Object-oriented framework for managing access control in a multimedia database

• US 6,470,353 B1
• Filed: 09/17/1999
• Issued: 10/22/2002
• Est. Priority Date: 09/17/1999
• Status: Expired due to Term

• Current Assignee: SAP SE
• Original Assignee: International Business Machines Corporation
• Inventors: Yaung, Alan Tsu-I, Lin, Jy-Jine James
• Primary Examiner(s): Mizrahi, Diane D.
• Application Number:
  US09/397,946
• Time in Patent Office: 1,131 Days
• Field of Search: 707/10, 707/103.R, 707/200, 709/200, 709/228, 709/316, 713/201, 713/202, 713/200, 345/335
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure

Abstract

A method, apparatus, and article of manufacture for an object-oriented framework for managing access control in a multimedia database connected to a computer is provided. A datastore access control object is generated for the datastore, wherein the datastore access control object enables controlling access to the datastore. An access control list object is manipulated with the datastore access control object to set access privileges.

Claims

1. A method of controlling access to a datastore connected to a computer, the method comprising the steps of:

generating a datastore access control object for the datastore, wherein the datastore access control object enables controlling access to the datastore; and

manipulating an access control list object with the datastore access control object to set access privileges.

2. The method of claim 1, wherein the datastore access control object is based on a datastore access control class.

3. The method of claim 2, wherein the datastore access control class inherits characteristics of an access control class.

4. The method of claim 1, wherein the access control list object is based on an access control list class.

5. The method of claim 1, wherein the access control list object is comprised of one or more access data objects.

6. The method of claim 5, wherein the access data object is based on an access data class.

7. The method of claim 5 wherein the access data objects comprise a row of data defining one or more users and access privileges granted to the users.

8. The method of claim 1, wherein multiple datastores are connected to the computer and further comprising the step of generating a datastore access control object for each datastore.

9. The method of claim 1, wherein the datastore is a multimedia database.

10. The method of claim 1, wherein the datastore access control object manipulates the access control list object with methods to enable a user to perform functions selected from the group consisting of adding an access control list, updating an access control list, deleting an access control list, listing all access control lists, getting a specific access control list, listing the privileges specified in an access control list, listing users defined in an access control list, listing groups of users defined in an access control list, and determining whether a specific privilege has been granted to a specific user.

31. The method of claim 1, wherein the access privileges set by said datastore access control object are privileges for accessing an item in a digital library.

32. The method of claim 1, wherein the datastore access control object includes a method for returning a name of an access control list of an item in a digital library.

33. The method of claim 1, wherein the datastore access control object includes a method of associating an access control list with an item in a digital library.

11. An apparatus for controlling access to a datastore, comprising:

a computer having the datastore connected thereto;

one or more computer programs, performed by the computer, for generating a datastore access control object for the datastore, wherein the datastore access control object enables controlling access to the datastore, and for manipulating an access control list object with the datastore access control object to set access privileges.

12. The apparatus of claim 11, wherein the datastore access control object is based on a datastore access control class.

13. The apparatus of claim 12, wherein the datastore access control class inherits characteristics of an access control class.

14. The apparatus of claim 11, wherein the access control list object is based on an access control list class.

15. The apparatus of claim 11, wherein the access control list object is comprised of one or more access data objects.

16. The apparatus of claim 15, wherein the access data object is based on an access data class.

17. The apparatus of claim 15 wherein the access data objects comprise a row of data defining one or more users and access privileges granted to the users.

18. The apparatus of claim 11, wherein multiple datastores are connected to the computer and further comprising the step of generating a datastore access control object for each datastore.

19. The apparatus of claim 11, wherein the datastore is a multimedia database.

20. The apparatus of claim 11, wherein the datastore access control object manipulates the access control list object with methods to enable a user to perform functions selected from the group consisting of adding an access control list, updating an access control list, deleting an access control list, listing all access control lists, getting a specific access control list, listing the privileges specified in an access control list, listing users defined in an access control list, listing groups of users defined in an access control list, and determining whether a specific privilege has been granted to a specific user.

34. The apparatus of claim 11, wherein the access privileges set by said datastore access control object are privileges for accessing an item in a digital library.

35. The apparatus of claim 11, wherein the datastore access control object includes a mechanism for returning a name of an access control list of an item in a digital library.

36. The apparatus of claim 11, wherein the datastore access control object includes a mechanism for associating an access control list with an item in a digital library.

21. An article of manufacture comprising a computer program carrier readable by a computer and embodying one or more instructions executable by the computer to perform method steps for controlling access to a datastore connected to a computer, the method comprising the steps of:

generating a datastore access control object for the datastore, wherein the datastore access control object enables controlling access to the datastore; and

manipulating an access control list object with the datastore access control object to set access privileges.

22. The article of manufacture of claim 21, wherein the datastore access control object is based on a datastore access control class.

23. The article of manufacture of claim 22, wherein the datastore access control class inherits characteristics of an access control class.

24. The article of manufacture of claim 21, wherein the access control list object is based on an access control list class.

25. The article of manufacture of claim 21, wherein the access control list object is comprised of one or more access data objects.

26. The article of manufacture of claim 25, wherein the access data object is based on an access data class.

27. The article of manufacture of claim 25 wherein the access data objects comprise a row of data defining one or more users and access privileges granted to the users.

28. The article of manufacture of claim 25, wherein multiple datastores are connected to the computer and further comprising the step of generating a datastore access control object for each datastore.

29. The article of manufacture of claim 21, wherein the datastore is a multimedia database.

30. The article of manufacture of claim 21, wherein the datastore access control object manipulates the access control list object with methods to enable a user to perform functions selected from the group consisting of adding an access control list, updating an access control list, deleting an access control list, listing all access control lists, getting a specific access control list, listing the privileges specified in an access control list, listing users defined in an access control list, listing groups of users defined in an access control list, and determining whether a specific privilege has been granted to a specific user.

37. The article of manufacture of claim 21, wherein the access privileges set by said datastore access control object are privileges for accessing an item in a digital library.

38. The article of manufacture of claim 21, wherein the datastore access control object includes a method for returning a name of an access control list of an item in a digital library.

39. The article of manufacture of claim 21, wherein the datastore access control object includes a method of associating an access control list with an item in a digital library.