Mechanism for building access control structures for authoring systems

• US 6,816,906 B1
• Filed: 05/08/2000
• Issued: 11/09/2004
• Est. Priority Date: 05/08/2000
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ungar, Lisa M., Icken, Donald A., Keller, Neal M.
• Primary Examiner(s): Alam, Hosain
• Assistant Examiner(s): WANG, LIANG CHE A
• Application Number:
  US09/567,408
• Time in Patent Office: 1,646 Days
• Field of Search: 707/9, 707/104.1, 707/100, 707/1, 707/3, 707/10, 705/1, 709/200-205, 709/217-219, 709/229, 345/700, 345/751
• US Class Current: 709/229
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

The present invention relates to the field of distributed authoring systems, and particularly to the implementing of authoring controls within the authoring system. Moreover, the authoring system is provided with a mechanism for the creating of customizable control structures for an access control engine which is adapted to select criteria to provide system access to selective authors or users.

Claims

1. An authoring system including mechanisms for enforcing authoring controls so as to selectively impart access to one or more authors to said authoring system predicated on specific criteria, said system comprising:

a) an access control engine wherein Boolean logic changes dynamically in response to multiple roles and existing attributes and values to enable a single pass access to the authoring system; and

b) a build mechanism for said access control engine for providing instructions to said access control engine to modify a display components table and an access control table to provide customized access to one or more authors to the authoring system.

2. An authoring system as claimed in claim 1, wherein the building of authoring privileges dynamically reflects and responds to changes in the authoring system.

3. An authoring system as claimed in claim 1, wherein single or multiple attributes with one or more values are names associated with content, display components, roles and control structures for building said customized access.

4. An authoring system as claimed in claim 1, wherein roles interact with control structures, existing relationships with other authors and Boolean logic to generate dynamic selections of content and display components.

5. An authoring system as claimed in claim 4, wherein a single role or multiple roles are affiliated with one or more authors and attributes.

6. An authoring system as claimed in claim 1, wherein the Boolean logic changes dynamically in response to multiple roles and existing attributes and values to enable a single pass access to content and display components.

7. An authoring system as claimed in claim 1, wherein the build mechanism is operatively connected to said access control engine for providing customizable control structures used by said engine to create and modify records in the access control table.

8. A method of utilizing an authoring system including mechanisms for enforcing authoring controls so as to selectively impart access to one or more authors to said authoring system predicated on specific criteria, said method comprising the steps;

a) providing an access control engine wherein Boolean logic changes dynamically in response to multiple roles and existing attributes and values to enable a single pass access to the authoring system; and

b) using a build mechanism for said access control engine for providing instructions to said access control engine to modify a display components table and an access control table to provide customized access to one or more authors to the authoring system.

9. A method as claimed in claim 8, wherein the building of authoring privileges dynamically reflects and responds to changes in the authoring system.

10. A method as claimed in claim 8, where single or multiple attributes with one or more values are names associated with content, display components, roles and control stones for building customized access.

11. A method as claimed in claim 8, wherein roles interact with control structures, existing relationships with other authors and Boolean logic to generate dynamic selections of content and display component.

12. A method as claimed in claim 11, wherein a single role or multiple roles are affiliated with one or more authors and attributes.

13. A method claimed in claim 8, wherein the Boolean logic changes dynamically in response to multiple roles and existing attributes and values to enable a single pass access to content and display components.

14. A method as claimed in claim 8, wherein the build mechanism is operatively connected to said access control engine for providing customizable control structures used by said engine to create and modify records in the control table.

15. A program storage device readable by machine, tangibly embodying a program of instructions executable by machine to perform method steps for selectively imparting access to one or more authors to an authoring system predicated on specific criteria, said method steps comprising:

a) using an access control engine wherein Boolean logic changes dynamically in response to multiple roles and existing attributes and values to enable a single pass access to the authoring system; and

b) using a build mechanism for said access control engine for providing instructions to said access control engine to modify a display components table and an access control table to provide customized access to one or more authors to the authoring system.

16. A program storage device as claimed in claim 15, wherein the building of authoring privileges dynamically reflects and responds to changes in the authoring system.

17. A program storage device as claimed in claim 15, single or multiple attributes with one or more values are names associated with content, display components, roles and control structures for building the customized access.

18. A program storage device as claimed in claim 15, wherein roles interact with control structures, existing relationships with authors and Boolean logic to generate dynamic selections of content and display components.

19. A program storage device as claimed in claim 18, wherein a single role or multiple roles are affiliated with one or more authors and attributes.

20. A program storage device as claimed in claim 15, wherein the Boolean logic changes dynamically in response to multiple roles and existing attributes and values to enable a single pass access to content and display components.

21. A program storage device as claimed in claim 15, wherein the build mechanism is operatively connected to said access control engine for providing customizable control structures used by said engine to create and modify records in the access control table.