Patent US5878415A successfully refreshed from Google Patents.
US5878415A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Controlling access to objects in a hierarchical database
Assignee: Oracle International Corp
•
Filing: 1997-03-20
•
Granted: 1999-03-02
•
Expires: 2017-03-20
Abstract
Abstract Methods and systems are provided for controlling access to objects in a hierarchical database. The database may include a directory services repository, and/or synchronized partitions. An access constraint propagator reads an access control property of an ancestor of a target object. The access control property designates an inheritable access constraint such as an object class filter or an "inheritable" flag. The object class filter restricts a grant of rights to objects of an identified class. The "inheritable" flag allows inheritance of an access constraint on a specific object property. The propagator enforces the inheritable access constraint by applying it to at least the target object.
Inventors
- 👤 Dale R. Olds
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 09:36
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F12/00; G06F12/14; G06F12/1458; G06F12/1491; G06F2221/00; G06F2221/21; G06F2221/2145; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
79 words
A method for controlling access to objects in a hierarchical database, the computer-implemented method comprising the steps of: choosing at least one target object in the hierarchical database; selecting an ancestor object which is a hierarchical ancestor of the target object; reading an access control value in an access control property of the ancestor object, the access control property designating an inheritable access constraint; and propagating the inheritable access constraint by applying it to at least the target object.
Claim 2
Independent Claim
79 words
A method for controlling access to objects in a hierarchical database, the computer-implemented method comprising the steps of: choosing at least one target object in the hierarchical database; selecting an ancestor object which is a hierarchical ancestor of the target object; reading an access control value in an access control property of the ancestor object, the access control property designating an inheritable access constraint; and propagating the inheritable access constraint by applying it to at least the target object.
Claim 3
Dependent Claim
24 words
The method of claim 1, further comprising the step of inserting the access control value in the access control property of the ancestor object.
Claim 4
Dependent Claim
15 words
The method of claim 1, wherein the inheritable access constraint provides an object class filter.
Claim 5
Dependent Claim
21 words
The method of claim 1, wherein the inheritable access constraint provides inheritance of an access constraint on a specific object property.
Claim 6
Dependent Claim
61 words
The method of claim 1, wherein the access control property of the ancestor object: (a) identifies a trustee object which receives access rights, (b) identifies a property type indicating the property or properties for which those access rights are given, and (c) identifies at least one access right that is given to the trustee object for properties of that property type.
Claim 7
Dependent Claim
53 words
The method of claim 5, wherein the access control property of the ancestor object also identifies an object class, and the propagating step includes giving the trustee object the identified access right for a target object property of the identified property type only if the target object belongs to the identified object class.
Claim 8
Dependent Claim
51 words
The method of claim 5, wherein the property type identified in the access control property of the ancestor object indicates a specific object property rather than a set of properties, and the propagating step includes giving the trustee object the identified access right for the specific property of the target object.
Claim 9
Dependent Claim
30 words
The method of claim 7, wherein the propagating step further comprises giving the trustee object the identified access right for the specific property of a descendant of the target object.
Claim 10
Dependent Claim
84 words
A hierarchical database access control system comprising: a computer system having a storage medium and a processor; a hierarchical database stored in the storage medium and susceptible to processing with the processor, the database including a target object and also including an ancestor object which is a hierarchical ancestor of the target object, the ancestor object having an access control property which designates an inheritable access constraint; and means for propagating the inheritable access constraint by applying it to at least the target object.
Claim 11
Dependent Claim
84 words
A hierarchical database access control system comprising: a computer system having a storage medium and a processor; a hierarchical database stored in the storage medium and susceptible to processing with the processor, the database including a target object and also including an ancestor object which is a hierarchical ancestor of the target object, the ancestor object having an access control property which designates an inheritable access constraint; and means for propagating the inheritable access constraint by applying it to at least the target object.
Claim 12
Dependent Claim
15 words
The system of claim 9, wherein the inheritable access constraint includes an object class filter.
Claim 13
Dependent Claim
19 words
The system of claim 9, wherein the inheritable access constraint includes an access constraint on a specific object property.
Claim 14
Dependent Claim
14 words
The system of claim 9, wherein the inheritable access constraint includes an "inheritable" flag.
Claim 15
Dependent Claim
19 words
The system of claim 9, wherein the means for propagating comprises an inherited rights filter for masking access rights.
Claim 16
Dependent Claim
61 words
The system of claim 9, wherein the access control property of the ancestor object: (a) identifies a trustee object which receives access rights, (b) identifies a property type indicating the property or properties for which those access rights are given, and (c) identifies at least one access right that is given to the trustee object for properties of that property type.
Claim 17
Dependent Claim
56 words
The system of claim 14, wherein the access control property of the ancestor object also identifies an object class, and the means for propagating includes means for giving the trustee object the identified access right for a target object property of the identified property type only if the target object belongs to the identified object class.
Claim 18
Dependent Claim
14 words
The system of claim 15, wherein the hierarchical database includes a directory services repository.
Claim 19
Dependent Claim
12 words
The system of claim 15, wherein the hierarchical database includes synchronized partitions.
Claim 20
Dependent Claim
52 words
The system of claim 14, wherein the property type identified in the access control property of the ancestor object indicates a specific object property rather than a set of properties, and the means for propagating includes giving the trustee object the identified access right for the specific property of the target object.
Claim 21
Dependent Claim
14 words
The system of claim 18, wherein the hierarchical database includes a directory services repository.
Claim 22
Dependent Claim
12 words
The system of claim 18, wherein the hierarchical database includes synchronized partitions.
Claim 23
Dependent Claim
45 words
A computer storage medium having a configuration that represents data and instructions which will cause at least a portion of a computer system to perform method steps for controlling access to objects in a hierarchical database, the method steps comprising the steps of claim 1.
Claim 24
Dependent Claim
17 words
The computer storage medium of claim 21, wherein the method steps comprise the steps of claim 6.
Claim 25
Dependent Claim
17 words
The computer storage medium of claim 21, wherein the method steps comprise the steps of claim 7.
Claim 26
Dependent Claim
17 words
The computer storage medium of claim 23, wherein the method steps comprise the steps of claim 8.
References Cited (Backward Citations)
US5335346A
Cited
US5202981A
Cited
US5664170A
Cited
US5261102A
Cited
US5241624A
Cited
US5437025A
Cited
US5432934A
Cited
US5504892A
Cited
US5758153A
Cited
US5608903A
Cited
US5677851A
Cited
US5758344A
Cited
US5784560A
Cited
US5675782A
Cited
US5701458A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-03-01 | 2002-08-31 | 2003-03-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-03-01 | 2006-08-31 | 2007-03-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-03-01 | 2010-08-31 | 2011-03-02 | $7700.00 | Window Closed / Lapsed |