System and method for ensuring security with multiple authentication schemes

A system for authenticating a user for access to controlled entities maintained at a server, said server including a content manager, a database manager, an user application, and user exits, comprising:

• a maintenance procedure for maintaining said controlled entities within said content manager, said controlled entities including an access control list table bound to user data items, said access control list table including in rows for each user and user group user kind, user identifier, access control list code, and privilege set code, each privilege set code corresponding to a privilege set;
• said maintenance procedure, responsive to modification of a given privilege set, for incrementally refreshing said access control list table to refresh only those rows having a privilege set code corresponding to said given privilege set;
• a connect procedure for connecting said user to said database manager;
• and
• a logon procedure for logging on said user to said content manager selectively responsive to
• said user connecting to said database manager;
• said user being authenticated by a third party;
• and
• said user being authenticated by said content manager.

A program storage device readable by a machine, tangibly embodying a program of instructions executable by a machine to perform a method for authorizing access by a user for access to controlled entities maintained at a server, said server including a content manager, a database manager, an user application, and user exits, comprising:

• maintaining said controlled entities within said content manager, said controlled entities including an access control list table bound to user data items, said access control list table including in rows for each user and user croup user kind, user identifier, access control list code, and privilege set code, each privilege set code corresponding to a privilege set;
• said maintaining, responsive to modification of a given privilege set, including incrementally refreshing said access control list table to refresh only those rows having a privilege set code corresponding to said given privilege set;
• connecting said user to said database manager;
• and
• logging on said user to said content manager running on top of said database manager to enable access by said user to said user data items selectively responsive to
• said user connecting to said database manager;
• said user being authenticated by a third party;
• and
• said user being authenticated with reference to said access control list table by said content manager.