发明名称 TYPE SYSTEM FOR ACCESS CONTROL LISTS
摘要 A method and storage media for performing access resolution using ACL types is provided. Under an AND semantic, an intersection set formed from the types of multiple ACLs protecting a resource may be utilized to efficiently determine whether a request for a privilege to access the resource is granted or denied. If the privilege is not a member of the intersection set, the privilege cannot be granted. A union set may be used for an OR semantic. A global ACL type may represent all privileges system-wide or application-wide. A global ACL may represent a system-wide or application-wide access policy. A conjunction of a global ACL and a regular ACL may be stored in a cache. The union set, intersection set, or access resolution may also be cached for subsequent request processing.
申请公布号 US2010281060(A1) 申请公布日期 2010.11.04
申请号 US20090433735 申请日期 2009.04.30
申请人 ORACLE INTERNATIONAL CORPORATION 发明人 AHMED TANVIR;KEEFEE THOMAS;PESATI VIKRAM;SEDLAR ERIC
分类号 G06F17/30 主分类号 G06F17/30
代理机构 代理人
主权项
地址