Patent ID: 7886053

Claim:
A computer implemented method for allowing self-granting of access rights to network resources, the method comprising the steps of: receiving, by a computer, an access control policy specifying which of a plurality of users have what access rights to which of a plurality of network resources, the access control policy specifying that at least one user has self management rights to at least one network resource; receiving, by a computer, a request from a user to access at least one network resource to which the user does not have conventional access rights; determining, by a computer, based on the access control policy, that the user has self management rights to the at least one network resource; determining, by a computer, whether criteria specified by the self management rights for accessing the at least one network resource are met; and determining, by a computer, whether to grant the user access rights to the at least one network resource responsive to whether criteria specified by the self management rights for accessing the at least one network resource are met.