Method, apparatus, and system for searching based on search visibility rules

• US 7,725,447 B2
• Filed: 04/19/2004
• Issued: 05/25/2010
• Est. Priority Date: 06/18/2001
• Status: Active Grant

• Current Assignee: Siebel Systems Inc. (Oracle Corporation)
• Original Assignee: Siebel Systems Inc. (Oracle Corporation)
• Inventors: Subramaniam, Pavitra, Ying, Jian-Jung, Zoss, Jason, Caltabiano, Marc
• Primary Examiner(s): Lu; Kuen S
• Application Number:
  US10/827,780
• Publication Number:
  US 20070106639A1
• Time in Patent Office: 2,227 Days
• Field of Search: 707/3, 707/101, 707/6, 709/223, 705/2
• US Class Current: 707/705
• CPC Class Codes: G06F 16/2423 Interactive query statement specification based on a database schema
• CPC Class Codes: G06F 16/2457 with adaptation to user needs
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99942 Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

According to one aspect of the present invention, a method is provided in which a search request containing search criteria is received from a first user. A search is performed based upon the search criteria and the first user'"'"'s organizational identifier to identify data records that match the search criteria and to which the first user is allowed to access based upon the first user'"'"'s organizational identifier. In another embodiment, a search is performed based upon the search criteria and a list of categories to which the first user is authorized to access to identify records that match the search criteria and to which the first user is allowed to access based upon the list of categories.

Claims

1. A computer implemented method comprising:

defining a set of search visibility rules associated with a set of organizations and a set of records, each search visibility rule being used to determine whether a particular organization is allowed to access a particular record;

associating a set of categories with a set of records via a set of category visibility rules, each category visibility rule being used to determine whether a record belongs to a particular category;

associating the set of categories with a set of organizations via a set of category access control visibility rules, each category access control visibility rule being used to determine;

whether members of an organization are granted an access to a particular category, and a nature of access to the members of the organization for the category;

associating the set of organizations with a set of users, via a set of organizational visibility rules, each visibility rule being used to determine whether a user is a member of a particular organization;

receiving a search request containing one or more search criteria from a first user, the first user having a respective organizational identifier indicating a corresponding organization to which the first user belongs;

in response to the search request, identifying one or more records based on the search criteria, the search visibility rules, the category visibility rules, the category access control visibility rules, the organizational visibility rules and the respective organizational identifier; and

identifying whether the first user has access to the identified record.

2. The method of claim 1 wherein the search criteria comprises at least one search category.

3. The method of claim 2 wherein the search criteria comprises at least one search keyword.

4. The method of claim 1 further comprising:

generating a set of search results based on the identified records that meet at least one search criteria;

searching the set of search results to further identify records containing at least one search keyword; and

displaying the set of search results to the first user.

5. The method of claim 1 wherein the set of records comprises database records.

6. The method of claim 1 wherein the set of records comprises one or more links pointing to corresponding data sources.

7. The method of claim 1 comprises defining the set of search visibility rules comprises:

specifying, for each record, one or more organizations that are authorized to access the particular record.

8. The method of claim 7 wherein specifying comprises:

setting a specific field in each record to a value corresponding to a particular organization that is authorized to access the respective record; and

associating a category identifier with a record.

9. The method of claim 1 further comprising:

determining the first user'"'"'s organizational identifier;

identifying least one category associated with the first user'"'"'s organizational identifier following the category visibility rules;

providing the first user an access to the records in the identified category; and

,

modifying the first user'"'"'s organizational identifier to limit the user'"'"'s access to the records in the identified category.

10. The method of claim 9 wherein identifying the one or more records comprises:

constructing a search query based on the search criteria and the first user'"'"'s organizational identifier; and

executing the search query to retrieve records that match the first user'"'"'s organizational identifier and the search criteria.

11. The method of claim 1 comprising storing the set of records, the organizational visibility rules, the search visibility rules, the category visibility rules, and the category access control visibility rules in a storage system.

12. The method of claim 11 comprising storing information received via several channels of communications comprising a telephone, an email, a Web chat, a Web voice, a fax, and a page using a single user interface.

13. The method of claim 12 comprising accessing the stored information via several channels of communications comprising a telephone, an email, a Web chat, a Web voice, a fax, and a page using a single user interface.

14. The method of claim 11 wherein a single user interface is configured provide a consolidated view of every interaction across various communication channels of the storage system to each authorized user.

15. The method of claim 11 wherein the steps of receiving the search request and identifying the records are performed in the real time enabling the method to present the latest version of the stored information for the authorized users.

16. The method of claim 1 wherein the set of records is a file system comprising a network-accessible directory storing a plurality of physical files created by various applications.

