Merging directory information from a user directory to a common directory

• US 10,169,351 B2
• Filed: 08/19/2015
• Issued: 01/01/2019
• Est. Priority Date: 08/19/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hegfield, Gordon E., Holden, Russell, Jerrard-Dunne, Stanley K., Ranjan, Ravi
• Primary Examiner(s): Thai, Hanh B
• Application Number:
  US14/830,400
• Publication Number:
  US 20170053127A1
• Time in Patent Office: 1,231 Days
• Field of Search: 707781
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 16/214 Database migration support
• CPC Class Codes: G06F 16/24564 Applying rules; Deductive queries
• CPC Class Codes: G06F 16/86 Mapping to a database
• CPC Class Codes: G06F 16/9017 using directory or table look-up use of a directory or look-up table in file systems G06F16/13
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

Merging directory information from a user directory to a common directory includes based on a rule associated with contents of a user directory of a local database, extracting a department indicator from the user directory, mapping the department indicator to a corresponding user record in a common directory of a registry database, and based on the department indicator, marking the user record in the common directory with a department that corresponds to the contents from the user directory with a department for controlling access to that user record in the registry database.

Claims

1. A system for merging directory information from a user directory to a common directory, the system comprising:

a processor; and

computer program code, communicatively coupled to the processor, the computer program code comprising;

an extracting engine to, based on a rule associated with contents of a user directory of a local database, extract a department indicator from the user directory;

a mapping engine to map the department indicator to a corresponding user record in a common directory of a registry database;

a marking engine to, based on the department indicator, mark the user record in the common directory with a department that corresponds to the contents from the user directory with a department for controlling access to that user record in the registry database;

an assigning engine to, based on the department, assign access controls to an administrator for controlling the access to that user record in the registry database; and

a permitting engine to, based on the access controls, permit the administrator to access the user record in the registry database;

wherein the mapping engine maps the department indicator to the corresponding user record in the common directory of the registry database by;

based on a source field name associated with the contents of the user directory of the local database, determining the user directory;

sending a key field value associated with the contents to a rule engine to determine the department;

matching, via the rule, a regular expression pattern with a value associated with the source field name to determine the department indicator; and

based on the department indicator, establishing the department for the marking of the user record in the common directory that corresponds to the contents from the user directory.

2. The system of claim 1, wherein the rule comprises a regular expression pattern to extract the department indicator from the user directory.

3. The system of claim 1, wherein a secondary rule is established when a primary rule fails to determine the department.

4. The system of claim 3, wherein the secondary rule utilizes an alternate user directory to determine the department indicator.

5. The system of claim 3, wherein a default value is used when the primary rule and the secondary rule fails to determine the department.

6. A non-transitory machine-readable storage medium encoded with instructions for merging directory information from a user directory to a common directory, the instructions executable by a processor of a system to cause the system to:

based on a rule associated with contents of a user directory of a local database, extract a department indicator from the user directory;

map the department indicator to a corresponding user record in a common directory of a registry database;

based on the department indicator, mark the user record in the common directory with a department that corresponds to the contents from the user directory with a department for controlling access to that user record in the registry database; and

based on the department, assign access controls to an administrator for controlling the access to that user record in the registry database;

based on a source field name associated with the contents of the user directory of the local database, determine the user directory;

send a key field value associated with the contents to a rule engine to determine the department;

match, via the rule, a regular expression pattern with a value associated with the source field name to determine the department indicator; and

based on the department indicator, establish the department for the marking of the user record in the common directory that corresponds to the contents from the user directory.

7. The machine-readable storage medium of claim 6, further comprising instructions that, when executed, cause the processor to, based on the access controls, permit the administrator to access the user record in the registry database.

8. The machine-readable storage medium of claim 6, wherein the rule comprises a regular expression pattern to extract the department indicator from the user directory.

9. The machine-readable storage medium of claim 6, wherein a secondary rule is established when a primary rule fails to determine the department.

10. The machine-readable storage medium of claim 9, wherein the secondary rule utilizes an alternate user directory to determine the department indicator.

11. The machine-readable storage medium of claim 9, wherein a default value is used when the primary rule and the secondary rule fails to determine the department.

12. A system for merging directory information from a user directory to a common directory, the system comprising:

a processor;

a network interface to provide communication for the processor via a computer network; and

memory comprising computer program code, communicatively coupled to the processor, the processor executing the computer program code to;

access, via the computer network, a local database and extract a department indicator for a user record in the user directory;

map the department indicator to a corresponding user record in a common directory of a registry database;

mark the user record in the common directory with the department indicator for controlling access to that user record in the common directory of the registry database;

based on the department indicator, assign access controls to an administrator for controlling the access to that user record in the registry database; and

control access to that user record in the registry database based on the assigned access controls;

wherein, when mapping the department indicator to the corresponding user record in the common directory of the registry database, the processor to;

based on a source field name associated with the contents of the user directory of the local database, determine the user directory;

send a key field value associated with the contents to a rule engine to determine the department

match, via the rule, a regular expression pattern with a value associated with the source field name to determine the department indicator; and

based on the department indicator, establish the department for the marking of the user record in the common directory that corresponds to the contents from the user directory.

13. The system of claim 12, further comprising a set of rules applied by the processor wherein a primary rule is applied to the user record in the user directory to extract the department indicator for that user record,

wherein the set of rules comprises a secondary rule that is applied to the user record in the user directory to extract the department indicator for that user record when the primary rule fails to identify a department indicator for that user record.

14. The system of claim 13, wherein the set of rules comprises a default value that is assigned as the department indicator for a user record when both the primary and secondary rules fail to identify a department indicator for that user record, and

wherein the default value is none for the department indicator.

15. The system of claim 12, further comprising an application program interface (API) to accept a call from the local database, the call indicating a list of registered source fields.

16. The system of claim 15, the API further to accept a Uniform Resource Locator (URL) with which the local database can be called back.

17. The system of claim 15, the API further to receive identification of a key field value among the list of registered source fields.

18. The system of claim 15, the processor to use the API to call the local database when extracting a department indicator for a user record.