Patent ID: 6950819

Claim:
A process for a simplified access control language that controls access to directory entries in a computer environment, comprising the steps of: a system administrator creating a read access control list (ACL) command for a user, wherein said read access control list command lists a set of Lightweight Directory Access Protocol (LDAP) user attributes that are created and controlled by said administrator; said user applying said read access control list command by listing a subset from said system administrator defined LDAP user attributes for authorizing read access to said subset of user attributes to one or more other users, and by listing user identifications of said one or more other users such that said one or more other users are authorized to have read access to said subset of said system administrator defined LDAP user attributes; storing said read access control list command in a directory, said directory containing said user attributes; and responsive to one or more other users accessing any of said user attributes in said directory, said read access control list command referring to said list of user identifications at runtime thereby allowing said one or more other users read access to said system administrator defined LDAP user attributes.