Patent ID: 9697373
Date: 2017-07-04
CPC Classifications: G06F

Claim:
1. A computer-implemented method to facilitate applying existing access control lists (ACLs) to new resources while restricting ACL modification, the computer-implemented method comprising: storing first and second resources by a content management system (CMS) having an associated graphical user interface and configured to enforce each access control list (ACL) type selected from a system ACL and a custom ACL, each ACL type identifiable via a respective flag; responsive to a request received from a first user via the user interface, creating an ACL having a name and an associated set of privileges and designating the first user as an owner of the ACL, the set of privileges including at least two distinct privileges selected from a read privilege, a list privilege, an assignment privilege, a modification privilege, a delete privilege, and a grant privilege, wherein the ACL defines access rights applicable to at least two resource types selected from a document, an application, an image file, a text file, an audio file, and a video file; upon receiving, from the owner of the ACL, a request to assign the ACL to the first resource, assigning the ACL to the first resource; subsequent to the assigning of the ACL to the first resource, enforcing, by the CMS and based on the ACL, access rights for the first resource; upon receiving, from the owner of the ACL, a request to grant a second user a specified privilege consisting of the assignment privilege for the ACL, granting the specified privilege to the second user; subsequent to the granting of the specified privilege, and responsive to receiving, from the second user, a request to assign the ACL to the second resource, determining whether the second user has the assignment privilege for the ACL; upon determining that the second user has the assignment privilege for the ACL, assigning the ACL to the second resource by the CMS when executed by one or more computer processors, and restricting the second user from modifying the ACL; subsequent to the assigning of the ACL to the second resource, enforcing, by the CMS and based on the ACL, access rights for the first and second resources; and responsive to a search request specifying a search criterion selected from the ACL name, an ACL owner, and an ACL keyword, generating, by the CMS, a set of search results including at least one ACL matching the search criterion, wherein the set of search results is output via the user interface.