Patent ID: 8646027

Claim:
In a computer architecture comprising at least a processor, a method for determining access rights of a content recipient to access content, the method comprising: an act of receiving content, the received content having an existing access policy, the policy being associated with one or more sufficiency factors that are used to determine whether an access policy is sufficiently expressed with respect to actions that can be performed on the content by the content's intended recipient; an act of automatically determining that at least one of the sufficiency factors associated with the access policy is absent for the received content, indicating that the access rights of the intended recipient of the received content are not sufficiently expressed in the existing access policy; an act of the processor automatically triggering a workflow to evaluate the access rights of the intended recipient in response to determining that the access rights of the intended recipient are not sufficiently expressed in the existing access policy, the workflow at least partially automating the evaluation such that human intervention associated with evaluating access rights for intended users is reduced; an act of providing the triggered workflow with relevant inputs for evaluating access rights of the intended recipient in the received content; an act of receiving an indication from the workflow, the indication more fully expressing the access rights of the intended recipient in the content; and an act of providing the intended recipient with access to the received content in accordance with the more fully expressed rights in the received indication.