Method and apparatus for exposing network administration stored in a directory using HTTP/WebDAV protocol

• US 6,947,991 B1
• Filed: 09/13/1999
• Issued: 09/20/2005
• Est. Priority Date: 09/13/1999
• Status: Expired due to Fees

• Current Assignee: Apple Inc.
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Andrew, Chris, Burton, Daniel Paul
• Primary Examiner(s): Barot, Bharat
• Assistant Examiner(s): NGUYEN, THU HA T
• Application Number:
  US09/394,590
• Time in Patent Office: 2,199 Days
• Field of Search: 709/206, 709/226, 709/203, 709/221, 709/223, 709/225, 709/245, 709/227, 707/10, 707/102, 707/200, 370/431
• US Class Current: 709/227
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

A method and system to manipulate network objects by using Internet authoring, collaboration and versioning tools is described. The method includes: receiving a request for a manipulation of a first network object from a requesting user; verifying a first set of authorization information; translating a logical address of the first network object to a physical file system path; checking a local file system for validity and authorization for the requesting user including determining whether the first network object is a first network object; verifying a username and a password for the requesting user; returning a first error message if requesting user is unauthorized to access the first network object; determining an object type for the first network object; and sending a response to the requesting user. The method can also include verifying that the first network object is found and returning a second error message if the first network object is not found. The first network object can be user object and the request can be to assign new rights to the user object. The new rights for the user can also be for another network object. The new rights can be assigned by dragging and dropping the user object on another network object by the use of interactive computer screen.

Claims

1. A method for manipulating network objects by extending an Internet authoring, collaboration and versioning protocol to a network directory service having network administration functions, wherein the protocol allows a user to perform remote web content authoring and user rights administration operations, the method comprising:

receiving a request using the Internet authoring, collaboration and versioning protocol for a manipulation of a first network object from a requesting user, wherein the first network object includes at least one from the group consisting of;

devices, resources and container objects;

verifying a first set of authorization information;

translating a logical object address to a physical file system path;

checking a file system for validity and authorization for the requesting user including determining whether the first network object is a network object within the network directory service;

verifying a username and a password for the requesting user;

returning a first error message if requesting user is unauthorized to access the first network object;

determining an object type for the first network object;

sending a response to the requesting user;

accessing the network administration functions of the network directory service using the Internet authoring, collaboration and versioning protocol; and

administering user rights to the first network object using the Internet authoring, collaboration and versioning protocol, wherein the administration of the user rights is allowed without requiring client software, related to the network directory service, installed on a user workstation.

2. The method of claim 1 wherein the manipulation of the first network object includes changing a set of attributes of the first network object.

3. The method of claim 1 further including verifying that the first network object is found.

4. The method of claim 3 further including returning a second error message if the first network object is not found.

5. The method of claim 1 further including assigning new rights to the first network object.

6. The method of claim 5 wherein the new rights for the first network object are for a second network object.

7. The method of claim 5 wherein the new rights are assigned by dragging and dropping a second network object on the first network object by the use of an interactive computer screen.

8. The method of claim 7 wherein the new rights are all rights for all users and assigned by dragging a public icon and dropping the public icon on the first network object.

9. The method of claim 7 wherein the new rights are subtracting all rights for all users except an assigned user to the first network object and wherein the new rights are assigned by dragging a private icon and dropping the private icon on the first network object.

10. The method of claim 1 further including modifying a set of attributes of the first network object by modifying a set of fields on a screen of a subset of the set of attributes.

11. The method of claim 10 further including navigating a context menu for a plurality of screens that allow modification of the set of attributes of the first network object.

12. A computer program for manipulating network objects by extending an Internet authoring, collaboration and versioning protocol to a network directory service having network administration functions, wherein the protocol allows a user to perform remote web content authoring and user rights administration operations, the computer program comprising:

instructions for receiving a request using the Internet authoring, collaboration and versioning protocol for a manipulation of a first network object from a requesting user, wherein the first network object includes at least one from the group consisting of;

devices, resources and container objects;

instructions for verifying a first set of authorization information;

instructions for translating a logical Uniform Resource Locator to a local file system path;

instructions for checking a local file system for validity and authorization for the requesting user including determining whether the first network object is a network object within the network directory service;

instructions for verifying a username and a password for the requesting user;

instructions for returning a first error message if requesting user is unauthorized to access the first network object;

instructions for determining an object type for the first network object;

instructions for sending a response to the requesting user;

instructions for accessing the network administration functions of the network directory service using the Internet authoring, collaboration and versioning protocol, and

instructions for administering user rights to the first network object using the Internet authoring, collaboration and versioning protocol, wherein the administration of the user rights is allowed without requiring client software, related to the network directory service, installed on a user workstation.

13. The computer program of claim 12 further including instructions for verifying that the first network object is found.

14. The computer program of claim 13 further including instructions for returning a second error message if the first network object is not found.

15. The computer program of claim 12 wherein the request is to assign new rights to the first network object.

16. The computer program of claim 15 wherein the new rights for the first network object are for a second network object.

17. The computer program of claim 15 wherein the new rights are assigned by dragging and dropping a second network object on the first network object by the use of interactive computer screen.

18. The computer program of claim 17 wherein the new rights are all rights for all users and assigned by dragging a public icon and dropping the public icon on the first network object.

19. The computer program of claim 17 wherein the new rights are subtracting all rights for all users except an assigned user to the first network object and wherein the new rights are assigned by dragging a private icon and dropping the private icon on the first network object.

