Nested exception roles
First Claim
Patent Images
1. A computer-implemented method for managing a directory server, the method comprising:
- creating an object class to which a nested EXCEPTION role comprising at least two constituent roles belongs, the object class defining the nested EXCEPTION role as a result of a logical operation on each of the constituent roles in the nested EXCEPTION role, the nested EXCEPTION role declaring itself as a member of the object class without indicating the logical operation;
defining a plurality of entries in the directory server, at least one of the plurality of entries possessing the nested EXCEPTION role by possessing none of the constituent roles in the nested EXCEPTION role;
querying each of the entries to determine whether the entry possesses the nested EXCEPTION role by performing the logical operation on a plurality of results, each result indicating whether the entry possesses a corresponding one of the constituent roles of the nested EXCEPTION role; and
in response to querying, providing entries that possess the nested EXCEPTION role to a client.
1 Assignment
0 Petitions
Accused Products
Abstract
A method and apparatus for managing a nested EXCEPTION role in a directory server is described. In one embodiment, a plurality of entries is defined in the directory server. At least one of the plurality of entries possesses a role. An entry is queried to determine its possessed role. A nested EXCEPTION role possesses at least two roles. An entry possesses the nested EXCEPTION role by possessing none of the roles within the nested EXCEPTION role.
-
Citations
15 Claims
-
1. A computer-implemented method for managing a directory server, the method comprising:
-
creating an object class to which a nested EXCEPTION role comprising at least two constituent roles belongs, the object class defining the nested EXCEPTION role as a result of a logical operation on each of the constituent roles in the nested EXCEPTION role, the nested EXCEPTION role declaring itself as a member of the object class without indicating the logical operation; defining a plurality of entries in the directory server, at least one of the plurality of entries possessing the nested EXCEPTION role by possessing none of the constituent roles in the nested EXCEPTION role; querying each of the entries to determine whether the entry possesses the nested EXCEPTION role by performing the logical operation on a plurality of results, each result indicating whether the entry possesses a corresponding one of the constituent roles of the nested EXCEPTION role; and in response to querying, providing entries that possess the nested EXCEPTION role to a client. - View Dependent Claims (2, 3, 4, 15)
-
-
5. A directory server comprising:
-
a processing device; a storage device coupled to the processing device, the storage device comprising a directory repository defining a plurality of entries in the directory server, at least one of the plurality of entries possessing a nested EXCEPTION role by possessing none of a plurality of constituent roles within the nested EXCEPTION role, the directory repository further defining an object class to which the nested EXCEPTION role belongs, the object class to define the nested EXCEPTION role as a result of a logical operation on each of the constituent roles within the nested EXCEPTION role, wherein the nested EXCEPTION role declares itself as a member of the object class by including an identifier of the object class without indicating the logical operation; a nested role management module coupled to the processor, the nested role management module to query each of the entries to determine whether the entry possesses the nested EXCEPTION role, the nested role management module to perform the logical operation on a plurality of results, with each result to indicate whether the entry possesses a corresponding one of the constituent roles of the nested EXCEPTION role, and to provide entries that possess the nested EXCEPTION role to a client. - View Dependent Claims (6, 7, 8, 9)
-
-
10. A computer-readable storage medium, having instructions stored therein, which when executed cause a computer system to perform a method comprising:
-
creating an object class to which a nested EXCEPTION role comprising at least two constituent roles belongs, the object class defining the nested EXCEPTION role as a result of a logical operation on each of the constituent roles within the nested EXCEPTION role, the nested EXCEPTION role declaring itself as a member of the object class by including an identifier of the object class without indicating the logical operation; defining a plurality of entries in the directory server, at least one of the plurality of entries possessing the nested EXCEPTION role by possessing none of the constituent roles within the nested EXCEPTION role; querying each of the entries to determine wherein the entry possesses the nested EXCEPTION role by performing the logical operation on a plurality of results, each result indicating whether the entry possesses a corresponding one of the constituent roles of the nested EXCEPTION role; and in response to querying, providing entries that possess the nested EXCEPTION role to a client. - View Dependent Claims (11, 12, 13, 14)
-
Specification