System and method for controlling access to anode in a virtual content repository that integrates a plurality of content repositories

• US 7,236,975 B2
• Filed: 08/10/2004
• Issued: 06/26/2007
• Est. Priority Date: 04/13/2004
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: BEA Systems Incorporated (Oracle Corporation)
• Inventors: Owen, James, Posner, Brad, Patadia, Jalpesh, Toussaint, Alexander, McCauley, Rodney
• Primary Examiner(s): LE, UYEN T
• Application Number:
  US10/915,008
• Publication Number:
  US 20050251502A1
• Time in Patent Office: 1,050 Days
• Field of Search: 707/9, 707/10, 707/100, 707/104.1, 709/219, 709/229
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

A system and method for controlling access to a node in a virtual content repository (VCR), comprising, integrating the plurality of repositories into the VCR, storing the node in the VCR, associating with the node at least one of: a role and a policy, wherein the node is part of a hierarchical namespace that encompasses the plurality of repositories, and wherein the role and/or the policy can control access to the node.

Claims

1. A method for controlling access to a node in a virtual content repository (VCR), comprising:

integrating a plurality of content repositories into the VCR;

storing the node in the VCR;

controlling access to the node by associating with the node at least one of;

a role and a policy;

wherein the node is part of a hierarchical namespace that encompasses the plurality of content repositories.

2. The method of claim 1 wherein:

the access can include a set of one or more capabilities.

3. The method of claim 1, further comprising:

associating with a property of the node at least one of;

a role and a policy.

4. The method of claim 1 wherein:

the node can be one of;

a content node, a hierarchy node, and a schema node.

5. The method of claim 1 wherein:

a node property can inherit the role and/or the schema from the node.

6. The method of claim 1 wherein:

the role and/or the policy are inherited from a parent node in the namespace.

7. The method of claim 1 wherein:

the role and/or the policy are taken from a schema node.

8. The method of claim 1 wherein:

a role is a dynamic set of users.

9. The method of claim 1 wherein:

a policy can be used to determine if a privilege is granted.

10. The method of claim 1, further comprising:

implementing a service provider interface (SIP) for each of the plurality of content repositories wherein the SPI is compatible with the VCR.

11. A system for controlling access to a node wherein the node is associated with a role and/or a policy, comprising:

a plurality of content repositories;

a virtual content repository (VCR) to integrate the plurality of content repositories,

wherein the node is stored in the VCR;

a hierarchical namespace that encompasses the plurality of content repositories;

wherein the node is part of the namespace; and

wherein the role and/or the policy can control access to the node.

12. The system of claim 11 wherein:

the access can include a set of one or more capabilities.

13. The system of claim 11 wherein:

a property of the node is associated with at least one of;

a role and a policy.

14. The system of claim 11 wherein:

the node can be one of;

a content node, a hierarchy node, and a schema node.

15. The system of claim 11 wherein:

a node property can inherit the role and/or the schema from the node.

16. The system of claim 11 wherein:

the role and/or the policy are inherited from a parent node in the namespace.

17. The system of claim 11 wherein:

the role and/or the policy are taken from a schema node.

18. The system of claim 11 wherein:

a role is a dynamic set of users.

19. The system of claim 11 wherein:

a policy can be used to determine if a privilege is granted.

20. The system of claim 11, further comprising:

a service provider interface (SPI) implemented by each of the plurality of content repositories wherein the SPI is compatible with the VCR.

21. A machine readable medium having instructions stored thereon that when executed by one or more processors cause a system to:

integrate a plurality of content repositories into a virtual content repository (VCR);

store a node in the VCR;

associate with the node at least one of;

a role and a policy;

wherein the node is part of a hierarchical namespace that encompasses the plurality of content repositories; and

wherein the role and/or the policy control access to the node.

22. The machine readable medium of claim 21 wherein:

the access can include a set of one or more capabilities.

23. The machine readable medium of claim 21, further comprising instructions that when executed cause the system to:

associate with a property of the node at least one of;

a role and a policy.

24. The machine readable medium of claim 21 wherein:

the node can be one of;

a content node, a hierarchy node, and a schema node.

25. The machine readable medium of claim 21 wherein:

a node property can inherit the role and/or the schema from the node.

26. The machine readable medium of claim 21 wherein:

the role and/or the policy are inherited from a parent node in the namespace.

27. The machine readable medium of claim 21 wherein:

the role and/or the policy are taken from a schema node.

28. The machine readable medium of claim 21 wherein:

a role is a dynamic set of users.

29. The machine readable medium of claim 21 wherein:

a policy can be used to determine if a privilege is granted.

30. The machine readable medium of claim 21, further comprising instructions that when executed cause the system to:

implement a service provider interface (SPI) for each of the plurality of content

repositories wherein the SPI is compatible with the VCR.