20. The computer program of claim 12 further including instructions for modifying a set of attributes of the first network object by modifying a set of fields on a screen of a subset of the set of attributes.

21. The computer program of claim 20 further including instructions for navigating a context menu for a plurality of screens that allow modification of the set of attributes of the first network object.

22. The computer program of claim 12 wherein the manipulation of the first network object includes instructions for changing a set of attributes of the first network object.

23. A system for manipulating network objects by extending an Internet authoring, collaboration and protocol to a network directory service having network administration functions, wherein the protocol allows a user to perform remote web content authoring and user rights administration operations, the system comprising:

a web server;

a work station connected to the web server by an Internet connection;

at least one network server connected to the web server;

at least one storage system connected to the web server;

means for receiving a request using the Internet authoring, collaboration and versioning protocol for a manipulation of a first network object from the work station, wherein the first network object includes at least one from the group consisting of;

devices, resources and container objects;

means for verifying a first set of authorization information;

means for translating a logical Uniform Resource Locator to the storage system;

means for checking for validity and authorization for a requesting user including determining whether the first network object is a network object within the network directory service;

means for verifying a username and a password for the requesting user;

means for determining an object type for the first network object;

means for sending a response to the requesting user;

means for accessing the network administration functions of the network directory service using the Internet authoring, collaboration and versioning protocol; and

means for administering user rights to the first network object using the Internet authoring, collaboration and versioning protocol, wherein the administration of the user rights is allowed without requiring client software, related to the network directory service, installed on a user workstation.

24. The system of claim 23 further including means for verifying that the first network object is found.

25. The system of claim 24 further including means for returning a second error message if the first network object is not found.

26. The system of claim 23 wherein the request is to assign new rights to the first network object.

27. The system of claim 26 wherein the new rights for the user are for a second network object.

28. The system of claim 27 wherein the new rights are all rights for all users and assigned by dragging a public icon and dropping the public icon on the first network object.

29. The system of claim 27 wherein the new rights are subtracting all rights for all users except an assigned user to the first network object and wherein the new rights are assigned by dragging a private icon and dropping the private icon on the first network object.

30. The system of claim 26 wherein the new rights are assigned by dragging and dropping a second network object on the first network object by the use of interactive computer screen.

31. The system of claim 23 further including means for modifying a set of attributes of the first network object by modifying a set of fields on a screen of a subset of the set of attributes.

32. The system of claim 31 further including means for navigating a context menu for a plurality of screens that allow modification of the set of attributes of the first network object.

33. The system of claim 23 wherein the manipulation of the first network object includes means for changing a set of attributes of the first network object.

34. A method for manipulating network objects by extending an Internet authoring, collaboration and versioning protocol to a network directory service having network administration functions, wherein the protocol allows a user to perform remote web content authoring and user rights administration operations, the method comprising:

receiving a request using the Internet authoring, collaboration and versioning protocol for a manipulation of a first network object from a requesting user, wherein the first network object includes at least one from the group consisting of;

devices, resources and container objects;

verifying a first set of authorization information;

translating a logical object address to a physical file system path;

checking a file system for validity and authorization for the requesting user including determining whether the first network object is a network object within the network directory service;

verifying a username and a password for the requesting user;

returning a first error message if requesting user is unauthorized to access the first network object;

determining an object type for the first network object;

sending a response to the requesting user;

accessing the network administration functions of the network directory service using the Internet authoring, collaboration and versioning protocol; and

navigating a context menu for a plurality of screens that allow modification of the set of attributes of the first network object;

modifying a set of attributes of the first network object by modifying a set of fields on a screen of a subset of the set of attributes; and

administering user rights to the first network object using the Internet authoring, collaboration and versioning protocol, wherein the administration of the user rights is allowed without requiring client software, related to the network directory service, installed on a user workstation.

35. The method of claim 34 wherein the request is to assign new rights to the first network object.

36. The method of claim 35 wherein the new rights for the first network object are for a second network object.

37. The method of claim 35 wherein the new rights are assigned by dragging and dropping a second network object on the first network object by the use of interactive computer screen.

38. The method of claim 37 wherein the new rights are all rights for all users and assigned by dragging a public icon and dropping the public icon on the first network object.

39. The method of claim 37 wherein the new rights are subtracting all rights for all users except an assigned user to the first network object and wherein the new rights are assigned by dragging a private icon and dropping the private icon on the first network object.

40. A computer network for a plurality of users to access a workplace by using an Internet authoring, collaboration and versioning protocol, wherein the protocol allows a user to perform remote web content authoring and user rights administration operations, the system comprising:

a plurality of network computer servers within the computer network;

a plurality of network computer workstations within the computer network and connected to at least one of the plurality of network computer servers;

a file system, network directory, and printing subsystem on the computer network and accessible by the plurality of users by the protocol;

a security system that provides an authentication process in order to allow access to the plurality of users to the file system, network directory, and printing subsystem; and

a graphical user interface using the Internet authoring, collaboration and versioning protocol for viewing the file system, network directory and printing subsystem as the workplace, and providing the plurality of users the ability to manipulate the file system, network directory and printing subsystem and the ability to run a plurality of network applications within the file system and network directory portions of the subsystem

wherein user rights to the file system, network directory, and printing subsystem are administered using the Internet authoring, collaboration and versioning protocol, wherein the administration of the user rights is allowed without requiring client software, related to the administration of the user rights, on a user workstation.

41. The computer network of claim 40 wherein the computer network is a global internet network and the file and directory subsystem is within an intranet network.

42. The computer network of claim 40 wherein the graphical user interface is a web browse.