, the privileges being insufficient to authorize the user process to perform the transaction;
- evaluating the request against a set of pre-transaction filters to determine if the request qualifies for provisional privileges;
- provisionally authorizing the user process to perform the transaction if the pre-transaction filters are satisfied;
- evaluating the provisionally authorized transaction against a set of intra-transaction filters to determine if any operations performed in conjunction with the provisionally authorized transaction constitute an invalidating operation;
- evaluating a state of the system against a set of post-transaction filters after the provisionally authorized transaction is completed to determine if the state is degraded;
- and
- authorizing the transaction if the state of the system is not degraded.
4 more elements
A computer-implemented method for performing a transaction on a system, comprising:
- receiving from a user process a request to perform the transaction, the user process having privileges, the privileges being insufficient to authorize the user process to perform the transaction;
- evaluating the request against a set of pre-transaction filters to determine if the request qualifies for provisional privileges;
- provisionally authorizing the user process to perform the transaction if the pre-transaction filters are satisfied;
- capturing a baseline snapshot that represents a current state of the system;
- evaluating the provisionally authorized transaction against a set of intra-transaction filters to determine if any operations performed in conjunction with the provisionally authorized transaction constitute an invalidating operation;
- capturing an updated snapshot that represents an updated state of the system, the updated state of the system reflecting the performance of the provisionally authorized transaction;
- evaluating a state of the system against a set of post-transaction filters after the provisionally authorized transaction is completed to determine if the state is degraded;
- comparing the updated snapshot to the baseline snapshot to determine if the provisionally authorized transaction put the system in a degraded state;
- and
- authorizing the transaction if the state of the system is not degraded.
7 more elements
Dependencies are inferred from the claim text.