System and method for role based dynamic configuration of user profiles

• US 6,785,822 B1
• Filed: 09/16/1999
• Issued: 08/31/2004
• Est. Priority Date: 09/16/1999
• Status: Expired due to Term

• Current Assignee: Pure Storage, Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Sadhwani-Tully, Bharati Hemandas
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): HENEGHAN, MATTHEW E
• Application Number:
  US09/399,239
• Time in Patent Office: 1,811 Days
• Field of Search: 713/200, 713/201, 707/9, 707/10, 345/762, 345/763, 345/741, 345/742, 345/743, 345/744
• US Class Current: 726/28
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system

Abstract

Initially, profiles are customized by naming an assignment to individual users and identifiable groups of users. A profile is further assigned action groups that comprise one or more system actions. System actions provide the functionality needed for toolbar buttons and menu items. Using the system actions associated with the action groups, toolbar buttons and menus can then be configured for the profile. The profile determines the level of functionality downloaded with the application. When a request is received for an application, the user'"'"'s profile is accessed for the action groups and system actions that provide functionality for the application. Only system actions associated with a profile to which the user is assigned are transferred to the requesting user. Alternatively, the user'"'"'s group profile may be accessed for the action groups and system actions that provide functionality for the application.

Claims

1. A data processing system implemented method for role based allocation of security by profile configuration, comprising:

creating a profile for a user;

associating the profile with an application;

determining a level of functionality of the application, the application having multiple levels of functionality, based upon the profile; and

downloading the determined level of functionality of the application into a computer, for subsequent execution by the user after the determined level of functionality of the application has been downloaded.

2. A data processing system implemented method for role based allocation of security by profile configuration, comprising:

customizing a profile, wherein the profile is associated with an application having a plurality of functions;

receiving a request for the application; and

selectively downloading a subset of available functions of the application based on the profile into a computer, for subsequent execution by a user after the subset of available functions of the application has been downloaded.

3. The data processing system implemented method recited in claim 2, wherein customizing further comprises:

assigning the user to the profile;

assigning a plurality of system actions to the profile, wherein a given system action is used to invoke at least one function of the application; and

assigning an action group to the profile, wherein the action group includes references to at least some of the plurality of system actions and define which system actions are available to the user.

4. The data processing system implemented method recited in claim 3, wherein downloading further comprises:

identifying the user from the request;

accessing the profile based on the user;

accessing the system action assigned to the profile; and

defining functions of the application to be downloaded based on the system action.

5. The data processing system implemented method recited in claim 2 further comprises:

customizing a group profile;

assigning a group to the group profile; and

assigning a system action to the group profile, wherein the system action is used to invoke at least one function of the application.

6. The data processing system implemented method recited in claim 5, wherein downloading further comprises:

identifying the user from the request;

determining whether the user is a member of the group;

accessing one of the profile and the group profile based on the user being a member of the group;

accessing the system action based on the group profile; and

defining functions of the application to be downloaded based on the system action.

7. The data processing system implemented method recited in claim 6 further comprises:

defining a default profile; and

assigning a system action to the default profile, wherein the system action is used to invoke at least function of the application.

8. The data processing system implemented method recited in claim 7, wherein downloading further comprises:

accessing one of the profile, the group profile and the default profile;

accessing the system action based on the default profile, and defining functions of the application to be downloaded based on the system action.

9. A data processing system implemented method for role based allocation of security by profile configuration, comprising:

receiving a request for an application from a user;

checking a plurality of profiles for a profile, wherein the user is assigned to the profile;

accessing one of the plurality of profiles;

accessing a system action based on the one of the plurality of profiles;

defining an executable application program based on the system action; and

transferring the executable application program to the user.

10. The data processing system implemented method recited in claim 9, wherein the profile comprises security rights for the user.

11. The data processing system implemented method recited in claim 10, wherein subsequent to receiving a request, the method further comprises:

determining whether the user is a group member; and

checking the plurality of profiles for a profile wherein the user is assigned to the profile.

12. The data processing system implemented method recited in claim 11, wherein the one of the plurality of profiles is assigned to the user'"'"'s group.

13. The data processing system implemented method recited in claim 11, wherein the one of the plurality of profiles is assigned to the user.

14. The data processing system implemented method recited in claim 9, wherein subsequent to receiving, the method further comprises:

checking the plurality of profiles for a default profile, the default profile having a system action that is used to invoke at least function of the application.

15. The data processing system implemented method recited in claim 9, wherein one of the plurality of profiles is a default profile the default profile having a system action that is used to invoke at least function of the application.

16. A data processing system implemented method for role based allocation of security by profile configuration, comprising:

receiving a request for an application from a user;

iteratively checking a plurality of profiles for the user'"'"'s profile, user group'"'"'s profile, and default profile;

accessing one of the plurality of profiles based on the iterative checking;

accessing a system action based on the one of the plurality of profiles, wherein the system action invokes particular functions of the application; and

transferring the system action to the user.

17. The data processing system implemented method recited in claim 16, wherein iterative checking is based on availability of a profile.

18. The data processing system implemented method recited in claim 16, wherein an outcome of the iterative checking is based on profile availability.

19. The data processing system implemented method recited in claim 16, wherein the outcome of iterative checking is based on a hierarchy of user'"'"'s profile, user group'"'"'s profile, and default profile.

