摘要:
Implementations of various technologies, including methods, systems and apparatus, for managing a request from a user to access an object. In one implementation, a determination is made as to whether the user is denied or granted access to the object based on a policy (step a). If the user is neither denied nor granted access to the object by the policy, then a determination is made as to whether the user is granted access to the object by an access control list (ACL) for the object (step b). A conclusion is then made as to whether the user has access to the object as determined by steps (a) and (b).
摘要:
Determining the user access controls to be included in a graphical user interface is disclosed. In response to a user logging onto a computing device, the level of access to be accorded to the user is determined. In response to the logged-on user requesting a page, the user access controls of the page that the logged-on user will have access to is determined. The determination is made by retrieving a page template for the requested page, the page template including generic access recognition instructions. Access data that describes the level of access accorded the user is also retrieved. Then the requested page is composed. When composed, the requested page includes access control rendering instructions that are based on the generic access recognition instructions and the access data. As a result, when the page is rendered, the resultant display includes user access control accessible to a user. Access controls that are not accessible to the user are either not displayed or displayed in a different manner, such as in phantom.
摘要:
Reducing the number of inquiries required to determine access rights accorded to documents, in particular documents stored at a Web site, is disclosed. Upon receipt of a request for documents, a list of the documents is opened by the receiving server and data denoting the user access level of every document on the list is determined. Then, the resulting series of access levels is filtered to remove any access levels not available to the requestor. Next, a document query, including as a condition that any returned list of documents only include documents having an access level included on the filtered series of access levels, is generated. The resulting document data is then embedded in a Web page and sent to the requestor.
摘要:
A system and method are provided for delivering batches of data to a client, while maintaining the client's state in the accessed database. The system and method eliminate the need for a web server to maintain the location of any given client within a database. Accordingly, the web server operates with greater efficiency, because it is freed from having to maintain the state of any given client within a database and need not create or maintain a partitioned database. Maximum and minimum values of any data previously requested and received by the client are maintained. These maximum and minimum values are later used within a novel set of Structured Query Language (SQL) statements to indicate the user's state within the database. By maintaining minimum and maximum reference values, the user's state within the accessed database can be maintained without storing any information on the web server. The next and previous batches are successfully obtained by comparing these stored reference values to the database so that the user can quickly move between adjacent batches of records. The invention provides a simple and elegant means for maintaining a user's state within a database, without requiring the use of a web server's resources or the creation of a partitioned database.
摘要:
A system and method are provided for delivering batches of data to a client, while maintaining the client's state in the accessed database. The system and method eliminate the need for a web server to maintain the location of any given client within a database. Accordingly, the web server operates with greater efficiency, because it is freed from having to maintain the state of any given client within a database and need not create or maintain a partitioned database. Maximum and minimum values of any data previously requested and received by the client are maintained. These maximum and minimum values are later used within a novel set of Structured Query Language (SQL) statements to indicate the user's state within the database. By maintaining minimum and maximum reference values, the user's state within the accessed database can be maintained without storing any information on the web server. The next and previous batches are successfully obtained by comparing these stored reference values to the database so that the user can quickly move between adjacent batches of records. The invention provides a simple and elegant means for maintaining a user's state within a database, without requiring the use of a web server's resources or the creation of a partitioned database.