Role-based portal to a workplace system

• US 7,222,369 B2
• Filed: 11/27/2002
• Issued: 05/22/2007
• Est. Priority Date: 12/20/2001
• Status: Expired due to Term

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Schwerin-Wenzel, Sven, Bittner, Peter, Anton, Thomas, Vering, Matthias, Barth, Peter
• Primary Examiner(s): PEIKARI, BEHZAD
• Application Number:
  US10/306,894
• Publication Number:
  US 20040019799A1
• Time in Patent Office: 1,637 Days
• Field of Search: 715/744, 715/743, 715/741, 715/707, 715/967, 711/163, 707/9, 713/182, 713/185
• US Class Current: 726/28
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method includes storing a plurality of role data entries on a storage device coupled to a computer system, each role data entry corresponding to an assigned role of at least one of a plurality of individuals, each role corresponding to an enterprise with which the individual is associated and corresponding to a set of resources accessible through the computer system, receiving at the computer a resource request from one of the individuals, determining whether the requested resource is included in the set of accessible resources corresponding to the assigned role of the requesting individual, and selectively permitting access to the requested resource if the resource is determined to be in the set of resources corresponding to the assigned role of the requesting individual.

Claims

1. A method comprising:

storing a plurality of role data entries on a storage device coupled to a computer system, a role data entry corresponding to an assigned role of at least one of a plurality of individuals, the assigned role corresponding to an enterprise with which the individual is associated, and the assigned role corresponding to a set of resources accessible through the computer system;

receiving at the computer a resource request from one of the individuals, the resource request indicating a requested resource;

determining based on an assignment of the assigned role to the requesting individual whether the requested resource is included in the set of accessible resources corresponding to the assigned role of the requesting individual, the assignment of the assigned role being defined prior to receiving the resource request; and

selectively permitting access to the requested resource if the resource is determined to be in the set of resources corresponding to the assigned role of the requesting individual; and

, wherein;

the requested resource is a shared resource from a common set of resources that are accessible to other individuals;

access to the shared resource for the other individuals is based on an assignment of a second role to the other individuals, the second role being the assigned role of the requesting individual or another role;

a first combination of shared resources accessible to the requesting individual is the same as a second combination of shared resources accessible to another individual having same assigned roles; and

the first and second combination are the same due to selective permission of access being based on assignments of roles, and the assigned roles of the requesting individual and the another individual being the same.

2. The method of claim 1, wherein the requested resource corresponds to at least one of an item of information that is displayable on a window of a display device, an application executable on a user device, and an address link to information stored on a second computer.

3. The method of claim 1, further comprising:

storing at least one of the accessible resources on the storage device coupled to the computer.

4. The method of claim 1, wherein at least one item of the accessible resources corresponds to a link address, the link address corresponding to an item of information stored on a second computer.

5. The method of claim 1, further comprising:

displaying the requested resource on a display window of a user device.

6. The method of claim 5, further comprising:

detecting a selection of an active region on the display window prior to sending the request for the requested resource, wherein the request corresponds to the detected selection.

7. The method of claim 6, further comprising:

displaying the requested resource on the display window.

8. The method of claim 6, further comprising:

displaying the requested resource on an associated window on the display device.

9. The method of claim 5, further comprising:

relating a first object displayed on the display window to a second object displayed on the display window, wherein relating the first object to the second object causes a further display of information on the display window.

10. The method of claim 9, wherein at least one of the first object and second object are icons displayable on a display device of a computer.

11. The method of claim 5, wherein displaying the requested resource on the display window comprises:

executing a browser application, the browser application controlling a role-based portal window displayable on a user device.

12. The method of claim 1, further comprising:

assigning a common set of information to a second plurality of assigned roles, each of the second assigned roles corresponding to at least one individual in the plurality of individuals.

13. The method of claim 12, further comprising:

detecting a change to an item in the common set of information; and

sending a message to at least one other individual to indicate the detected change.

14. The method of claim 13, further comprising:

displaying an updated display window that reflects the detected change to the item.

15. The method of claim 12, wherein access to the common set of information is controllable by a first individual assigned a controlling role.

