Patent ID: 7284265
Filing Date: 2007-10-16
Classification: G06F

Abstract:
1. A computer implemented method for authorizing access to an entity in a content management system by a user by reference to a single table which compiles access control information from a plurality of tables including an access control list table and a table of sets of user privileges, comprising: binding said access control list table to each said entity; specifying for said user a set of user privileges; intersecting said access control list and said set of user privileges in a computer generated access control list (ACL) table, columns of said table including user kind, user identifier, ACL code, a privilege set comprising a privilege set code and a privilege definition code, and a group user identifier; incrementally refreshing said computer generated ACL table responsive to run time modification of said access control list or set of user privileges, said incrementally refreshing including, responsive to modification of said privilege set, accessing during on-line execution to affect only rows of said computer generated ACL table having a corresponding privilege set code.