Patent ID: 7761404

Claim:
Method for managing privileges, comprising: storing system defined and user defined privilege definition codes in a database table, with a plurality of said codes reserved to said system defined privilege definition codes, and codes beyond said plurality reserved to said user defined privilege definition codes; executing, by operation of one or more computer processors, a database stored procedure for modifying a user defined privilege defined by at least one of the stored user defined privilege definition codes; selectively updating: (i) a privilege definition name of the user defined privilege and (ii) a privilege definition description of the user defined privilege, responsive to a user request to update the user defined privilege and via calling the database stored procedure; and responsive to a request from a user to access a controlled entity for a specific function, allowing said user to access said controlled entity provided that: (i) a user privilege code established for said user and (ii) a privilege set referenced for said user by an access control list coupled to said controlled entity, both authorize said specific function, wherein said privilege set includes at least one said privilege definition code.