17. A system comprising:

a processor and a memory storing instructions executed by the processor for, said instructions perform operations comprising;

defining a set of search visibility rules associated with a set of organizations and a set of records, each search visibility rule being used to determine whether a particular organization is allowed to access a particular record;

defining a set of category visibility rules associated with a set of records and a set of categories, each category visibility rule being used to determine whether a particular record belongs to particular category;

defining a set of category access control visibility rules, each category access control visibility rule being used to determine;

whether members of an organization are granted an access to a particular category, and a nature of access to the members of the organization for the category;

defining a set of organization visibility rules associated with a set of users and a set of organization, each organization visibility rule being used to determine whether a particular user belongs to particular organization;

receiving a search request containing one or more search criteria from a first user, the first user having a respective organizational identifier indicating a corresponding organization to which the first user belongs;

identifying one or more records based on the search criteria, the search visibility rules, the category visibility rules, the category access control visibility rules, the organizational visibility rules and the respective organizational identifier responsive to the search request; and

identifying whether the first user has access to the identified record.

18. The system of claim 17 wherein the memory storing instructions to-be executed by the processor system employ a multi-layered architecture comprising:

a user interface tier comprising the applets, views, charts and reports, etc. associated with one or more application and supporting various types of clients such as traditional connected clients, remote clients, thin clients over an intranet, Java thin clients or non-Windows-based operating systems, and HTML clients over the Internet;

an object manager layer, configured to manage at least one sets of business rules such as accounts, contacts, opportunities, service requests, solutions, etc and to provide the interface between the user interface layer and the data manager layer;

a data manager layer, configured to maintain logical views of the underlying data and to generate of structure query language (SQL) in real time to access the data; and

a data exchange layer configured to handle the interactions with one or more specific target databases and provide the interface between the data manager layer and the underlying data sources.

19. The system of claim 18 wherein the search criteria comprises at least one search keyword or at least one search category.

20. The system of claim 19 wherein said instructions are further executed to:

generate a set of search results based on the identified records; and

display the set of search results to the first user.

21. The system of claim 17 wherein the set of records comprises database records.

22. The system of claim 17 wherein the set of records comprises links pointing to corresponding data sources.

23. The system of claim 17 wherein said instructions executed to define the set of search visibility rules further comprises instructions executed to:

specify, for each record, one or more particular organizations that are authorized to access the respective record.

24. The system of claim 23 wherein said instructions executed to specify further comprises instructions executed to:

set a specific field in each record to a value corresponding to a particular organization that is authorized to access the respective record.

25. The system of claim 17 further comprising:

determining the first user'"'"'s organizational identifier.

26. The system of claim 25 wherein said instructions executed to identify the one or more records further comprises instructions executed to:

construct a search query based on the search criteria and the first user'"'"'s organizational identifier; and

execute the search query to retrieve records that match the first user'"'"'s organizational identifier and the search criteria.

27. A machine-readable storage medium comprising instructions which, when executed by a machine, cause the machine to perform operations comprising:

defining a set of search visibility rules associated with a set of organizations and a set of records, each search visibility rule being used to determine whether a particular organization is allowed to access a particular record;

associating a set of categories with a set of records via a set of category visibility rules, each category visibility rule being used to determine whether a record belongs to a particular category;

associating the set of categories with a set of organizations via a set of category access control visibility rule, each category access control visibility rule being used to determine;

whether members of an organization are granted an access to a particular category, and a nature of access to the members of the organization for the category;

associating the set of organizations with a set of users, via a set of organizational visibility rules, each visibility rule being used to determine whether a user is a member of a particular organization;

receiving a search request containing one or more search criteria from a first user, the first user having a respective organizational identifier indicating a corresponding organization to which the first user belongs;

in response to the search request, identifying one or more records based on the search criteria, the search visibility rules, the category visibility rules, the category access control visibility rules, the organizational visibility rules and the respective organizational identifier; and

identifying whether the first user has access to the identified record.

28. The machine-readable medium of claim 27 wherein the search criteria comprises at least one search category and at least one search keyword.

29. The machine-readable medium of claim 28 wherein defining the set of search visibility rules comprises:

specifying, for each record, one or more particular organizations that are authorized to access the respective record.

30. The machine-readable medium of claim 29 wherein performing the search function comprises:

constructing a search query based on the search criteria and the first user'"'"'s organizational identifier; and

executing the search query to retrieve records that match the first user'"'"'s organizational identifier and the search criteria.

31. A computer implemented method comprising:

defining a set of search visibility rules associated with a set of organizations and a set of records, each search visibility rule being used to determine whether a particular organization is allowed to access records that are associated with a particular record;

associating the set of categories with a set of records via a set of category visibility rules, each category visibility rule being used to determine whether a record belongs to a particular category;

associating the set of categories with a set of organizations via category access control visibility rule, each category access control visibility rule being used to determine;

whether members of an organization are granted an access to a particular category, and a nature of access to the members of the organization for the category;

associating the set of organizations with a set of users, via a set of organizational visibility rules, each visibility rule being used to determine whether a user is a member of a particular organization,

receiving a search request containing search criteria from a first user, the first user being associated with one or more user groups;

in response to the search request, identifying one or more records based on the search criteria, the category visibility rules, the category access control visibility rules, the search visibility rules, the organizational visibility rules and the one or more user groups to which the first user is associated; and

identifying whether the first user has access to the identified record.

