Patent ID: 6292798
Filing Date: 2001-09-18
Classification: G06F,Y10S

Abstract:
A method for controlling access to data resources, comprising the steps of:a) providing a first directory that relates data objects to object groups, each object group comprising data objects having a common assigned security attribute;b) providing a second directory that relates functions to function groups, each function group comprising functions having a common execution attribute;c) providing a third directory that relates users to user groups, each user group comprising users having a common user attribute;d) providing a permission directory that lists allowed combinations of (user group, function group, object group); ande) responding to an access request from a user to perform a function with respect to an object, by determining from said first, second and third directories, an object group, function group and user group that correspond to said object, function and user, respectively, and determining from said permission directory if said access request is to be allowed or not allowed.