Patent ID: 7809749
Filing Date: 2010-10-05
Classification: G06F,H04L,Y10S

Abstract:
1. A computer network system having a plurality of users of the network system comprising: a server computer; a database management system; and a content management system configured to control access to a plurality of entities shareable by said users of said network system, the content management system configured to use an access control list (ACL) table having group ACL rules and user ACL rules for controlling access to the entities, comprising: means of providing a run-time compiled ACL table including means for building an initial version of the run-time compiled ACL table including rows based on the ACL table for all users included in the ACL table, the run-time compiled ACL table including resolved privilege rules for each of said users available at run-time; means of using said content management system configured, accessing user-selected ones of said entities based on said resolved privilege rules at said run-time compiled ACL table, wherein said run-time compiled ACL table enables said content management system to resolve said privilege rules without table joins by querying said run-time complied ACL table; means of maintaining said user ACL rules in said run-time compiled ACL table including: means selectively adding one or more user ACL rules including means for deleting rows from said run-time compiled ACL table based on group rules for the respective user and means for adding rows to the run-time compiled ACL table based on the added user ACL rule; means selectively updating a user ACL rule including means for deleting rows from the run-time compiled ACL table having a respective previously added user ACL rule; and means for adding rows to the run-time compiled ACL table based on the updated ACL rule; and means selectively deleting a user ACL rule including means for deleting rows from the run-time compiled ACL table having a respective previously added user ACL rule; and, means of maintaining said group ACL rules in said run-time compiled ACL table including means selectively adding a group ACL rule and means selectively updating a group ACL rule.