20. The data processing system implemented method recited in claim 16, wherein the system action further comprises security rights.

21. A data processing system for role based allocation of security by profile configuration, comprising:

means for creating a profile for a user;

means for associating the profile with the application;

means for determining a level of functionality of an application, the application having multiple levels of functionality, based upon the profile; and

means for downloading the determined level of functionality of the application into a computer, for subsequent execution by the user after the determined level of functionality of the application has been downloaded.

22. A data processing system for role based allocation of security by profile configuration, comprising:

customizing means for customizing a profile, wherein the profile is associated with an application having a plurality of functions;

receiving means for receiving a request for the application; and

downloading means for selectively downloading a subset of available functions of the application based on the profile into a computer, for subsequent execution by a user after the subset of available functions of the application has been downloaded.

23. The data processing system recited in claim 22, wherein customizing further comprises:

assigning means for assigning the user to the profile;

assigning means for assigning a plurality of system actions to the profile, wherein the a given system action is used to invoke at least one function of the application, and

assigning means for assigning an action group to the profile, wherein the action group includes references to at least some of the plurality of system actions and define which system actions are available to the user.

24. The data processing system recited in claim 23, wherein downloading further comprises:

identifying means for identifying the user from the request;

accessing means for accessing the profile based on the user;

accessing means for accessing the system action assigned to the profile; and

means for defining functions of the application to be downloaded based on the system action.

25. The data processing system recited in claim 22 further comprises:

customizing means for customizing a group profile;

assigning means for assigning a group to the group profile; and

assigning means for assigning a system action to the group profile, wherein the system action is used to invoke at least one function of the application.

26. The data processing system recited in claim 25, wherein downloading further comprises:

identifying means for identifying the user from the request;

determining means for determining whether the user is a member of the group;

accessing means for accessing one of the profile and the group profile based on the user being a member of the group;

accessing means for accessing the system action based on the group profile; and

defining means for defining functions of the application to be downloaded based on the system action.

27. The data processing system recited in claim 26 further comprises:

defining means for defining a default profile; and

assigning means for assigning a system action to the default profile, wherein the system action is used to invoke at least function of the application.

28. The data processing system recited in claim 27, wherein downloading further comprises:

accessing means for accessing one of the profile, the group profile and the default profile;

accessing means for accessing the system action based on the default profile; and

defining means for defining functions of the application to be downloaded based on the system action.

29. A data processing system for role based allocation of security by profile configuration, comprising:

receiving means for receiving a request for an application from a user;

checking means for checking a plurality of profiles for a profile, wherein the user is assigned to the profile;

accessing means for accessing one of the plurality of profiles;

accessing means for accessing a system action based on the one of the plurality of profiles;

defining means for defining an executable application program based on the system action; and

transferring means for transferring the executable application program to the user.

30. The data processing system recited in claim 29, wherein the profile comprises security rights for the user.

31. The data processing system recited in claim 30, wherein subsequent to receiving a request, the method further comprises:

determining means for determining whether the user is a group member; and

checking means for checking the plurality of profiles for a profile wherein the user is assigned to the profile.

32. The data processing system recited in claim 31, wherein the one of the plurality of profiles is assigned to the user'"'"'s group.

33. The data processing system recited in claim 31, wherein the one of the plurality of profiles is assigned to the user.

34. The data processing system recited in claim 29, wherein subsequent to receiving, the method further comprises:

checking means for checking the plurality of profiles for a default profile, the default profile having a system action that is used to invoke at least function of the application.

35. The data processing system recited in claim 29, wherein the one of the plurality of profiles is a default profile, the default profile having a system action that is used to invoke at least function of the application.

36. A data processing system for role based allocation of security by profile configuration, comprising:

receiving means for receiving a request for an application from a user;

checking means for iteratively checking a plurality of profiles for the user'"'"'s profile, user group'"'"'s profile, and default profile;

accessing means for accessing one of the plurality of profiles based on the iterative checking;

accessing means for accessing a system action based on the one of the plurality of profiles, wherein the system action invokes particular functions of the application; and

transferring means for transferring the system action to the user.

37. The data processing system recited in claim 36, wherein iterative checking is based on availability of a profile.

38. The data processing system recited in claim 36, wherein an outcome of the iterative checking is based on profile availability.

39. The data processing system recited in claim 36, wherein the outcome of iterative checking is based on a hierarchy of user'"'"'s profile, user group'"'"'s profile, and default profile.

40. The data processing system recited in claim 36, wherein the system action further comprises security rights.

41. A computer program product in a computer readable media for use in a data processing system for role based allocation of security by profile configuration, comprising:

creating instructions for creating a profile for a user;

associating instructions for associating the profile with an application;

determining a level of functionality of the application, the application having multiple levels of functionality, based upon the profile; and

downloading the determined level of instructions for downloading functionality of the application into a computer, for subsequent execution by the user after the determined level of functionality of the application has been downloaded.

42. A computer program product in a computer readable media for use in a data processing system for role based allocation of security by profile configuration, comprising:

customizing instructions for customizing a profile, wherein the profile is associated with an application having a plurality of functions;

receiving instructions for receiving a request for the application; and

downloading instructions for selectively downloading a subset of available functions of the application based on the profile into a computer, for subsequent execution by a user after the subset of available functions of the application has been downloaded.