Patent ID: 7194472
Filing Date: 2007-03-20
Classification: G06F,Y10S

Abstract:
1. A method of extending role scope in a directory server system comprising: obtaining an updated tree structure comprising an extra scope by: a) associating an existing role entry in a tree structure with a first user entry in the tree structure, wherein a directory server interacts with entries in the tree structure, and wherein the existing role entry defines a role and has an associated scope in the tree structure based on the existing role entry's location in the tree structure according to a first predefined rule, said associating comprising attaching the role to the first user entry subject to a first condition comprising a role membership condition and the first user entry belonging to the associated scope, b) adding an attribute to the existing role entry having a special attribute name and being associated with an attribute value defining the extra scope in the tree structure for the existing role entry, wherein the attribute value identifies a designated location in the tree structure outside the existing role entry's associated scope, and further wherein the extra scope is based on the designated location according to a second predefined rule, and c) attaching the role of the existing role entry to a second user entry subject to a second condition comprising said role membership condition and the second user entry belonging to the extra scope; and performing a role operation associated with the updated tree structure in response to a request, wherein the role operation identifies that the second user entry possesses the role.