Patent ID: 8745087
Filing Date: 2014-06-03
Classification: G06F,G06Q

Abstract:
1. A computer-based method comprising: creating, by a computer for implementing a role-based system, a Login-ID within a data structure; creating, by said computer, a first role and a second role within said data structure; receiving, by said computer and from a requestor, a request to assign said first role to said Login-ID; assigning, by said computer, said Login-ID as a role owner of said first role; receiving, by said computer, a login request from said Login-ID; enabling, by said computer, first role owner capabilities for said Login-ID, wherein said first role owner capabilities comprise at least one of defining the role membership of said first role, defining role attributes of said first role, delegating role owner capabilities for said first role; assigning, by said computer and in response to a request from said Login-ID, said Login-ID as a role owner of said second role; receiving, by said computer and from said Login-ID, a request to deactivate said first role; and disabling, by said computer and in response to said request, said first role capabilities for said Login-ID, and wherein said Login-ID remains logged on with said second role, wherein said disabling is effective until at least one of a request is received to enable said first role capabilities and said Login-ID logs off.