Patent ID: 7124192
Filing Date: 2006-10-17
Classification: H04L,Y10S

Abstract:
1. A computer-implemented method for enforcing role-permission security administration using security objects stored in a security repository, comprising steps of: storing, in a security repository, a plurality of security objects, wherein each of the security objects corresponds to a single role; specifying, in each of the security objects, all permissions granted to the corresponding role, wherein each of the specified permissions identifies at least one resource and, for each resource, at least one action that can be performed on the resource by subjects granted the corresponding role, wherein selected ones of the resources are identified in the specified permissions of more than one of the security objects and wherein the specified permissions for at least one of the security objects identifies a plurality of resources and for each of the plurality of resources, at least one of the actions; and using the stored security objects to determine whether run-time requests for performing actions on the resources can be granted.