Dynamic management of role-based access control systems
AssigneeRed Hat, Inc.
InventorsLeigh Griffin, Cathal O'Connor
Life of this patent
Estimating the term…
Abstract
A method includes determining that access permissions associated with a service of a computing system have been revoked, identifying one or more access policy sets including access policy rules associated with the service, removing the access policy rules associated with the service from the one or more access policy sets, and marking one or more decision execution paths of a policy decision point associated with the service with a feature flag.
Claims20
A method comprising:
- determining that access permissions associated with a service of a computing system have been revoked;
- identifying one or more access policy sets comprising access policy rules associated with the service;
- removing, by a processing device, the access policy rules associated with the service from the one or more access policy sets;
- and
- marking, by the processing device, one or more decision execution paths of a policy decision point associated with the service with a feature flag.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- determine that access permissions associated with a service of a computing system have been revoked;
- identify one or more access policy sets comprising access policy rules associated with the service;
- remove the access policy rules associated with the service from the one or more access policy sets;
- and
- marking one or more decision execution paths of a policy decision point associated with the service with a feature flag.
A non-transitory computer readable storage medium including instructions stored therein, that when executed by a processing device, cause the processing device to:
- determine that access permissions associated with a service of a computing system have been revoked;
- identify one or more access policy sets comprising access policy rules associated with the service;
- remove, by the processing device, the access policy rules associated with the service from the one or more access policy sets;
- and
- mark, by the processing device, one or more decision execution paths of a policy decision point associated with the service with a feature flag.
Dependencies are inferred from the claim text.