Patent ID: 7409391
Filing Date: 2008-08-05
Classification: G06F,Y10S

Abstract:
1. A method of determining authorization for actions, comprising: defining a plurality of groups; defining a plurality of action types and corresponding levels of authorization for each of the groups; for at least a subset of the action types, defining a plurality of devices on which corresponding actions may be performed, wherein at least some of the devices correspond to portions of a data storage device; and for at least one of the groups, determining authorization for a requested action, including determining if the requested action corresponds to the plurality of devices, wherein if the action corresponds to one of the devices, authorization is determined by first examining the levels of authorization for action types corresponding to the at least one group and then by examining the one of devices corresponding to the requested action and by examining if the at least one group is authorized to perform actions on the one of the devices, and wherein if the action does not correspond to one of the devices, authorization is determined by examining the levels of authorization for action types corresponding to the at least one group without examining any of the plurality of devices.