Visually representing and managing access control of resources

A computer program product, comprising:

• a computer-readable storage device;
• and
• computer-readable program code stored in the storage device, the computer-readable program code containing instructions that are executed by a central processing unit (CPU) of a computer system to implement a method of controlling access to an information technology (IT) resource, the method comprising:
• the computer system initiating a display including a visual representation of a first resource and a visual representation of a first entity;
• the computer system detecting a movement in the display of the visual representation of the first entity from outside a boundary of the visual representation of the first resource to a position close to the boundary of the visual representation of the first resource;
• responsive to the step of detecting the movement to the position close to the boundary, the computer system determining a first attribute assigned to the visual representation of the first entity does not satisfy an access control requirement assigned to the visual representation of the first resource;
• based on the first attribute assigned to the visual representation of the first entity not satisfying the access control requirement assigned to the visual representation of the first resource, the computer system determining the first entity is not permitted to access the first resource;
• based on the first entity not being permitted to access the first resource, the computer system presenting a visual cue that indicates the visual representation of the first entity is prevented from moving in the display across the boundary and being placed in the display within the boundary of the visual representation of the first resource;
• the computer system detecting a second movement in the display of a visual representation of a second entity from outside a boundary of a visual representation of a second resource to a position close to the boundary of the visual representation of the second resource, the display including the visual representations of the second entity and the second resource;
• responsive to the step of detecting the second movement, the computer system determining a second attribute assigned to the visual representation of the second entity satisfies an access control requirement assigned to the visual representation of the second resource;
• responsive to the step of determining the second attribute satisfies the access control requirement, the computer system determining visual representations of multiple entities are currently within the boundary of the visual representation of the second resource which indicates the multiple entries currently have access to the second resource, and determining a total number of the visual representations of the multiple entities is (1) equal to a predetermined maximum number of entities permitted to have access to the second resource at one time or (2) less than the predetermined maximum number of entities;
• if the total number of the visual representations of the multiple entities is equal to the maximum number of entities, the computer system determining the second entity is not permitted to access the second resource, and in response, the computer system presenting a visual cue that indicates the visual representation of the second entity is prevented from moving in the display across the boundary of the visual representation of the second resource and being placed in the display within the boundary of the visual representation of the second resource;
• and
• if the total number of the visual representations of the multiple entities is less than the maximum number of entities, the computer system determining the second entity is permitted to access the second resource, and in response, the computer system moving in the display the visual representation of the second entity across the boundary of the visual representation of the second resource and placing in the display the visual representation of the second entity within the boundary of the visual representation of the second resource.

A computer system comprising:

• a central processing unit (CPU);
• a memory coupled to the CPU of the computer system;
• and
• a computer-readable storage device coupled to the CPU of the computer system, the storage device containing instructions that, when executed by the CPU of the computer system via the memory, implement a method of controlling access to an information technology (IT) resource, the method comprising the steps of:
• the computer system initiating a display including a visual representation of a first resource and a visual representation of a first entity;
• the computer system detecting a movement in the display of the visual representation of the first entity from outside a boundary of the visual representation of the first resource to a position close to the boundary of the visual representation of the first resource;
• responsive to the step of detecting the movement to the position close to the boundary, the computer system determining a first attribute assigned to the visual representation of the first entity does not satisfy an access control requirement assigned to the visual representation of the first resource;
• based on the first attribute assigned to the visual representation of the first entity not satisfying the access control requirement assigned to the visual representation of the first resource, the computer system determining the first entity is not permitted to access the first resource;
• based on the first entity not being permitted to access the first resource, the computer system presenting a visual cue that indicates the visual representation of the first entity is prevented from moving in the display across the boundary and being placed in the display within the boundary of the visual representation of the first resource;
• the computer system detecting a second movement in the display of a visual representation of a second entity from outside a boundary of a visual representation of a second resource to a position close to the boundary of the visual representation of the second resource, the display including the visual representations of the second entity and the second resource;
• responsive to the step of detecting the second movement, the computer system determining a second attribute assigned to the visual representation of the second entity satisfies an access control requirement assigned to the visual representation of the second resource;
• responsive to the step of determining the second attribute satisfies the access control requirement, the computer system determining visual representations of multiple entities are currently within the boundary of the visual representation of the second resource which indicates the multiple entries currently have access to the second resource, and determining a total number of the visual representations of the multiple entities is (1) equal to a predetermined maximum number of entities permitted to have access to the second resource at one time or (2) less than the predetermined maximum number of entities;
• if the total number of the visual representations of the multiple entities is equal to the maximum number of entities, the computer system determining the second entity is not permitted to access the second resource, and in response, the computer system presenting a visual cue that indicates the visual representation of the second entity is prevented from moving in the display across the boundary of the visual representation of the second resource and being placed in the display within the boundary of the visual representation of the second resource;
• and
• if the total number of the visual representations of the multiple entities is less than the maximum number of entities, the computer system determining the second entity is permitted to access the second resource, and in response, the computer system moving in the display the visual representation of the second entity across the boundary of the visual representation of the second resource and placing in the display the visual representation of the second entity within the boundary of the visual representation of the second resource.