Patent ID: 8769653

Claim:
A method of providing a unified access control for a plurality of composed services in a distributed computing environment, the method comprising: acquiring a first role of a user in a first composed service; sending an invoking request by a processing unit of the first composed service to a second composed service; receiving the first role of the user in the first composed service and predefined role-role mapping relationships based on the invoking request; determining a second role of the user in the second composed service according to the first role of the user in the first composed service and the predefined role-role mapping relationships, wherein the second role is further determined based on determining that is plurality of the predefined role-role mapping relationships are associated with the first role, wherein each of the plurality of the predefined role-role mapping relationships maps the first role of the user in the first composed service to at least two different roles of the user in the second composed service: selecting one of the plurality of the predefined role-role mapping relationships based on a current temporal condition satisfying a temporal constraint associated with the one of the plurality of the predefined role-role mapping relationships, and a priority ranking associated with the one of the plurality of the predefined role-role mapping relationships being higher than a priority ranking associated with a remaining set of the plurality of the predefined role-role mapping relationships; determining the second role from the one of the plurality of the predefined role-role mapping relationships that has been selected; and sending the determined second role in the second composed service to the second composed service.