Method for resolving permission for role activation operators

A method for resolving permissions executed by a computer that includes one or more processors, said method comprising the steps of:

• a) retrieving a plurality of activated roles within a role context that match roles assigned to a user, wherein one or more permissions in the role context inherit from one or more permissions in a parent role context in a role context permission inheritance hierarchy;
• b) determining an aggregate permission for each of the plurality of activated roles, wherein a role activation operator determines how an activated role is evaluated;
• c) processing the aggregate permissions for the plurality of activated roles;
• and
• d) resolving a final permission for the user;
• wherein a grant of permission takes precedence over a denial of permission unless a user holds a role within a role context that contains a status of override deny for a permission class.

A method for resolving permissions executed by a computer that includes one or more processors, said method comprising the steps of:

• a) retrieving a plurality of activated roles within a role context that match roles assigned to a user, wherein one or more permissions in the role context inherit from one or more permissions in a parent role context in a role context permission inheritance hierarchy;
• b) determining an aggregate permission for each of the plurality of activated roles, wherein a role activation operator determines how an activated role is evaluated;
• c) processing the aggregate permissions for the plurality of activated roles;
• and
• d) resolving a final permission for the user;
• wherein, in step a), if a user does not have at least one role matching one of the activated roles, then access to the role context is implicitly denied.

A method for resolving permissions executed by a computer that includes one or more processors, said method comprising the steps of:

• a) retrieving a plurality of activated roles within a role context that match roles assigned to a user, wherein one or more permissions in the role context inherit from one or more permissions in a parent role context in a role context permission inheritance hierarchy;
• b) determining an aggregate permission for each of the plurality of activated roles, wherein a role activation operator determines how an activated role is evaluated;
• c) processing the aggregate permissions for the plurality of activated roles;
• and
• d) resolving a final permission for the user;
• wherein step b) requires traversing from child role context to parent role context until a definitive permission is determined or until the tope level root context has been reached;
• and
• wherein a definitive permission is determined when override deny is found.

A method for resolving permissions executed by a computer that includes one or more processors, said method comprising the steps of:

• a) retrieving a plurality of activated roles within a role context that match roles assigned to a user, wherein one or more permissions in the role context inherit from one or more permissions in a parent role context in a role context permission inheritance hierarchy;
• b) determining an aggregate permission for each of the plurality of activated roles, wherein a role activation operator determines how an activated role is evaluated;
• c) processing the aggregate permissions for the plurality of activated roles;
• and
• d) resolving a final permission for the user;
• wherein step b) requires traversing from child role context to parent role context until a definitive permission is determined or until the tope level root context has been reached;
• and
• wherein if an override deny is found along the traversal, then the traversal ends and the role's aggregate permission for the role context is denied.

A method for resolving permissions executed by a computer that includes one or more processors, said method comprising the steps of:

• a) retrieving a plurality of activated roles within a role context that match roles assigned to a user, wherein one or more permissions in the role context inherit from one or more permissions in a parent role context in a role context permission inheritance hierarchy;
• b) determining an aggregate permission for each of the plurality of activated roles, wherein a role activation operator determines how an activated role is evaluated;
• c) processing the aggregate permissions for the plurality of activated roles;
• and
• d) resolving a final permission for the user;
• wherein step b) requires traversing from child role context to parent role context until a definitive permission is determined or until the tope level root context has been reached;
• and
• wherein if an override deny is not encountered, then the role's aggregate permission is a locally specified permission.

A method for resolving permissions executed by a computer that includes one or more processors, said method comprising the steps of:

• a) retrieving a plurality of activated roles within a role context that match roles assigned to a user, wherein one or more permissions in the role context inherit from one or more permissions in a parent role context in a role context permission inheritance hierarchy;
• b) determining an aggregate permission for each of the plurality of activated roles, wherein a role activation operator determines how an activated role is evaluated;
• c) processing the aggregate permissions for the plurality of activated roles;
• and
• d) resolving a final permission for the user;
• wherein step b) requires traversing from child role context to parent role context until a definitive permission is determined or until the tope level root context has been reached;
• and
• wherein if a specified permission is not encountered and a top level root context has been reached, a role's aggregate permission is implicitly denied.