16. The method of claim 12, further comprising:

accessing the common set of information from a plurality of user devices, each user device having a role-based portal window.

17. The method of claim 12, further comprising:

controlling access by the plurality of individuals to the common set of information by a first individual.

18. The method of claim 17, wherein the first individual has access control to the common set of information and the first individual is an employee of a business, and

wherein a second one of the plurality of individuals is a non-employee.

19. The method of claim 1, wherein accessing a subset of the resources comprises displaying a customized display window including at least one item of the subset of resources accessible to the individual, the method further comprising:

accessing the subset of resources, the subset of resources comprising the requested resource.

20. The method of claim 19, wherein the customized display window corresponds to a previously customized display window.

21. The method of claim 1, further comprising:

accessing the requested resource by logging on to the computer system with a unique identifier corresponding to a one of the plurality of individuals.

22. The method of claim 21, wherein logging on to the computer system comprises:

executing a single sign on application.

23. A system comprising:

a first computer coupled to a storage device, the storage device holding a plurality of role data entries, a role data entry corresponding to an assigned role of at least one of a plurality of individuals, the assigned role corresponding to a subset of information accessible through the first computer;

a user device coupled to communicate with the first computer, the user device having a display device displaying a role-based portal window, the role-based portal window usable to send a request to the first computer for an item of information; and

a role-based filter application executable by the first computer to determine based on an assignment of the assigned role to a requesting individual whether the item of information requested is included in the subset of accessible information corresponding to the assigned role of the requesting individual, the assignment of the assigned role being defined prior to receiving the request from the requesting individual;

wherein;

the requested item of information is a shared resource from a common set of resources that are accessible to other individuals;

access to the shared resource for the other individuals is based on assignment of a second role to the other individuals, the second role being the assigned role of the requesting individual or another role;

a first combination of shared resources accessible to the requesting individual is the same as a second combination of shared resources accessible to another individual having same one or more assigned roles; and

the first and second combination are the same due to selective permission of access being based on assignments of roles, and the assigned one or more roles of the requesting individual and the another individual being the same.

24. The system of claim 23, further comprising:

a second computer coupled to communicate with the first computer and the user device, wherein at least one item of the subset of information accessible through the first computer corresponds to a link address, the link address corresponding to an item of information stored on the second computer.

25. The system of claim 23, wherein a common set of information is assigned to a plurality of assigned roles, each of the roles corresponding to at least one individual, and

the role-based filter application is executable to detect a change to an item in the common set of information by a first one of the plurality of individuals and send a message to at least one user device corresponding to a second of the plurality of individuals to indicate the detected change.

26. A method of facilitating access to resources in a collaborative environment, the method comprising:

receiving a request from a user to access a resource associated with the collaborative environment, the requested resource being a shared resource from a common set of resources that are accessible to other users, and access to the shared resource for the other users being based on assignment of a first role to the other users, the first role being the same or different from a second role assigned to the requesting user;

determining an enterprise affiliation of the requesting user, the enterprise affiliation being defined prior to receiving the resource request; and

selectively providing access to the requested resource based on the determination of the enterprise affiliation and assignment of roles;

wherein;

a first combination of shared resources accessible to the requesting user is the same as a second combination of shared resources accessible to another user having a same one or more assigned roles; and

the first and second combination are the same due to selective provision of access being based on assignment of roles, and the assigned roles of the requesting user and the another user being the same.

27. The method of claim 26, wherein the resource is at least one of a tool, application, file, file link and document.

28. The method of claim 26, further comprising:

displaying the requested resource on a display window of a user device.

29. The method of claim 26, further comprising:

assigning a common set of resources to a plurality of assigned roles, each role corresponding to at least one individual.

30. The method of claim 29, further comprising:

controlling access to the common set of resources by a first individual assigned a controlling role.

31. The method of claim 30, wherein the first individual is an employee of a business, and

a second one of the plurality of individuals is a non-employee.

32. The method of claim 29, further comprising:

accessing the set of resources from a plurality of user devices, each user device having a role-based portal window.