Patent ID: 6253251
Filing Date: 2001-06-26
Classification: G06F

Abstract:
A process, for use in an object oriented distributed computing environment having a plurality of objects and a plurality of methods to be performed on the objects, for determining an authorization for invoking a given method on a given object, the process comprising:creating a finite set of access rights required for authorization to invoke any of the methods;classifying the methods into a finite set of groups wherein each group of methods has a separate one of the finite set of access rights and each method within each group has a method required access rights set assigned from the set of access rights wherein the finite set of access rights comprises a two part structure wherein the first part identifies an access right type and a second part identifies a set of permissions pertaining to the access right type wherein the type dictates the semantics of the set of permissions; andresolving an access right authorization credential by identifying the appropriate group of methods based upon a content of the two part structure indicating a desired set of access rights and invoking a desired method within the identified group if the method required access rights set of the desired method matches the access right authorization credential.