Patent ID: 7703135

Claim:
A method of managing identities of processes of a computing environment, said method comprising: initiating by a server process in a server address space creation of a client process in a client address space to service a request from a client, wherein the client process executes the server process; providing a multi-identity security environment for the client process, the multi-identity security environment is a nested security environment that includes a user identity of the client process and a user identity of the server process; using the multi-identity security environment to determine whether the client has authority to access a protected resource, said using comprising: determining whether a user identity is on an access list for the protected resource, wherein the user identity is the user identity of the client process or the user identity of the server process, and wherein another user identity is the other of the user identity of the client process and the user identity of the server process; granting the client access to the protected resource via the user identity, in response to the determining indicating the user identity is on the access list; deciding, in response to the user identity not being on the access list, whether the another user identity is on the access list; granting the client access to the protected resource via the another user identity, in response to the deciding indicating the another user identity is on the access list; and providing an audit record, in response to access being granted, that indicates which user identity of the multi-identity security environment for the client process provided access, wherein the audit record indicates whether access was granted via the user identity of the client process or whether access was granted via the user identity of the server process.