ACCESS CONTROL FOR OBJECTS HAVING ATTRIBUTES DEFINED AGAINST HIERARCHICALLY ORGANIZED DOMAINS CONTAINING FIXED NUMBER OF VALUES

摘要

An aspect of the present disclosure facilitates controlling access to objects having attributes defined against hierarchically organized domains, with each domain containing a corresponding fixed number of values. In one embodiment, in response to receiving data indicating specific hierarchies of the hierarchically organized domains, the corresponding fixed number of values of the corresponding domains in each hierarchy is displayed. Accordingly, a user is enabled to select a desired set of values from the corresponding fixed number of values of the corresponding domains, and to specify a security rule for a combination of the selected set of values and a user entity. The security rule is thereafter enforced when objects having attributes matching the selected set of values are accessed by the user entity.

主权项

1. A method of controlling access to objects having attributes defined against hierarchically organized domains, with each domain containing a corresponding fixed number of values, said method comprising:
receiving data indicating a plurality of hierarchies of said hierarchically organized domains; displaying the values of the corresponding domains in each hierarchy of said plurality of hierarchies; enabling a user to select a first set of values from the displayed values of the corresponding domains; enabling said user to specify a security rule for a combination of said first set of values and a user entity; and enforcing said security rule when objects having attributes matching said first set of values are accessed by said user entity.