Patent ID: 8244745

Claim:
A method of operating an information management system comprising: providing a plurality of devices coupled to a network of the information management system, wherein a plurality of users can log into the information management system using the devices; receiving requests from the plurality of users to log into the information management system at the plurality of devices, wherein each of the requests from the plurality of users comprises a user identifier and a device identifier; providing to each device of the plurality of devices a plurality of rules to manage information of the system based on the plurality of users at each device of the plurality of devices, wherein the rules are applicable to a plurality of target profiles, each target profile having a set of target attributes, wherein each rule comprises a conditional statement having an abstraction and allowing access to information when the conditional statement is satisfied, and each abstraction has a corresponding definition statement stored separately from the rule; collecting usage information comprising denials of access to information by users using the plurality of devices, wherein usage information comprises a time the usage information occurs, an event type of the usage information, and a resource information of the usage information; and analyzing the usage information to detect when a user has been denied access to information by a rule more than X times during a Y time period, where X divided by Y is a value Z.