Dismiss
InnovationQ will be updated on Sunday, Oct. 22, from 10am ET - noon. You may experience brief service interruptions during that time.
Browse Prior Art Database

Returning Maximum Access Control Authority

IP.com Disclosure Number: IPCOM000100078D
Original Publication Date: 1990-Mar-01
Included in the Prior Art Database: 2005-Mar-15
Document File: 1 page(s) / 37K

Publishing Venue

IBM

Related People

Hanson, KC: AUTHOR [+2]

Abstract

This article describes improvements to the DIA Access Control Model Object (ACMO). The DIA Library Service needs to be able to return a Requester's maximum Access Control Authority Level to a document. This level does not depend on how the access is obtained, whether by ownership, explicit authorization, public authorization, Shared Authorization List, or Named User Named List. Therefore, the ACMO has a new parameter, the Access Status Parameter Set. This parameter is assigned a code point, even though the parameter does not exist itself. It is used to request and return the Requester's maximum Access Control Authorization Level. The value returned is the highest authority at the time of the request.

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 90% of the total text.

Returning Maximum Access Control Authority

       This article describes improvements to the DIA Access
Control Model Object (ACMO). The DIA Library Service needs to be able
to return a Requester's maximum Access Control Authority Level to a
document. This level does not depend on how the access is obtained,
whether by ownership, explicit authorization, public authorization,
Shared Authorization List, or Named User Named List. Therefore, the
ACMO has a new parameter, the Access Status Parameter Set. This
parameter is assigned a code point, even though the parameter does
not exist itself. It is used to request and return the Requester's
maximum Access Control Authorization Level. The value returned is the
highest authority at the time of the request. A Requester's access
may be changed subsequent to this request, so the value represents a
snapshot, rather than a guarantee of access.

      The advantage of the Access Status Parameter Set is that a
User's request may be easily met without revealing more information
that the User needs to know. The only prior method to determine a
Requester's maximum Access Control Authorization Level was to
retrieve the entire ACMO and any related lists. Then the requester
could parse the entire ACMO and any related lists for the first
occurrence of the Requester.  However, this would mean that the
Requester could learn other's Access Control Authority Level to the
document. This information is only needed by those who have "All"
au...