Patent ID: 8635707

Claim:
A computer-implemented method, comprising: managing object access in a hierarchical object model comprising a plurality of objects, wherein the objects in the hierarchical object model comprises object information which includes attributes describing different aspects of the object and methods that can be invoked to perform operations on the object; receiving a request at a reference monitor in a computer system, wherein the request comprises an object type, access information, information relating to an action associated with the object in the hierarchical object model, and credentials associated with a user comprising a role and a proficiency level of the user, wherein the role and the proficiency level can control access to an object and object information associated with the object; based on the object type and the access information, obtaining template information at the reference monitor from a template within a template library in the computer system, wherein the template defines a role having associated proficiency levels for the role and specifies the object and object information accessible for each proficiency level; providing, from the reference monitor to a management request engine in the computer system, the template information, the information relating to the action associated with the object in the hierarchical object model and the credentials associated with the user comprising the role and proficiency level of the user; and determining at the management request engine whether to allow the action associated with the object in the hierarchical object model based on the template information, the information relating to the action associated with the object in the hierarchical object model and the credentials associated with the user comprising the role and proficiency level of the user; wherein information provided in a user interface depends on the determination as to whether to allow the action.