Permissions using a namespace

• US 7,653,648 B2
• Filed: 05/06/2005
• Issued: 01/26/2010
• Est. Priority Date: 05/06/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Dalia, Apurva F, Pacholec, Michael A, Beher, Mukeshkumar M, Torres, Michael I, Augustine, Matthew S
• Primary Examiner(s): AL HASHEMI, SANA A
• Application Number:
  US11/123,857
• Publication Number:
  US 20060253456A1
• Time in Patent Office: 1,726 Days
• Field of Search: 707/1, 707/10, 707100-102, 709/223, 705/51, 705/1
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

Permissions using a namespace is described. In an embodiment, a namespace system includes a network resource that has a resource permission, and includes a namespace that has one or more members associated with the namespace. The namespace system also includes a namespace permission to permission the network resource to one or more of the members of the namespace.

Claims

1. Computer-readable storage media comprising computer-executable instructions that, when executed, direct a computing-based device to establish a namespace by:

establishing one or more members associated with the namespace;

configuring a namespace permission that permissions access to a network resource for the one or more members of the namespace such that a member of the namespace can access the network resource; and

configuring an inferred relationship that permissions access to the network resource to additional members of an additional namespace, the additional namespace being associated with a member of the namespace, the additional members not being associated directly with the namespace such that access to the network resource is not attainable by the additional members absent the inferred relationship, and the inferred relationship having a degree of separation which is equal to a number of inferred relationships used to permission the additional members to access the network resource.

2. Computer-readable storage media as recited in claim 1, wherein the inferred relationship further permissions access to the network resource to the additional members of one or more additional namespaces, the inferred relationship having a designated degree of separation to indicate a degree of the inferred relationship.

3. Computer-readable storage media as recited in claim 1, wherein the namespace permission further permissions the access to a role of the network resource for the one or more members of the namespace.

4. Computer-readable storage media as recited in claim 1, wherein the namespace permission further permissions the access to the network resource based on a permission level for one or more of the members of the namespace.

5. Computer-readable storage media as recited in claim 1, further comprising computer-executable instructions that, when executed, direct the computing-based device to further establish the namespace by permissioning a resource to the namespace, the resource including resource permissions and different resource permission levels, and wherein the namespace permission further permissions the access to the network resource for only one or more of the members that have permissioned access to the resource.

6. Computer-readable storage media as recited in claim 1, further comprising computer-executable instructions that, when executed, direct the computing-based device to further establish the namespace by configuring an additional namespace permission that permissions the additional members of the additional namespace for access to the network resource.

7. A method performed by a computer comprising:

configuring a namespace permission that permissions access to a network resource for one or more members associated with a namespace such that a member of the namespace can access the network resource; and

configuring an inferred relationship that permission access to the network resource to additional members of an additional namespace, the additional namespace being associated with a member of the namespace, the additional members not being associated directly with the namespace such that access to the network resource is not attainable by the additional members absent the inferred relationship, and the inferred relationship having a degree of separation which is equal to a number of inferred relationships used to permission the additional members to access the network resource.

8. A method as recited in claim 7, wherein the inferred relationship further permissions access to the network resource to the additional members of one or more additional namespaces, the inferred relationship having a designated degree of separation to indicate a degree of the inferred relationship.

9. A method as recited in claim 7, wherein the namespace permission further permissions the access to a role of the network resource for the one or more members of the namespace.

10. A method as recited in claim 7, wherein the namespace permission further permissions the access to the network resource based on a permission level for one or more of the members of the namespace.

11. A method as recited in claim 7, further comprising further establishing the namespace by permissioning a resource to the namespace, the resource including resource permissions and different resource permission levels, and wherein the namespace permission further permissions the access to the network resource for only one or more of the members that have permissioned access to the resource.

12. A method as recited in claim 7, further comprising further establishing the namespace by configuring an additional namespace permission that permissions the additional members of the additional namespace for access to the network resource.