Patent ID: 7761905
Filing Date: 2010-07-20
Classification: G06F,Y10S

Abstract:
1. A method for assigning to at least two subjects access rights to at least two objects in a computer system, said method comprising: identifying all access rights which have been granted to said each subject, wherein said all access rights have a respective level selected from ordered levels consisting of a read level, an update level, and an alter level, the read level being a lowest level of said all access rights, the alter level being a highest level of said all access rights, said all access rights including: after said identifying said all access rights, identifying, by a computer, at least one new role, said identifying said at least one new role comprising: granting each role of said at least one new role access rights to each object of said at least two objects; assigning said each subject to a role of said at least one new role; and deleting said at least one existing role.