# US 8,572,682 B2 · System and method of accessing data objects in a dynamic language environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,572,682 B2 - Document ID: US8572682B2 - Status: Granted - Kind: B2 - Application number: 12/643,600 - Filed: 2009-12-21 - Published: 2011-06-23 - Granted: 2013-10-29 - Earliest claimed: 2009-12-21 - Assignees: Sap SE - Applicants: Yuecel Karabulut - Inventors: Yuecel Karabulut - Web page: https://patentgrep.com/patent/US8572682B2 ## CPC - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An embodiment includes a computer-implemented method of managing access control policies on a computer system having two high-level programming language environments. The method includes managing, by the computer system, a structured language environment. The method further includes managing, by the computer system, a dynamic language environment within the structured language environment. The method further includes receiving a policy. The policy is written in a dynamic language. The method further includes storing the policy in the dynamic language environment. The method further includes converting the policy from the dynamic language environment to the structured language environment. The method further includes generating a runtime in the structured language environment that includes the policy. ## Claims ### Claim 1 A computer-implemented method of managing access control policies on a computer system having two high-level programming language environments, comprising: managing, by the computer system, a structured language environment; managing, by the computer system, a dynamic language environment within the structured language environment; receiving a policy, wherein the policy is written in a dynamic language; storing the policy in the dynamic language environment; converting the policy from the dynamic language environment to the structured language environment; and generating a runtime in the structured language environment that includes the policy. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, further comprising: permitting access, according to the policy in the runtime having been generated, to a data object managed by the structured language environment, by a user operating in the dynamic language environment. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, further comprising: denying access, according to the policy in the runtime having been generated, to a data object managed by the structured language environment, by a user operating in the dynamic language environment. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, further comprising: storing the policy as a data structure managed in the structured language environment. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, wherein the policy sets access permissions for a user. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein converting the policy from the dynamic language environment to the structured language environment comprises: generating an extensible markup language document that corresponds to the policy; sending the extensible markup language document from the dynamic language environment to the structured language environment; queuing the extensible markup language document; and processing the extensible markup language document at a defined interval. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, further comprising: receiving user-role assignment information, wherein the user-role assignment information is written in the dynamic language; converting the user-role assignment information from the dynamic language environment to the structured language environment; and storing the user-role assignment information as a data object in the structured language environment. ### Claim 8 A computer system that manages access control policies using two high-level programming language environments, comprising: a structured language environment module that is configured to manage a structured language environment; a dynamic language environment module that is configured to manage a dynamic language environment within the structured language environment; a portal module that is configured to receive a policy, wherein the policy is written in a dynamic language; a storage module that is configured to store the policy in the dynamic language environment; a conversion module that is configured to convert the policy from the dynamic language environment to the structured language environment; and a runtime module that is configured to generate a runtime in the structured language environment that includes the policy. ### Claim 9 (depends on 8) The computer system of claim 8, further comprising: an access control module that is configured to permit access, according to the policy in the runtime having been generated, to a data object managed by the structured language environment, by a user operating in the dynamic language environment. ### Claim 10 (depends on 8) The computer system of claim 8, further comprising: an access control module that is configured to deny access, according to the policy in the runtime having been generated, to a data object managed by the structured language environment, by a user operating in the dynamic language environment. ### Claim 11 (depends on 8) The computer system of claim 8, wherein the storage module is further configured to store the policy as a data structure managed in the structured language environment. ### Claim 12 (depends on 8) The computer system of claim 8, wherein the policy sets access permissions for a user. ### Claim 13 (depends on 8) The computer system of claim 8, wherein the conversion module is further configured: to generate an extensible markup language document that corresponds to the policy; to send the extensible markup language document from the dynamic language environment to the structured language environment; to queue the extensible markup language document; and to process the extensible markup language document at a defined interval. ### Claim 14 (depends on 8) The computer system of claim 8, further comprising: a receiver module that is configured to receive user-role assignment information, wherein the user-role assignment information is written in the dynamic language, wherein the conversion module is further configured to convert the user-role assignment information from the dynamic language environment to the structured language environment, and wherein the storage module is further configured to store the user-role assignment information as a data object in the structured language environment. ### Claim 15 A computer program, embodied on a tangible non-transitory recording medium, that is configured to control a computer system to manage access control policies using two high-level programming language environments, comprising: a structured language environment module that is configured to control the computer system to manage a structured language environment; a dynamic language environment module that is configured to control the computer system to manage a dynamic language environment within the structured language environment; a portal module that is configured to control the computer system to receive a policy, wherein the policy is written in a dynamic language; a storage module that is configured to control the computer system to store the policy in the dynamic language environment; a conversion module that is configured to control the computer system to convert the policy from the dynamic language environment to the structured language environment; and a runtime module that is configured to control the computer system to generate a runtime in the structured language environment that includes the policy. ### Claim 16 (depends on 15) The computer program of claim 15, further comprising: an access control module that is configured to control the computer system to permit access, according to the policy in the runtime having been generated, to a data object managed by the structured language environment, by a user operating in the dynamic language environment. ### Claim 17 (depends on 15) The computer program of claim 15, further comprising: an access control module that is configured to control the computer system to deny access, according to the policy in the runtime having been generated, to a data object managed by the structured language environment, by a user operating in the dynamic language environment. ### Claim 18 (depends on 15) The computer program of claim 15, wherein the storage module is further configured to control the computer system to store the policy as a data structure managed in the structured language environment. ### Claim 19 (depends on 15) The computer program of claim 15, wherein the conversion module is further configured to control the computer system: to generate an extensible markup language document that corresponds to the policy; to send the extensible markup language document from the dynamic language environment to the structured language environment; to queue the extensible markup language document; and to process the extensible markup language document at a defined interval. ### Claim 20 (depends on 15) The computer program of claim 15, further comprising: a receiver module that is configured to control the computer system to receive user-role assignment information, wherein the user-role assignment information is written in the dynamic language, wherein the conversion module is further configured to control the computer system to convert the user-role assignment information from the dynamic language environment to the structured language environment, and wherein the storage module is further configured to control the computer system to store the user-role assignment information as a data object in the structured language environment.