32. The method of claim 31 wherein the search criteria comprises at least one search category.

33. The method of claim 32 wherein the search criteria comprises at least one search keyword.

34. The method of claim 31 wherein defining the set of category visibility rules comprises:

specifying, for each record, one or more particular categories to which the respective record is associated.

35. The method of claim 34 wherein specifying comprises:

setting a specific field in each record to a value corresponding to a particular category.

36. The method of claim 31 further comprising:

determining a list of categories to which the first user has access.

37. The method of claim 36 wherein determining the list comprises:

determining the one or more user groups to which the first user is associated; and

determining categories that are associated with the one or more user groups.

38. The method of claim 37 wherein identifying the one or more records comprises:

constructing a search query based on the search criteria and the list of categories to which the first user has access;

executing the search query to retrieve records that match the list of categories to which the first user has access and the search criteria; and

generating search results based on the retrieved records.

39. A system comprising:

a processor and a memory storing instructions executed by the processor, said instructions operations comprising;

defining a set of category visibility rules associated with a set of records and a set of categories, each category visibility rule being used to determine whether a whether a particular record belongs to particular category;

defining a set of search visibility rules associated with a set of organizations and a set of categories, each search visibility rule being used to determine whether a particular organization is allowed to access a particular category;

defining a set of category access control visibility rules, each category access control visibility rule being used to determine;

whether members of an organization are granted an access to a particular category, and a nature of access to the members of the organization for the category;

defining a set of organization visibility rules associated with a set of users and a set of organization, each organization visibility rule being used to determine whether a particular user belongs to particular organization;

receiving a search request containing search criteria from a first user, the first user being associated with one or more user groups;

identifying one or more records based on the search criteria responsive to the search request, the category visibility rules, the category access control visibility rules, the search visibility rules, the organizational visibility rules and the one or more user groups to which the first user is associated; and

identifying whether the first user has access to the identified record.

40. The system of claim 39 wherein the search criteria comprises at least one search category and at least one search keyword.

41. The system of claim 40 wherein the logic to define the set of category visibility rules comprises:

logic to specify, for each record, one or more particular categories to which the respective record is associated.

42. The system of claim 39 further comprising:

logic to determine a list of categories to which the first user has access.

43. The system of claim 42 wherein logic to determine the list comprises:

logic to determine the one or more user groups to which the first user is associated; and

logic to determine categories that are associated with the one or more user groups.

44. The system of claim 43 wherein logic to identify the one or more records comprises:

logic to construct a search query based on the search criteria and the list of categories to which the first user has access;

logic to execute the search query to retrieve records that match the list of categories to which the first user has access and the search criteria; and

logic to generate search results based on the retrieved records.

45. A machine-readable storage medium comprising instructions which, when executed by a machine, cause the machine to perform operations comprising:

defining a set of search visibility rules associated with a set of organizations and a set of categories, each search visibility rule being used to determine whether a particular organization is allowed to access a particular category;

defining a set of category visibility rules associated with a set of records and a set of categories, each category visibility rule being used to determine whether a particular user group is allowed to access records that are associated with a particular category;

defining a set of category access control visibility rule associated with a set of categories and a set of organizations, each category access control visibility rule being used to determine whether members a particular organization are granted an access to a particular category, and the nature of access to the category granted to the members of the organization;

defining a set of organizational visibility rules associated with a set of users and a set of organizations, each visibility rule being used to determine whether a user is a member of a particular organization;

receiving a search request containing search criteria from a first user, the first user being associated with one or more user groups;

in response to the search request, identifying one or more records based on the search criteria, the category visibility rules, the category access control visibility rules, the search visibility rules, and the organizational visibility rules and the one or more user groups to which the first user is associated; and

identifying whether the first user has access to the identified record.

46. The machine-readable medium of claim 45 wherein defining the set of category visibility rules comprises:

specifying, for each record, one or more particular categories to which the respective record is associated.

47. The machine-readable medium of claim 46 further comprising:

determining a list of categories to which the first user has access.

48. The machine-readable medium of claim 47 wherein determining the list comprises:

determining the one or more user groups to which the first user is associated; and

determining categories that are associated with the one or more user groups.

49. The machine-readable medium of claim 48 wherein identifying the one or more records comprises:

constructing a search query based on the search criteria and the list of categories to which the first user has access;

executing the search query to retrieve records that match the list of categories to which the first user has access and the search criteria; and

generating search results based on the retrieved records.