Technique for limiting access to the resources of a system

• US 7,836,178 B1
• Filed: 06/11/2002
• Issued: 11/16/2010
• Est. Priority Date: 06/20/2001
• Status: Active Grant

• Current Assignee: Microstrategy Incorporated
• Original Assignee: Microstrategy Incorporated
• Inventors: Li, Wenfeng, Polana, Ramprasad, Ramachandran, Ramkumar, Orozco, Luis V., Yuan, Jun, Bedell, Jeffrey A., Li, Benjamin Z.
• Primary Examiner(s): Refai; Ramsey
• Application Number:
  US10/166,044
• Time in Patent Office: 3,080 Days
• Field of Search: 709/225, 709/226, 709/223
• US Class Current: 709/225
• CPC Class Codes: G06F 9/505 considering the load

Abstract

A technique for limiting access to the resources of a system is disclosed. In one embodiment, wherein the system has a server for processing requests, and wherein the server supports a plurality of projects, the technique includes receiving a request to access the resources of the system. The request is denied based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects. The limiting value limits an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

Claims

1. A method for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the method comprising the steps of:

receiving a request to access the resources of the system; and

denying the request based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

2. The method as defined in claim 1, wherein the system is a reporting system.

3. The method as defined in claim 1, wherein the request is received from a user.

4. The method as defined in claim 1, wherein the request is received from within the system.

5. The method as defined in claim 1, further comprising the step of:

notifying a user that the request has been denied.

6. The method as defined in claim 1, wherein each project supports a plurality of sessions, wherein each session is created from a request, and wherein the step of denying the request includes the step of:

preventing the request from becoming a session.

7. The method as defined in claim 1, wherein each project supports a plurality of sessions, wherein each session supports a plurality of jobs, wherein each job is created from a request, and wherein the step of denying the request includes the step of:

preventing the request from becoming a job.

8. The method as defined in claim 7, wherein the plurality of functional layers include a user layer, a job layer, a session layer, a project layer, and a server layer.

9. The method as defined in claim 7, further comprising the step of:

setting the setting level such that limiting the operation affects all jobs and all users across all projects.

10. The method as defined in claim 7, further comprising the step of:

setting the setting level such that limiting the operation affects all jobs and a single user across all projects.

11. The method as defined in claim 7, further comprising the step of:

setting the setting level such that limiting the operation affects all jobs and all users within a single project.

12. The method as defined in claim 7, further comprising the step of:

setting the setting level such that limiting the operation affects all jobs and all users within a user group across all projects.

13. The method as defined in claim 7, further comprising the step of:

setting the setting level such that limiting the operation affects all jobs and a single user within a single project.

14. The method as defined in claim 7, wherein the request is a request to generate at least one report, further comprising the step of:

setting the setting level such that limiting the operation affects a single instance of a report.

15. A computer program of instructions embodied on one or more tangible media and being readable by a computing system for executing a computer process performing the method recited in claim 1.

16. An apparatus for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the apparatus comprising:

a receiver for receiving a request to access the resources of the system; and

a governor for denying the request based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

17. A computer program embodied on one or more tangible media for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the computer program comprising:

instructions configured to be readable by at least one processor and thereby causing the at least one processor to operate so as to;

receive a request to access the resources of the system; and

deny the request based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

18. A method for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the method comprising the steps of:

receiving a request to access the resources of the system;

determining if the resources of the system are available to satisfy the request; and

queuing the request until the resources of the system are available to satisfy the request, wherein the availability of the resources of the system is based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

19. The method as defined in claim 18, further comprising the step of:

notifying a user that the limiting value has been reached.

20. A computer program of instructions embodied on one or more tangible media and being readable by a computing system for executing a computer process performing the method recited in claim 18.

21. An apparatus for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the apparatus comprising:

a receiver for receiving a request to access the resources of the system;

a governor for determining if the resources of the system are available to satisfy the request; and

a queue for queuing the request until the resources of the system are available to satisfy the request, wherein the availability of the resources of the system is based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

22. A computer program embodied on one or more tangible media for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the computer program comprising:

instructions configured to be readable by at least one processor and thereby causing the at least one processor to operate so as to;

receive a request to access the resources of the system;

determine if the resources of the system are available to satisfy the request; and

queue the request until the resources of the system are available to satisfy the request, wherein the availability of the resources of the system is based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

23. A method for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the method comprising the steps of:

receiving a request to access the resources of the system;

determining how much of the resources of the system are allowed to process the request; and

partially processing the request until the resources of the system are no longer allowed to process the request, wherein the allowability of the resources of the system is based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

24. The method as defined in claim 23, further comprising the step of:

notifying a user that the limiting value has been reached.

25. The method as defined in claim 23, further comprising the step of:

providing a partial result to a user based upon the partial processing of the request.

26. A computer program of instructions embodied on one or more tangible media and being readable by a computing system for executing a computer process performing the method recited in claim 23.

27. An apparatus for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the apparatus comprising:

a receiver for receiving a request to access the resources of the system;

a governor for determining how much of the resources of the system are allowed to process the request; and

a processing engine for partially processing the request until the resources of the system are no longer allowed to process the request, wherein the allowability of the resources of the system is based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.

28. A computer program embodied on one or more tangible media for limiting access to resources of a system having a server for processing requests, the server supporting a plurality of projects, the computer program comprising:

instructions configured to be readable by at least one processor and thereby causing the at least one processor to operate so as to;

receive a request to access the resources of the system;

determine how much of the resources of the system are allowed to process the request; and

partially process the request until the resources of the system are no longer allowed to process the request, wherein the allowability of the resources of the system is based upon an application level and a setting level, wherein the application level is associated with one of a plurality of functional layers within the system that is affected by the request, and wherein the setting level is a limiting value associated with one of the server alone and the server with one or more of the plurality of projects, the limiting value for limiting an operation on one of the plurality of functional layers, thereby limiting access to the resources of the system.