Patent ID: 7870270
Filing Date: 2011-01-11
Classification: G06F

Abstract:
1. A computer-implemented method for providing capabilities management and user administration, the method comprising the steps, performed by a computer, of: assigning a predefined profile to a first user, the profile comprising a predetermined plurality of roles and a first privilege, the first privilege comprising a first function and a first target role set; receiving a first request from the first user to log in; in response to the first request, assigning one of the roles as a first role to the first user; receiving a second request from the first user to access a first function of an application; in response to the second request, granting access to the first function of the application based on the first role; receiving a third request from the first user to perform the first function of the first privilege on a second user; in response to the third request, performing the first function of the first privilege on the second user when the first target role set of the first privilege contains a corresponding matching role for each role of the profile of the second user; receiving a fourth request from the first user to change roles; and in response to the fourth request, revoking the first role from the first user and assigning one of the plurality of roles of the first user as a second role to the first user, wherein the profile continues to comprise the revoked role.