Patent ID: 7124132

Claim:
A process for specifying an ACI domain entry that controls access to a resource in a computer environment, comprising the steps of: providing an access control command that is capable of being defined by a system administrator; said access control command specifies the name of said resource, wherein said resource is in a directory structure; said access control command lists a target scope value; wherein said target scope value specifies the scope of access to be granted to a user and allows said ACI domain entry to be restricted to a specific range, wherein said range comprises a node; wherein said access control command specifies the type of access to be granted to a user; wherein said access control command is expressed in an LDAP Universal Resource Locator (URL) standardized format in an ACI rule; wherein said specific range specifies a portion of a tree structure; wherein said access control command specifies the required user attributes for access to said resource; and wherein a directory server matches said required attributes with the accessing user's attributes and grants said type of access only if the user has said required attributes.