Permissions using a namespace

• US 7,970,800 B2
• Filed: 12/16/2009
• Issued: 06/28/2011
• Est. Priority Date: 05/06/2005
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Beher, Mukeshkumar M., Pacholec, Michael A., Dalia, Apurva F., Augustine, Matthew S., Torres, Michael I.
• Primary Examiner(s): Al-Hashemi; San
• Application Number:
  US12/639,819
• Publication Number:
  US 20100100943A1
• Time in Patent Office: 559 Days
• Field of Search: 707/791, 707/793, 707/795, 707/807, 707/822
• US Class Current: 707/807
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

Permissions using a namespace is described. In an embodiment, a namespace system includes a network resource that has a resource permission, and includes a namespace that has one or more members associated with the namespace. The namespace system also includes a namespace permission to permission the network resource to one or more of the members of the namespace.

Claims

1. A method implemented by a computer comprising:

configuring a namespace permission to permission access to a network resource for one or more members associated with a namespace; and

configuring an inferred relationship to permission access to the network resource to additional members of an additional namespace, the inferred relationship having a degree of separation that is equal to a number of inferred relationships between the namespace and the additional namespace used to permission the additional members to access the network resource, the inferred relationships between the namespace and the additional namespace each relating a namespace that is permissioned access to the network resource to a different namespace that is associated with one or more members of the namespace that is permissioned access to the network resource.

3. A method as recited in claim 1, wherein:

the additional members are not associated directly with the namespace; and

access to the network resource is not attainable by the additional members absent the inferred relationship.

4. A method as recited in claim 1, wherein the inferred relationship further permissions access to the network resource to the additional members of one or more additional namespaces, the inferred relationship having the designated degree of separation to indicate the degree of the inferred relationship.

5. A method as recited in claim 1, wherein the namespace permission further permissions the access to a role of the network resource for the one or more members of the namespace.

6. A method as recited in claim 1, wherein the namespace permission further permissions the access to the network resource based on a permission level for one or more of the members of the namespace.

7. A method as recited in claim 1, further comprising further establishing the namespace by permissioning a resource to the namespace, the resource including resource permissions and different resource permission levels, and wherein the namespace permission further permissions the access to the network resource for only one or more of the members that have permissioned access to the resource.

8. A method as recited in claim 1, further comprising further establishing the namespace by configuring an additional namespace permission that permissions the additional members of the additional namespace for access to the network resource.

2. One or more computer-readable storage media comprising computer-executable instructions that, when executed, direct a computing-based device to establish a namespace by:

configuring a namespace permission that permissions access to a network resource for one or more members of the namespace such that a member of the namespace can access the network resource; and

configuring an inferred relationship that permissions access to the network resource to additional members of an additional namespace, the inferred relationship having a degree of separation which is equal to a number of inferred relationships between the namespace used to permission the additional members to access the network resource, the inferred relationships between the namespace and the additional namespace each relating a namespace that is permissioned access to the network resource to a different namespace that is associated with one or more members of the namespace that is permissioned access to the network resource.

9. One or more computer-readable storage media as described in claim 2, wherein the additional members of the additional namespace are not associated directly with the namespace such that access to the network resource is not attainable by the additional members absent the inferred relationship.

10. One or more computer-readable storage media as described in claim 2, wherein the inferred relationship further permissions access to the network resource to the additional members of one or more additional namespaces, the inferred relationship having the designated degree of separation to indicate the degree of the inferred relationship.

11. One or more computer-readable storage media as described in claim 2, wherein the namespace permission further permissions the access to a role of the network resource for the one or more members of the namespace.

12. One or more computer-readable storage media as described in claim 2, wherein the namespace permission further permissions the access to the network resource based on a permission level for one or more of the members of the namespace.

13. One or more computer-readable storage media as described in claim 2, further comprising computer-executable instructions that, when executed, direct the computing-based device to further establish the namespace by permissioning a resource to the namespace, the resource including resource permissions and different resource permission levels, and wherein the namespace permission further permissions the access to the network resource for only one or more of the members that have permissioned access to the resource.

14. One or more computer-readable storage media as described in claim 2, further comprising computer-executable instructions that, when executed, direct the computing-based device to further establish the namespace by configuring an additional namespace permission that permissions the additional members of the additional namespace for access to the network resource.