Merging directory information from a user directory to a common directory

• US 10,467,189 B2
• Filed: 05/09/2016
• Issued: 11/05/2019
• Est. Priority Date: 08/19/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hegfield, Gordon E., Holden, Russell, Jerrard-Dunne, Stanley K., Ranjan, Ravi
• Primary Examiner(s): Thai, Hanh B
• Application Number:
  US15/149,943
• Publication Number:
  US 20170053038A1
• Time in Patent Office: 1,275 Days
• Field of Search: 707781
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 16/214 Database migration support
• CPC Class Codes: G06F 16/24564 Applying rules; Deductive queries
• CPC Class Codes: G06F 16/86 Mapping to a database
• CPC Class Codes: G06F 16/9017 using directory or table look-up use of a directory or look-up table in file systems G06F16/13
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

Merging directory information from a user directory to a common directory includes based on a rule associated with contents of a user directory of a local database, extracting a department indicator from the user directory, mapping the department indicator to a corresponding user record in a common directory of a registry database, and based on the department indicator, marking the user record in the common directory with a department that corresponds to the contents from the user directory with a department for controlling access to that user record in the registry database.

Claims

1. A method for merging directory information from a user directory to a common directory, the method comprising:

based on a rule associated with contents of a user directory of a local database, extracting a department indicator from the user directory;

mapping the department indicator to a corresponding user record in a common directory of a registry database; and

based on the department indicator, marking the user record in the common directory that corresponds to the contents from the user directory with a department for controlling access to that user record in the registry database;

wherein mapping the department indicator to the corresponding user record in the common directory of the registry database comprises;

based on a source field name associated with the contents of the user directory of the local database, determining the user directory;

sending a key field value associated with the contents to a rule engine to determine the department;

matching, via the rule, a regular expression pattern with a value associated with the source field name to determine the department indicator; and

based on the department indicator, establishing the department for the marking of the user record in the common directory that corresponds to the contents from the user directory.

2. The method of claim 1, wherein the rule comprises a regular expression pattern to extract the department indicator from the user directory.

3. The method of claim 1, wherein a secondary rule is established when a primary rule fails to determine the department.

4. The method of claim 3, wherein the secondary rule utilizes an alternate user directory to determine the department indicator.

5. The method of claim 3, wherein a default value is used when the primary rule and the secondary rule fails to determine the department.

6. The method of claim 1, further comprising:

based on the department, assigning access controls to an administrator for the user record for controlling the access to that user record in the registry database; and

based on the access controls, permitting the administrator to access the user record in the registry database.

7. The method of claim 1, further comprising:

applying a primary rule to a user record in the user directory to extract the department indicator for that user record, applying a secondary rule to the user record in the user directory to extract the department indicator for that user record when the primary rule fails to identify a department indicator for that user record.

8. The method of claim 7, wherein a set of rules including the primary and secondary rules also comprises a default value that is assigned as the department indicator for a user record when both the primary and secondary rules fail to identify a department indicator for that user record.

9. The method of claim 8, wherein the default value is none for the department indicator.

10. The method of claim 1, further comprising, with an application program interface (API), accepting a call from the local database, the call indicating a list of registered source fields.

11. The method of claim 10, the API further to accept a Uniform Resource Locator (URL) with which the local database can be called back.

12. The method of claim 10, the API further to receive identification of a key field value among the list of registered source fields.

13. The method of claim 10, further comprising using the API to call the local database when extracting a department indicator for a user record.