Filtering access to data objects

• US 20080120415A1
• Filed: 12/13/2006
• Published: 05/22/2008
• Est. Priority Date: 11/16/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Lu, Xiaoqing, Gronski, Jan, Song, Yang, Yang, Jian, Chen, Jianyu
• Granted Patent: US 8,151,365 B2
• Time in Patent Office: Days
• US Class Current: 709/226
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

In one embodiment, a code server and edit server are provided. The code server stores the source code. Users do not access the code server directly. Rather, an edit server is used where users can log in to the edit server and send requests to edit portions of the source code. The edit server then sends requests to the code server for requested portions of the source code. Different users may have different access-rights to portions of the code. When the request is received from the edit server, if the code server determines the user requesting the portion of the source code does not have access rights to it, then the code server does not allow the portion of code to be accessed. However, if the user does have access rights, then the portion of the source code is retrieved and sent to the edit server. The user can then edit the source code on the edit server.

Claims

1. A method comprising:

receiving, at a first device, a request for a portion of source code stored on the first device from a second device, wherein a user submits the request through the second device;

determining if a user associated with the request is authorized to access the portion of the source code from the first device;

retrieving the portion of the source code;

sending the portion of the source code to the second device, wherein the second device allows editing of the portion of the source code, wherein the portion of the source code is not editable on the first device;

receiving, at the first device, an edited portion of the source code from the second device; and

storing the edited portion of the source code.

2. The method of claim 1, further comprising authenticating the request from the second device.

3. The method of claim 1, wherein determining if a user associated with the request is authorized to access the portion of the source code comprising:

determining user information associated with the user; and

using the information to determine if the user is authorized to access the portion of the source code.

4. The method of claim 1, further comprising providing a build of the portion of source code, wherein a second portion of source code that the user is not authorized to access is used in the build.

5. The method of claim 1, wherein the source code is built on the first device but not edited, and the second device allows editing of the portion of the source code.

6. A method comprising:

receiving, at a first device, a user request for a portion of source code stored on a second device;

generating a code request for the portion of source code stored on the second device;

receiving the portion of the source code from the second device if the second determines a user associated with the user request is authorized to access the portion of the source code;

allowing editing of the portion of the source code through the first device, wherein the source code is not editable on the second device; and

sending the edited portion of the source code to the second device after editing.

7. The method of claim 6, further comprising determining user information associated with the user to include in code request for determining if the user is authorized to access the portion of the source code.

8. The method of claim 7, wherein the user information comprises a workgroup associated with the user, wherein the workgroup is associated with portions of the source code that are accessible to users in the workgroup.

9. The method of claim 6, wherein the source code is built on the second device but not edited, and first device allows editing of the portion of the source code.

10. The method of claim 6, further comprising:

establishing an encrypted session with the second device; and

sending the code request in the encrypted session.

11. An apparatus comprising:

one or more processors; and

logic encoded in one or more tangible media for execution by the one or more processors and when executed operable to;

receive, at a first device, a request for a portion of source code stored on the first device from a second device, wherein a user submits the request through the second device;

determine if a user associated with the request is authorized to access the portion of the source code from the first device;

retrieve the portion of the source code;

send the portion of the source code to the second device, wherein second device allows editing of the portion of the source code, wherein the portion of the source code is not editable on the first device;

receive, at the first device, an edited portion of the source code from the second device; and

store the edited portion of the source code in the source code.

12. The apparatus of claim 11, wherein the logic, when executed, is further operable to authenticate the request from the second device.

13. The apparatus of claim 11, wherein the logic, when executed, is further operable to:

determine user information associated with the user; and

use the information to determine if the user is authorized to access the portion of the source code.

14. The apparatus of claim 11, wherein the logic, when executed, is further operable to provide a build of the portion of source code, wherein a second portion of source code that the user is not authorized to access is used in the build.

15. The apparatus of claim 11, wherein the source code is built on the first device but not edited, and the second device allows editing of the portion of the source code.

16. An apparatus comprising:

one or more processors; and

logic encoded in one or more tangible media for execution by the one or more processors and when executed operable to;

receive, at a first device, a user request for a portion of source code stored on a second device;

generate a code request for the portion of source code stored on the second device;

receive the portion of the source code from the second device if the second determines a user associated with the user request is authorized to access the portion of the source code;

allow editing of the portion of the source code through the first device, wherein the source code is not editable on the second device; and

send the edited portion of the source code to the second device after editing.

17. The apparatus of claim 16, wherein the logic, when executed, is further operable to determine user information associated with the user to include in code request for determining if the user is authorized to access the portion of the source code.

18. The apparatus of claim 17, wherein the user information comprises a workgroup associated with the user, wherein the workgroup is associated with portions of the source code that are accessible to users in the workgroup.

19. The apparatus of claim 16, wherein the source code is built on the second device but not edited, and the first device allows editing of the portion of the source code.

20. The apparatus of claim 16, wherein the logic, when executed, is further operable to:

establish an encrypted session with the second device; and

send the code request in the encrypted session.

21. An apparatus comprising:

means for receiving, at a first device, a request for a portion of source code stored on the first device from a second device, wherein a user submits the request through the second device;

means for determining if a user associated with the request is authorized to access the portion of the source code from the first device;

means for retrieving the portion of the source code;

means for sending the portion of the source code to the second device, wherein the second device allows editing of the portion of the source code, wherein the portion of the source code is not editable on the first device;

means for receiving, at the first device, an edited portion of the source code from the second device; and

means for storing the edited portion of the source code in the source code.

22. An apparatus comprising:

means for receiving, at a first device, a user request for a portion of source code stored on a second device;

means for generating a code request for the portion of source code stored on the second device;

means for receiving the portion of the source code from the second device if the second determines a user associated with the user request is authorized to access the portion of the source code;

means for allowing editing of the portion of the source code through the first device, wherein the source code is not editable on the second device; and

means for sending the edited portion of the source code to the second device after editing.