Providing access control for a destination in a messaging system

• US 8,528,002 B2
• Filed: 03/22/2010
• Issued: 09/03/2013
• Est. Priority Date: 05/11/2009
• Status: Active Grant

• Current Assignee: ServiceNow Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Willoughby, Philip G
• Primary Examiner(s): Truong, Lechi
• Application Number:
  US12/728,537
• Publication Number:
  US 20100287564A1
• Time in Patent Office: 1,261 Days
• Field of Search: 719/314, 719/310, 719/312
• US Class Current: 719/310
• CPC Class Codes: G06F 2209/548 Queue
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues

Abstract

Providing controlled access for a destination in a messaging system includes: selecting a destination for storing messages in a messaging system, one or more of the messages comprising one or more message properties; associating each of a set of message requestors with a set of message selectors; and in response to an access request for the destination from a message requestor, determining the set of said message selectors associated with the message requestor and using the identified set of message selectors to check against messages on the destination comprising a corresponding set of message properties for providing a response to the access request.

Claims

1. A method for providing controlled access for a destination in a messaging system, said method comprising:

determining one or more messages stored in the destination, wherein each message comprises one or more message properties;

receiving an access request for accessing the destination wherein the access request comprises a requestor identifier;

identifying a mapping table associated with the destination, wherein the mapping table comprises a set of requestor identifiers, each requestor identifier associated with a set of message selectors;

obtaining from the mapping table a given set of message selectors associated with the requestor identifier comprised in the access request;

comparing the message properties of each message stored in the destination with the given set of message selectors;

returning, as a response to said access request, any messages stored in the destination comprising the message properties matching the given set of message selectors; and

blocking access to any messages stored in the destination comprising message properties that fail to match the given set of message selectors.

2. The method according to claim 1 further comprising:

removing said returned messages from said destination.

3. The method according to claim 1 wherein the set of message selectors is determined by an administrator for each requestor identifier in the mapping table.

4. The method according to claim 1 wherein said destination is a queue.

5. The method according to claim 1 wherein said destination is provided by an alias queue.

6. A computer program product comprising a non-transitory computer useable medium having a computer readable program, wherein the computer readable program when executed on a computer causes the computer to:

determine one or more messages stored in the destination, wherein each message comprises one or more message properties;

receive an access request for accessing the destination, wherein the access request comprises a requestor identifier;

identify a mapping table associated with the destination, wherein the mapping table comprises a set of requestor identifiers, each requestor identifier associated with a set of message selectors;

obtain from the mapping table a given set of message selectors associated with the requestor identifier comprised in the access request;

comparing the message properties of each message stored in the destination with the given set of message selectors;

return, as a response to said access request, any messages stored in the destination comprising the message properties matching the given set of message selectors; and

block access to any messages stored in the destination comprising message properties that fail to match the given set of message selectors.

7. The computer program product according to claim 6 wherein the computer readable program when executed on the computer further causes the computer to:

remove said returned messages from said destination.

8. The computer program product according to claim 6 wherein the set of message selectors is determined by an administrator for each requestor identifier in the mapping table.

9. The computer program product according to claim 6 wherein said destination is a queue.

10. The computer program product according to claim 6 wherein said destination is provided by an alias queue.