Method, computer program product, and system for global refresh of cached user security profiles

• US 20040039740A1
• Filed: 08/23/2002
• Published: 02/26/2004
• Est. Priority Date: 08/23/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Yuan, Jack Chiu-Chiu, Artobello, Michael R., Tollerud, Andrew D., Birbo, Getachew G., Sherrill, Sandra L., Zimmer, James E., Hsiao, Joyce Yuan-Sheng
• Granted Patent: US 7,107,422 B2
• Time in Patent Office: Days
• US Class Current: 707/9
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: Y10S 707/99938 Concurrency, e.g. lock management in shared database
• CPC Class Codes: Y10S 707/99952 Coherency, e.g. same view to multiple users

Abstract

A master dynamic aging value associated with the client is calculated responsive to an operator command to perform the global refresh. When receiving a request from a user associated with the client, a sub-dynamic aging value associated with a cached user security profile for the user is compared to the master dynamic aging value. If the sub-dynamic aging value is not equal to the master dynamic aging value, then the cached user security profile is refreshed.

Claims

1. A computer implemented method for performing a global refresh of cached user security profiles associated with a client in a database management system comprising:

calculating a master dynamic aging value associated with said client responsive to an operator command to perform said global refresh;

receiving a request from a user associated with said client;

comparing a sub-dynamic aging value associated with a cached user security profile for said user with said master dynamic aging value; and

refreshing said cached user security profile if said sub-dynamic aging value is not equal to said master dynamic aging value.

2. The method of claim 1 wherein said database management system is IMS.

3. The method of claim 2 wherein said master dynamic aging value is calculated by subtracting a subsystem block creation time stamp from a current time stamp.

4. The method of claim 3 wherein said calculated master dynamic aging value is saved in less bytes of memory than the number of bytes of memory required to save said current time stamp.

5. The method of claim 1 wherein said refreshing step comprises copying said master dynamic aging value to said sub-dynamic aging value and then copying source security information from permanent storage to said cached user security profile.

6. The method of claim 1 further comprising creating said cached user security profile if said cached user security profile does not exist.

7. The method of claim 5 further comprising re-comparing said master dynamic aging value to said sub-dynamic aging value after said refreshing step, and repeating said refreshing step if said master dynamic aging value is not equal to said sub-dynamic aging value.

8. A method for performing a virtual global refresh of cached user security profiles associated with a client in a database management system comprising:

composing an operator command, said operator command comprising an indication that a global refresh of said cached user security profiles is required; and

utilizing said operator command to invoke a dynamic aging aware global refresh routine, whereby, responsive to said operator command, said dynamic aging aware global refresh routine completes said virtual global refresh and each of said cached user security profiles is refreshed prior to their use in an authorization check occurring subsequent to said virtual global refresh completion.

9. A computer system for performing a global refresh of cached user security profiles associated with a client in a database management system, said computer system comprising:

a computer;

means for calculating a master dynamic aging value associated with said client responsive to an operator command to perform said global refresh;

means for receiving a request from a user associated with said client;

means for comparing a sub-dynamic aging value associated with a cached user security profile for said user with said master dynamic aging value; and

means for refreshing said cached user security profile if said sub-dynamic aging value is not equal to said master dynamic aging value.

10. The computer system of claim 9 wherein said database management system is IMS.

11. The computer system of claim 10 wherein said master dynamic aging value is calculated by subtracting a subsystem block creation time stamp from a current time stamp.

12. The computer system of claim 11 wherein said calculated master dynamic aging value is saved in less bytes of memory than the number of bytes of memory required to save said current time stamp.

13. The computer system of claim 9 wherein said refreshing means comprises copying said master dynamic aging value to said sub-dynamic aging value and then copying source security information from permanent storage to said cached user security profile.

14. The computer system of claim 9 further comprising means for creating said cached user security profile if said cached user security profile does not exist.

15. The computer system of claim 13 further comprising means for re-comparing said master dynamic aging value to said sub-dynamic aging value and repeating said refreshing means if said master dynamic aging value is not equal to said sub-dynamic aging value.

16. An article of manufacture for use in a computer system tangibly embodying computer instructions executable by said computer system to perform process steps for performing a global refresh of cached user security profiles associated with a client in a database management system, said process steps comprising:

calculating a master dynamic aging value associated with said client responsive to an operator command to perform said global refresh;

receiving a request from a user associated with said client;

comparing a sub-dynamic aging value associated with a cached user security profile for said user with said master dynamic aging value; and

refreshing said cached user security profile if said sub-dynamic aging value is not equal to said master dynamic aging value.

17. The article of manufacture of claim 16 wherein said database management system is IMS.

18. The article of manufacture of claim 17 wherein said master dynamic aging value is calculated by subtracting a subsystem block creation time stamp from a current time stamp.

19. The article of manufacture of claim 18 wherein said calculated master dynamic aging value is saved in less bytes of memory than the number of bytes of memory required to save said current time stamp.

20. The article of manufacture of claim 16 wherein said refreshing step comprises copying said master dynamic aging value to said sub-dynamic aging value and then copying source security information from permanent storage to said cached user security profile.

21. The article of manufacture of claim 16 further comprising creating said cached user security profile if said cached user security profile does not exist.

22. The article of manufacture of claim 20 further comprising re-comparing said master dynamic aging value to said sub-dynamic aging value after said refreshing step, and repeating said refreshing step if said master dynamic aging value is not equal to said sub-dynamic aging value.