Patent ID: 8601539
Filing Date: 2013-12-03
Classification: G06F,H04L

Abstract:
1. A system for managing user permissions in a computer network environment, the system comprising: a collection server; a first computing device of a plurality of network devices communicatively coupled to the collection server, the first computing device comprising: an at least two-tier distributed index structure comprising an aggregate index stored on the collection server, the aggregate index associating each of the first and second SIDs with the first computing device and the associated first and second users but not associating the first and second SIDs with the first and second resources, and a first SID index stored on the first computing device, the first SID index associating the first and second SIDs with, respectively, the first and second resources, the aggregate index further associating a third SID associated with at least a third user of a second computing device of the plurality of network devices; an agent module that monitors the first and second resources to determine changes in the first and second permissions, wherein upon detecting a change to the first and second permissions, the agent module is configured to update the first SID index, and wherein the agent module is further configured to transmit incremental information about the change to the aggregate index; and a user interface that displays the names of multiple computing devices, names of users and SIDs associated therewith, and permissions associated with resources stored in the aggregate index.