Managing user permissions in a computer system

• US 20070079385A1
• Filed: 09/14/2006
• Published: 04/05/2007
• Est. Priority Date: 09/22/2005
• Status: Abandoned Application

• Current Assignee: Software Imaging Group Limited
• Original Assignee: Software 2000 Ltd. (Hancom Inc.)
• Inventors: Williams, Jonathan, Soord, Geoffrey, Gibbons, Edwin
• Application Number:
  US11/520,758
• Publication Number:
  US 20070079385A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A method of operating a printer coupled to a computer, the method comprising associating one or more permissions of a printer driver resident on the computer with an operating system managed object and, when an attempt is made to print on said print device or a User Interface of the printer driver opened, setting the status of said permissions according to one or more security settings of the operating system managed object.

Claims

1. A method of specifying and controlling user permissions for a software entity which can be run on a computer system, the method comprising associating one or more permissions of the software entity with an operating system managed object.

2. A method according to claim 1, wherein said permission is one of Allow or Deny.

3. A method according to claim 1 or 2, wherein said operating system managed object is one of;

pipes, queues, ports, flags, shared memory, files, directories.

4. A method according to claim 1 or 2, wherein said operating system managed object is an extended existing manageable object supported within the operating system.

5. A method according to claim 1 or 2, wherein said operating system managed object is a file, and the user right of the file used to specify the software entity permission is a read or read and execute right.

6. A method according to claim 1, wherein said computer system is a client computer system coupled to a communication network, with the network being managed by a network server.

7. A method according to claim 6, wherein the operating system managed object associated with the software entity permission(s) is stored at the network server.

8. A method according to claim 7 and comprising, upon installation and/or use of the software entity, communicating between that entity and the network server to identify to the software entity the status of a permission.

9. A method according to claim 1, wherein the status of a permission, controls access to a function performed by the software entity.

10. A method according to claim 1, wherein the status of a permission determines the state of a User Interface for controlling the software entity.

11. A method according to claim 1, wherein the status of a permission determines the access right(s) to particular data in a datastore for use by the software entity.

12. A method according to claim 1, wherein the status of a permission determines the access right(s) to particular data in a datastore for controlling the software entity.

13. A method according to claim 1, wherein the status of a permission determines the access right(s) to create, manage, or access particular data in a datastore.

14. A method according to claim 1, wherein said software entity is a printer driver.

15. A method according to claim 14, wherein said computer system is coupled to a printing device controlled by the printer driver.

16. A method according to claim 1, wherein said software entity is a management application.

20. A computer programmed to implement the method of claim 1 or 17.

17. A method of operating a printing device coupled to a computer system, the method comprising associating one or more permissions of a printer driver resident on the computer system with an operating system managed object and, when an attempt is made to print on said print device or a User Interface of the printer driver opened, setting the status of said permissions according to one or more security settings of the operating system managed object.

18. A method according to claim 17, wherein said operating system managed object is stored at a network server coupled to said computer system via a communications network.

19. A method according to claim 18, wherein said step of setting the status of said permission(s) comprises attempting to access said object from said computer system via said network, and, if the object can be accessed, the status of the permission is set to allowed, and, if the object cannot be accessed, the status of the permission is set to denied.