Method, apparatus and computer program product for providing object privilege modification

• US 8,190,636 B2
• Filed: 09/30/2008
• Issued: 05/29/2012
• Est. Priority Date: 09/30/2008
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Ekberg, Jan-Erik, Reshetova, Elena
• Primary Examiner(s): Al Hashemi, Sana
• Application Number:
  US12/242,281
• Publication Number:
  US 20100082679A1
• Time in Patent Office: 1,337 Days
• Field of Search: 707/791, 707/793, 707/810, 707/825, 707/783, 707/955, 707/960
• US Class Current: 707/783
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

An apparatus for providing object privilege modification may include a processor. The processor may be configured to receive an indication to modify at least one privilege associated with an object. The processor may be further configured to modify the at least one privilege associated with the object based at least in part on the indication and update a policy file based at least in part on the modified privilege associated with the object. The processor may be additionally configured to provide for an output of the object based at least in part on the modified privilege associated with the object. Associated methods and computer program products may also be provided.

Claims

1. A method comprising:

enabling a caged application to access an object by;

receiving an indication to modify at least one privilege associated with the object;

modifying the at least one privilege associated with the object, based at least in part on the indication and by associating the object with a virtual community location;

updating a policy file based at least in part on the modified privilege associated with the object; and

providing for an output of the object based at least in part on the modified privileged associated with the object.

2. The method of claim 1, wherein providing for an output of the object based at least in part on the modified privileged associated with the object comprises providing for at least one of access to or use of the object based at least in part on the modified privileged associated with the object.

3. The method of claim 2, wherein providing for at least one of access to or use of the object based at least in part on the modified privileged associated with the object comprises providing at least one subject at least one of access to or use of the object.

4. The method of claim 1, wherein receiving an indication to modify at least one privilege associated with an object comprises receiving an indication to modify at least one privilege associated with a data file.

5. The method of claim 1, wherein receiving an indication to modify at least one privilege associated with an object comprises receiving an indication to modify at least one privilege associated with a system resource.

6. The method of claim 1, wherein modifying the at least one privilege associated with the object based at least in part on the indication comprises reducing a privilege associated with the object.

7. The method of claim 1, wherein updating a policy file based at least in part on the modified privilege associated with the object comprises at least one of adding, deleting, or modifying an entry provided in the policy file.

8. The method of claim 1, wherein in an instance in which the object is associated with the virtual community location, one or more caged applications may access the object.

9. The method of claim 8, wherein associating the object to a virtual community location comprises associating the object to a virtual community location based at least on at least one of a plurality of criteria.

10. A computer program product comprising:

at least one computer-readable non-transitory storage medium having program code portions stored therein, the program code which when executed by an apparatus cause the apparatus at least to;

enable a caged application to access an object by;

receiving an indication to modify at least one privilege associated with the object;

modifying the at least one privilege associated with the object, based at least in part on the indication and by associating the object with a virtual community location;

updating a policy file based at least in part on the modified privilege associated with the object; and

providing for an output of the object based at least in part on the modified privileged associated with the object.

11. The computer program product of claim 10, wherein providing for an output of the object based at least in part on the modified privileged associated with the object comprises instructions for providing for at least one of access to or use of the object based at least in part on the modified privileged associated with the object.

13. The computer program product of claim 10, wherein the receiving an indication to modify at least one privilege associated with an object comprises instructions for receiving an indication to modify at least one privilege associated with a data file.

14. The computer program product of claim 10,

wherein receiving an indication to modify at least one privilege associated with an object comprises instructions for receiving an indication to modify at least one privilege associated with a system resource.

15. The computer program product of claim 10, wherein modifying the at least one privilege associated with the object based at least in part on the indication comprises instructions for reducing a privilege associated with the object.

16. The computer program product of claim 10, wherein updating a policy file based at least in part on the modified privilege associated with the object comprises instructions for at least one of adding, deleting, or modifying an entry provided in the policy file.

17. The computer program product of claim 10, wherein in an instance in which the object is associated with the virtual community location, one or more caged applications may access the object.

18. The computer program product of claim 17, wherein the instructions for associating the object to a virtual community location comprises instructions for associating the object to a virtual community location based at least in part at least one of a plurality of criteria.

12. The computer program product 11, wherein the instructions for providing for at least one of access to or use of the object based at least in part on the modified privileged associated with the object comprises instructions for providing at least one subject at least one of access to or use of the object.

19. An apparatus comprising:

a processor configured; and

a memory including computer program code, the memory and the computer program code configured to, with the processor, cause the apparatus to at least;

receive an indication to modify at least one privilege associated with the object;

modify the at least one privilege associated with the object, based at least in part on the indication and by associating the object with a virtual community location;

update a policy file based at least in part on the modified privilege associated with the object; and

provide for an output of the object based at least in part on the modified privilege associated with the object.

20. The apparatus of claim 19, wherein the memory including the computer program code is further configured to. with the processor, cause the apparatus to provide for an output of the object based at least in part on the modified privileged associated with the object comprises the processor configured to provide for at least one of access to or use of the object based at least in part on the modified privileged associated with the object.

21. The apparatus of claim 20, wherein the memory including the computer program code is further configured to, with the processor, cause the apparatus to provide for at least one of access to or use of the object based at least in part on the modified privileged associated with the object comprises the processor configured to provide at least one subject at least one of access to or use of the object.

22. The apparatus of claim 19, wherein the memory including the computer program code is further configured to, with the processor, cause the apparatus to modify at least one privilege associated with an object comprises the processor configured to receive an indication to modify at least one privilege associated with a data file.

23. The apparatus of claim 19, wherein the memory including the computer program code is further configured to, with the processor, cause the apparatus to modify at least one privilege associated with an object comprises the processor configured to receive an indication to modify at least one privilege associated with a system resource.

24. The apparatus of claim 19, wherein the memory including the computer program code is further configured to, with the processor, cause the apparatus to modify the at least one privilege associated with the object based at least in part on the indication comprises the processor configured to reduce a privilege associated with the object.

25. The apparatus of claim 19, wherein the memory including the computer program code is further configured to, with the processor, cause the apparatus to update a policy file based at least in part on the modified privilege associated with the object comprises the processor configured to at least one of add, delete, or modify an entry provided in the policy file.

26. The apparatus of claim 19, wherein in an instance in which the object is associated with the virtual community location, one or more caged applications may access the object.

27. The apparatus of claim 26, wherein the memory including the computer program code is further configured to, with the processor, cause the apparatus to associate the object to a virtual community location comprises the processor configured to associate the object to a virtual community location based at least on at least one of a plurality of criteria.

28. An apparatus comprising:

means for enabling a caged application to access an object by;

means for receiving an indication to modify at least one privilege associated with the object;

means for modifying the at least one privilege associated with the object based at least in part on the indication and by associating the object with a virtual community location;

means for updating a policy file based at least in part on the modified privilege associated with the object; and

means for providing for an output of the object based at least in part on the modified privileged associated with the object.