The arrangement has one or more computer-legible storage media and program code resident in the media for generating one or more user roles. Each role has a set of access rights associated with a set of users and each access right enables actions that a user in a set of users can perform on a set of computer based objects. An Independent claim is also included for a method of controlling user access to computer-based objects.
展开▼