System and method for logical people groups

摘要

A system for managing a logical people group. The system comprises a computer, including a computer readable medium and processor operating thereon. The system also comprises a query module, executing on the computer, operable to receive a complex query and return a logical group of users. The query module is operable to search, based on the complex query, across a plurality of information sources including a user directory, a plurality of roles, and an attribute directory. The system also comprises a query cache which stores, for a user-definable period, a reverse lookup table of users and the logical groups to which the users belong based on previously received complex queries.

主权项

1. A system for managing a logical people group (LPG), comprising:
a computer, including a computer memory and processor; a user directory which includes a first plurality of attribute values for each of a plurality of users and the user directory maps the plurality of users to a plurality of groups; an attribute directory, separate from the user directory, which includes a second plurality of attribute values for each of the plurality of users, which second plurality of attribute values are not recorded in said user directory and the attribute directory maps a plurality of business attributes to the plurality of users; a security layer, separate from the user directory and attribute directory, which includes a third plurality of attribute values for each of the plurality of users, which third plurality of attribute values are not recorded in said user directory or attribute directory and the security layer includes a plurality of roles, wherein each role is associated with an application and includes one or more users from the plurality of users; a query module including a query cache executing on the computer, operable to receive a complex query wherein the complex query includes a first parameter operable on the first plurality of attribute values, a second defined parameter operable on the second plurality of attribute values, and a third parameter operable on the third plurality of attribute values; wherein, in response to the complex query, the query module,
searches the user directory and identifies a first subset of the plurality users having attribute values satisfying the first parameter,searches the attribute directory and identifies a second subset of the plurality of users having attribute values satisfying the second parameter,searches the security layer and identifies a third subset of the plurality users having attribute values satisfying the third parameter,compares the first subset, the second subset, and the third subset,returns an LPG comprising a logical group of a plurality of users present in all of the first subset, the second subset, and the third subset, wherein the LPG is defined by the complex query, andstores the LPG in a query cache which stores, for a user-definable period, LPGs based on previously received complex queries.