Patent ID: 7222369
Filing Date: 2007-05-22
Classification: G06F,H04L

Abstract:
1. A method comprising: storing a plurality of role data entries on a storage device coupled to a computer system, a role data entry corresponding to an assigned role of at least one of a plurality of individuals, the assigned role corresponding to an enterprise with which the individual is associated, and the assigned role corresponding to a set of resources accessible through the computer system; receiving at the computer a resource request from one of the individuals, the resource request indicating a requested resource; determining based on an assignment of the assigned role to the requesting individual whether the requested resource is included in the set of accessible resources corresponding to the assigned role of the requesting individual, the assignment of the assigned role being defined prior to receiving the resource request; and selectively permitting access to the requested resource if the resource is determined to be in the set of resources corresponding to the assigned role of the requesting individual; and, wherein: the requested resource is a shared resource from a common set of resources that are accessible to other individuals; access to the shared resource for the other individuals is based on an assignment of a second role to the other individuals, the second role being the assigned role of the requesting individual or another role; a first combination of shared resources accessible to the requesting individual is the same as a second combination of shared resources accessible to another individual having same assigned roles; and the first and second combination are the same due to selective permission of access being based on assignments of roles, and the assigned roles of the requesting individual and the another individual being the same.