Delegation of administrative operations in user enrollment tasks

• US 20040122946A1
• Filed: 12/24/2002
• Published: 06/24/2004
• Est. Priority Date: 12/24/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Wang, Yuping, Nelson, Kenneth Carlin, Hu, Tawei, Vo, Mimi Phuong-Thao, Tao, Tracee
• Granted Patent: US 7,533,157 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A system and method of controlling access in a content management system includes defining a domain among a plurality of domains for the content management system and designating a domain administrator for the domain. This enables the domain administrator to perform administrative tasks within the domain without revealing or affecting information in other domains of the content management system. For example, a domain administrator can view user information only for users associated with that domain. The domain administrator also can associate a user with only the defined domain, thereby limiting the user'"'"'s access to information in the system to information associated with the domain

Claims

1. A method of controlling administrative operations in a data store, comprising:

defining a domain among a plurality of domains for the data store;

designating a domain administrator for the domain; and

enabling the domain administrator to perform administrative operations within the domain without enabling the domain administrator to access information in at least one other of the plurality of domains.

2. The method of claim 1, wherein the data store is a content management system storing multimedia content.

3. The method of claim 2, wherein at least one of the administrative operations the domain administrator is enabled to perform is to associate a user with said domain among the plurality of domains, thereby preventing the user'"'"'s access to information in at least one other of said plurality of domains of the content management system.

4. The method of claim 2, wherein content management system includes an administration domain table that associates the domain with a set of privileges.

5. The method of claim 4, wherein the administration domain table associates the domain with an access control list.

6. The method of claim 5, wherein the content management system includes a user table having a row containing a user identifier, and a user is identified by adding an identifier for the domain in said row.

7. A method of limiting an administrator'"'"'s actions in a content management system, wherein the administrator is associated with an administrative domain defined for the content management system, the method comprising:

determining, in response to receiving a request by the administrator to take an action with respect to resources defined in the content management system, the domain associated with the administrator; and

limiting the requested action to said resources that are associated with a domain that matches the domain associated with the administrator.

8. The method of claim 7, wherein the requested action is a listing of users'"'"' identifiers of the content management system, and said limiting the requested action lists only the users'"'"' identifiers associated with the domain associated with the administrator or a public domain.

9. The method of claim 7, wherein the requested action is a listing of resource managers defined in the content management system for storing content objects and said limiting the request lists only the resource managers associated with the domain associated with the administrator or a public domain.

10. The method of claim 7, wherein the requested action is a listing of collections of objects defined in the content management system and stored in a resource manager, and said limiting the request lists only the collections associated with the domain associated with the administrator or a public domain.

11. The method of claim 7, further comprising defining a user in the content management system and associating with the user the domain associated with the administrator.

12. The method of claim 11, wherein the content management system includes a user table having a row containing an identifier for the user, and the user is associated with the domain by adding an identifier of the domain to said row containing the user identifier.

13. The method of claim 7, further comprising defining a resource manager in the content management system and associating with the resource manager the domain associated with the administrator.

14. The method of claim 7, further comprising defining a collection of objects stored in a resource manager in the content management system and associating with the collection the domain associated with the administrator.

15. The method of claim 7, further comprising defining a super administrator by associating a predetermined domain identifier designated to allow access to all domains defined in the content management system, wherein if said administrator is a super administrator, said limiting the requested action is not performed.

16. A program product embodied on a computer readable medium for limiting an administrator'"'"'s actions in a content management system, wherein the administrator is associated with an administrative domain defined for the content management system, the computer readable medium comprising:

program instructions for determining, in response to receiving a request by the administrator to take an action with respect to resources defined in the content management system, the domain associated with the administrator; and

program instructions for limiting the requested action to said resources that are associated with a domain that matches the domain associated with the administrator.

17. The program product of claim 16, wherein the requested action is a listing of users'"'"' identifiers of the content management system, and said limiting the requested action lists only the users'"'"' identifiers associated with the domain associated with the administrator or a public domain.

18. The program product of claim 16, wherein the requested action is a listing of resource managers defined in the content management system for storing content objects and said limiting the request lists only the resource managers associated with the domain associated with the administrator or a public domain.

19. The program product of claim 16, wherein the requested action is a listing of collections of objects defined in the content management system and stored in a resource manager, and said limiting the request lists only the collections associated with the domain associated with the administrator or a public domain.

20. The program product of claim 16, further comprising program instructions for defining a user in the content management system and associating with the user the domain associated with the administrator.

21. The program product of claim 20, wherein the content management system includes a user table having a row containing an identifier for the user, and the user is associated with the domain by adding an identifier of the domain to said row containing the user identifier.

22. The program product of claim 16, further comprising program instructions for defining a resource manager in the content management system and associating with the resource manager the domain associated with the administrator.

23. The program product of claim 16, further comprising program instructions for defining a collection of objects stored in a resource manager in the content management system and associating with the collection the domain associated with the administrator.

24. The program product of claim 16, further comprising program instructions for defining a super administrator by associating a predetermined domain identifier designated to allow access to all domains defined in the content management system, wherein if said administrator is a super administrator, said limiting the requested action is not performed.