System and method for virtual content repository entitlements

• US 20050251502A1
• Filed: 08/10/2004
• Published: 11/10/2005
• Est. Priority Date: 04/13/2004
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: BEA Systems Incorporated (Oracle Corporation)
• Inventors: Owen, James, Posner, Brad, Patadia, Jalpesh, Toussaint, Alexander, McCauley, Rodney
• Granted Patent: US 7,236,975 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

A system and method for controlling access to a node in a virtual content repository (VCR), comprising, integrating the plurality of repositories into the VCR, storing the node in the VCR, associating with the node at least one of: a role and a policy, wherein the node is part of a hierarchical namespace that encompasses the plurality of repositories, and wherein the role and/or the policy can control access to the node.

Claims

1. A method for controlling access to a node in a virtual content repository (VCR), comprising:

integrating the plurality of repositories into the VCR;

storing the node in the VCR;

associating with the node at least one of;

a role and a policy;

wherein the node is part of a hierarchical namespace that encompasses the plurality of repositories; and

wherein the role and/or the policy can control access to the node.

2. The method of claim 1 wherein:

the access can include a set of one or more capabilities.

3. The method of claim 1, further comprising:

associating with a property of the node at least one of;

a role and a policy.

4. The method of claim 1 wherein:

the node can be one of;

a content node, a hierarchy node, and a schema node.

5. The method of claim 1 wherein:

a node property can inherit the role and/or the schema from the node.

6. The method of claim 1 wherein:

the role and/or the policy are inherited from a parent node in the namespace.

7. The method of claim 1 wherein:

the role and/or the policy are taken from a schema node.

8. The method of claim 1 wherein:

a role is a dynamic set of users.

9. The method of claim 1 wherein:

a policy can be used to determine if a privilege is granted.

10. The method of claim 1, further comprising:

implementing a service provider interface (SPI) for each of the plurality of repositories wherein the SPI is compatible with the VCR.

12. The system of claim 1 wherein:

the access can include a set of one or more capabilities.

22. The machine readable medium of claim 1 wherein:

the access can include a set of one or more capabilities.

11. A system for controlling access to a node wherein the node is associated with a role and/or a policy, comprising:

a plurality of repositories;

a virtual content repository (VCR) to integrate the plurality of repositories, wherein the node is stored in the VCR;

a hierarchical namespace that encompasses the plurality of repositories;

wherein the node is part of the namespace; and

wherein the role and/or the policy can control access to the node.

13. The system of claim 11 wherein:

a property of the node is associated with at least one of;

a role and a policy.

14. The system of claim 11 wherein:

the node can be one of;

a content node, a hierarchy node, and a schema node.

15. The system of claim 11 wherein:

a node property can inherit the role and/or the schema from the node.

16. The system of claim 11 wherein:

the role and/or the policy are inherited from a parent node in the namespace.

17. The system of claim 11 wherein:

the role and/or the policy are taken from a schema node.

18. The system of claim 11 wherein:

a role is a dynamic set of users.

19. The system of claim 11 wherein:

a policy can be used to determine if a privilege is granted.

20. The system of claim 11, further comprising:

a service provider interface (SPI) implemented by each of the plurality of repositories wherein the SPI is compatible with the VCR.

21. A machine readable medium having instructions stored thereon that when executed by one or more processors cause a system to:

integrate a plurality of repositories into a virtual content repository (VCR);

store a node in the VCR;

associate with the node at least one of;

a role and a policy;

wherein the node is part of a hierarchical namespace that encompasses the plurality of repositories; and

wherein the role and/or the policy can control access to the node.

23. The machine readable medium of claim 21, further comprising instructions that when executed cause the system to:

associate with a property of the node at least one of;

a role and a policy.

24. The machine readable medium of claim 21 wherein:

the node can be one of;

a content node, a hierarchy node, and a schema node.

25. The machine readable medium of claim 21 wherein:

a node property can inherit the role and/or the schema from the node.

26. The machine readable medium of claim 21 wherein:

the role and/or the policy are inherited from a parent node in the namespace.

27. The machine readable medium of claim 21 wherein:

the role and/or the policy are taken from a schema node.

28. The machine readable medium of claim 21 wherein:

a role is a dynamic set of users.

29. The machine readable medium of claim 21 wherein:

a policy can be used to determine if a privilege is granted.

30. The machine readable medium of claim 21, further comprising instructions that when executed cause the system to:

implement a service provider interface (SPI) for each of the plurality of repositories wherein the SPI is compatible with the VCR.

31. A computer data signal embodied in a transmission medium, comprising:

a code segment including instructions to integrate a plurality of repositories into a virtual content repository (VCR);

a code segment including instructions to store a node in the VCR;

a code segment including instructions to associate with the node at least one of;

a role and a policy;

wherein the node is part of a hierarchical namespace that encompasses the plurality of repositories; and

wherein the role and/or the policy can control access to the node.