Patent ID: 7730094
Filing Date: 2010-06-01
Classification: G06F,H04L,Y10S

Abstract:
1. A method for determining access rights to a range of objects by a range of users through scope information, the method performed by a computer system including system memory and one or more processors, the method comprising: receiving, from a first user, a request to access a first resource; determining that a scope of a first access control metadata element encompasses the first resource, wherein the first access control metadata element includes: determining that a scope of a second access control metadata element encompasses the first resource, wherein the second access control metadata element includes: determining that the first user is among the plurality of users to which the first access control metadata element applies as defined by the third set of one or more XML statements of the first access control metadata element; in response to determining that the first access right supersedes the second access right, applying the first access right to the access request from the first user.