| 摘要 |
In one implementation, a computer system maintains one or more permissions associated with a credential held by a first user, where at least one of the one or more of permissions is delegatable by the first user to one or more other users. The computer system receives an indication that the first user has chosen to delegate a particular permission from amongst the one or more permissions to a second user, wherein the particular permission is needed to perform a particular type of action. Based on the first user indicating a choice to delegate the particular permission to the second user, the computer system associates the delegation of the particular permission with the second user. Based on delegating the particular permission with the second user, the computer system enables the second user to perform the particular type of action. |
| 主权项 |
1. A computer implemented method comprising:
receiving, at a computer system and from a client device of a first user, data indicating that the first user has chosen to delegate, to a second user, a particular permission from amongst one or more permissions that are associated with a credential held by the first user, the particular permission being delegatable by the first user to one or more other users and being needed to perform a particular type of action; based on the data indicating that the first user has chosen to delegate the particular permission to the second user, associating, at the computer system, the particular permission with a credential held by the second user; receiving, at the computer system and from a device of a third user that is configured to permit a user to perform the particular type of action, data corresponding to a request to perform the particular type of action, wherein the data corresponding to the request comprises information identifying the credential held by the second user that is obtained by the device of the third user from a client device of the second user; determining, at the computer system and based on the data corresponding to the request received from the device of the third user that is configured to permit a user to perform the particular type of action, that the credential held by the second user is associated with the particular permission delegated to the second user by the first user; and transmitting, by the computer system to the device of the third user that is configured to permit a user to perform the particular type of action, data instructing the device of the third user to enable the second user to perform the particular type of action based on determining that the credential held by the second user is associated with the particular permission delegated to the second user by the first user. |
