首页>
外国专利>
Method and system for variable authority level user access control in a distributed data processing system having multiple resource manager
Method and system for variable authority level user access control in a distributed data processing system having multiple resource manager
展开▼
机译:具有多个资源管理器的分布式数据处理系统中用于可变权限级别用户访问控制的方法和系统
展开▼
页面导航
摘要
著录项
相似文献
摘要
Variable authority level user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers. A reference monitor service is established and a plurality of access control profiles are stored therein, each including an identification of a selected user and a specified level of authority associated with that selected user. Thereafter, selected access control profiles are exchanged between the reference monitor service and a resource manager in response to an attempted access of a particular resource object controlled by that resource manager. The resource manager may then control access to the resource object by utilizing the exchanged access control profile to determine the extent access is permitted by means of the specified level of authority contained therein. In a preferred embodiment of the present invention, the access intent of a selected user is determined in conjunction with an attempted access of a particular resource object and stored. Thereafter, a comparison of the stated access intent with the specified level of authority contained within the access control profile may be utilized to grant or deny access.
展开▼