Patent US5276901A successfully refreshed from Google Patents.
US5276901A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System for controlling group access to objects using group access control folder and group identification as individual user
Assignee: International Business Machines Corp
•
Filing: 1991-12-16
•
Granted: 1994-01-04
•
Expires: 2011-12-16
Abstract
Abstract A method and system for controlling access by groups of users to multiple objects stored within a data processing system implemented library wherein each object has an access list associated therewith explicitly listing individual users permitted access to that object. A group identification is established which encompasses all users within the data processing system, a selected subset of users with the data processing system, or a single selected user and his or her designated affinity users or proxies. The group identification is then listed within an associated access list for a particular object and upon an attempted access of the particular object by a user not listed explicitly within the associated access list, a determination is made as to whether or not that user is listed within a group identification which is permitted access. In one embodiment of the present invention selected objects and users each have associated therewith a clearance level and access to a selected object by a particular user listed within a group identification may be denied if that particular user's clearance level does not meet or exceed the clearance level of the selected object.
Inventors
- 👤 William E. Howell
- 👤 Hari N. Reddy
- 👤 Diana S. Wang
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 13:48
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 8
Claim 1
Independent Claim
292 words
A method in a data processing system of controlling access by groups of users to a plurality of objects stored within a data processing system library service wherein each of said plurality of objects within said data processing system library service includes associated therewith an explicit list of individual users permitted access thereto and wherein each individual user has associated therewith an access control folder which includes a listing of privileges for selected ones of said plurality of objects which said individual user is permitted to access, said method comprising the steps of: establishing a group identification for a selected subset of users within said data processing system and associating a group access control folder with said group identification, said group access control folder including a listing of privileges for selected ones of said plurality of objects which each individual user within said selected subset of users is permitted to access; inserting a reference to said group access control folder within said access control folder associated with each individual user within said selected subset of users; listing said group identification as an individual user within said explicit list of individual users permitted access to a particular object stored within said data processing system library service; and permitting access to any user within said selected subset of users via said group identification and said associated group access control folder by first determining if a particular user is listed within said explicit list of individual users permitted access to said particular object and, if not, determining if said access control folder associated with said particular user includes a reference to a group access control folder associated with said group identification listed within said explicit list of individual users permitted access to said particular object.
Claim 2
Independent Claim
292 words
A method in a data processing system of controlling access by groups of users to a plurality of objects stored within a data processing system library service wherein each of said plurality of objects within said data processing system library service includes associated therewith an explicit list of individual users permitted access thereto and wherein each individual user has associated therewith an access control folder which includes a listing of privileges for selected ones of said plurality of objects which said individual user is permitted to access, said method comprising the steps of: establishing a group identification for a selected subset of users within said data processing system and associating a group access control folder with said group identification, said group access control folder including a listing of privileges for selected ones of said plurality of objects which each individual user within said selected subset of users is permitted to access; inserting a reference to said group access control folder within said access control folder associated with each individual user within said selected subset of users; listing said group identification as an individual user within said explicit list of individual users permitted access to a particular object stored within said data processing system library service; and permitting access to any user within said selected subset of users via said group identification and said associated group access control folder by first determining if a particular user is listed within said explicit list of individual users permitted access to said particular object and, if not, determining if said access control folder associated with said particular user includes a reference to a group access control folder associated with said group identification listed within said explicit list of individual users permitted access to said particular object.
Claim 3
Dependent Claim
71 words
The method in a data processing system of controlling access by groups of users to a plurality of objects stored within a data processing system library service according to claim 1, wherein said step of establishing a group identification for a selected subset of users within said data processing system comprises listing said selected subset of users in a group listing in association with said group identification within said library service.
Claim 4
Dependent Claim
48 words
The method in a data processing system of controlling access by groups of users to a plurality of objects stored within a data processing system library service according to claim 1, wherein said group identification comprises a single user and any affinity users designated by said single user.
Claim 5
Dependent Claim
304 words
A data processing system for controlling access by groups of users to a plurality of objects stored within a library service within said data processing system wherein each of said plurality of objects within said library service includes associated therewith an explicit list of individual users permitted access thereto and wherein each individual user has associated therewith an access control folder which includes a listing of a privileges for selected ones of said plurality of objects which said individual user is permitted to access, said data processing system comprising: means for establishing a group identification for a selected subset of users within said data processing system and associating a group access control folder with said group identification, said group access control folder including a listing of privileges for selected ones of said plurality of objects which each individual user within said selected subset of users is permitted to access; means for inserting a reference to said group access control folder within said access control folder associated with each individual user within said selected subset of users; means for listing said group identification as an individual user within said explicit list of individual users permitted access to a particular object stored within said data processing system library service; and means for permitting access to any user within said selected subset of users via said group identification and said associated group access control folder, said permitting access means comprises means for first determining if a particular user is listed within said explicit list of individual users permitted access to said particular object and, if not, means for determining if said access control folder associated with said particular user includes a reference to a group access control folder associated with said group identification listed within said explicit list of individual users permitted access to said particular object.
Claim 6
Dependent Claim
304 words
A data processing system for controlling access by groups of users to a plurality of objects stored within a library service within said data processing system wherein each of said plurality of objects within said library service includes associated therewith an explicit list of individual users permitted access thereto and wherein each individual user has associated therewith an access control folder which includes a listing of a privileges for selected ones of said plurality of objects which said individual user is permitted to access, said data processing system comprising: means for establishing a group identification for a selected subset of users within said data processing system and associating a group access control folder with said group identification, said group access control folder including a listing of privileges for selected ones of said plurality of objects which each individual user within said selected subset of users is permitted to access; means for inserting a reference to said group access control folder within said access control folder associated with each individual user within said selected subset of users; means for listing said group identification as an individual user within said explicit list of individual users permitted access to a particular object stored within said data processing system library service; and means for permitting access to any user within said selected subset of users via said group identification and said associated group access control folder, said permitting access means comprises means for first determining if a particular user is listed within said explicit list of individual users permitted access to said particular object and, if not, means for determining if said access control folder associated with said particular user includes a reference to a group access control folder associated with said group identification listed within said explicit list of individual users permitted access to said particular object.
Claim 7
Dependent Claim
72 words
The data processing system for controlling access by groups of users to a plurality of objects stored within a library service within said data processing system according to claim 4, wherein said means for establishing a group identification for a selected subset of users within said data processing system comprises means for listing said selected subset of users in a group listing in association with said group identification within said library service.
Claim 8
Dependent Claim
47 words
The data processing system for controlling access by groups of users to a plurality of objects stored within a library service within said data processing system according to claim 4, wherein said group identification comprises a single user and any affinity users designated by said single user.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-01-03 | 1997-07-05 | 1998-01-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-01-03 | 2001-07-05 | 2002-01-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-01-03 | 2005-07-05 | 2006-01-04 | $7700.00 | Window Closed / Lapsed |