Patent ID: 8595821
Filing Date: 2013-11-26
Classification: G06F

Abstract:
1. A method comprising: loading domain access rules into operating system space of a receiving node, wherein the domain access rules include a plurality of entries each of which indicate an object, permitted domains for the object, denied domains for the object, and a flag, wherein the flag indicates whether membership in all of the permitted domains is required for the corresponding object; loading a domain database into the operating system space of the receiving node, wherein the domain database indicates a plurality of domains and user membership in the domains; determining an object and a user indicated in a cluster message, a user indicated in the cluster message, and an object indicated in the cluster message responsive to the receiving node receiving the cluster message from a sending node, wherein each of the one or more domains is a representation of an organizational entity; determining, with the domain database, that the user indicated in the cluster message is member of one or more domains of the plurality of domains; determining that a first entry of the plurality of entries in the domain access rules indicates the object in the cluster message; determining whether the first entry has the flag set; performing an operation in accordance with the cluster message if the one or more domains in which the user is a member includes all of the permitted domains of the first entry and the flag is set in the first entry; and denying the cluster message if the one or more domains in which the user is a member does not include all of the permitted domains of the first entry and the flag is set in the first entry.