Workman Nydegger
Authorizing a requesting entity to operate upon data structures
Authorizing a requesting entity to have a service perform a particular action in a manner that is at least partially independent of the underlying target data structure. An authorization station maintains a number of role templates that each define basic access permissions with respect to a number of command methods. The authorization station also maintains a number of role definitions that each define access permissions for specific requesting entities by using one or more of the role templates. When the authorization station receives a request from the requesting entity, the authorization station then identifies the appropriate role definition. Using this role definition, the authorization station determines access permissions for the requesting entity with respect to the requested action.
Microsoft Corporation
H G H H H H G G H H H H H H H G H H
H04L G06F H04L H04L H04L H04L G06F G06Q H04L H04L H04L H04L H04L H04L H04L G06F H04L H04L
inventional inventional inventional inventional additional inventional inventional inventional additional additional inventional additional additional inventional inventional inventional additional inventional
Shaun D. George M. Arthur Paul J. Jonathan D. Richard B. Daniel R. Michael G. Mark Robert M.
Pierce Moore Zwiegincew Leach Pincus Ward Simon Burner Lucovsky Hyman