RESOURCE ACCESS BASED ON SUPERVISORY-SUBORDINATE RELATIONSHIP

    公开(公告)号:US20220385740A1

    公开(公告)日:2022-12-01

    申请号:US17885888

    申请日:2022-08-11

    摘要: A processing device includes processing circuitry and non-volatile storage configured to store management information that identifies supervisor-subordinate relationships among users. The processing circuitry receives a request from a first user, wherein the request includes a request to alter access rights of a second user to a network resource. The processing circuitry establishes authorization of the first user to request access to the network resource based on information included in a directory services database, and retrieves management information associated with the first user and the second user from the non-volatile storage. The processing circuitry determines whether a supervisor-subordinate relationship exists between the first user and the second user based on the management information associated with the first user and the second user, and alters the access rights of the second user to the network resource, at least partly in response to determining that the supervisor-subordinate relationship between the first user and the second user exists.

    PLATFORM-AS-A-SERVICE WITH PROXY-CONTROLLED REQUEST ROUTING
    3.
    发明申请
    PLATFORM-AS-A-SERVICE WITH PROXY-CONTROLLED REQUEST ROUTING 有权
    具有代理控制请求路由的平台即服务

    公开(公告)号:US20170006126A1

    公开(公告)日:2017-01-05

    申请号:US14755377

    申请日:2015-06-30

    摘要: When a user sends a request to access an asset or resource, for example a program code file or a media file, the access request can be processed by a proxy device. The proxy can use directory information obtained from a directory, for example a company-wide Lightweight Directory Access Protocol (LDAP) directory, to determine whether or not the request is from an authorized network user listed in the directory. The proxy can use management information obtained from another database to determine roles, subordinate assignment information, and access authorization information associated with the requesting user. The proxy can conditionally route the request to a resource host based on the directory information and the management information. The proxy can also transform a resource returned in response to the request by using pipeline language parameters included in a URL associated with the access request.

    摘要翻译: 当用户发送访问资产或资源的请求(例如程序代码文件或媒体文件)时,访问请求可由代理设备处理。 代理可以使用从目录获取的目录信息,例如公司范围的轻量级目录访问协议(LDAP)目录,以确定请求是否来自目录中列出的授权网络用户。 代理可以使用从另一数据库获得的管理信息来确定与请求用户相关联的角色,从属分配信息和访问授权信息。 代理可以基于目录信息和管理信息有条件地将请求路由到资源主机。 代理还可以通过使用包含在与访问请求相关联的URL中的流水线语言参数来转换响应于请求而返回的资源。

    Resource access based on supervisory-subordinate relationship

    公开(公告)号:US11627198B2

    公开(公告)日:2023-04-11

    申请号:US17885888

    申请日:2022-08-11

    摘要: A processing device includes processing circuitry and non-volatile storage configured to store management information that identifies supervisor-subordinate relationships among users. The processing circuitry receives a request from a first user, wherein the request includes a request to alter access rights of a second user to a network resource. The processing circuitry establishes authorization of the first user to request access to the network resource based on information included in a directory services database, and retrieves management information associated with the first user and the second user from the non-volatile storage. The processing circuitry determines whether a supervisor-subordinate relationship exists between the first user and the second user based on the management information associated with the first user and the second user, and alters the access rights of the second user to the network resource, at least partly in response to determining that the supervisor-subordinate relationship between the first user and the second user exists.

    Selectively transforming assets returned by a proxy device

    公开(公告)号:US11102321B2

    公开(公告)日:2021-08-24

    申请号:US17101356

    申请日:2020-11-23

    摘要: A device acting as a proxy for an asset host receives a message from a requesting device. The message includes an access request specifying an asset hosted by the asset host. The message includes embedded pipeline language parameters specifying desired asset characteristics of the hosted asset. The proxy routes the access request to the asset host. The asset received in response to the request has characteristics. The proxy compares the asset characteristics of the asset to the desired asset characteristics specified by the embedded pipeline language parameters. In response to a result of the comparison indicating that the asset's characteristics do not match the first desired asset characteristics specified by the embedded pipeline language parameters, the proxy transmits a transformed asset back to the requesting device.

    SELECTIVELY TRANSFORMING ASSETS RETURNED BY A PROXY DEVICE

    公开(公告)号:US20210144224A1

    公开(公告)日:2021-05-13

    申请号:US17101356

    申请日:2020-11-23

    摘要: A device acting as a proxy for an asset host receives a message from a requesting device. The message includes an access request specifying an asset hosted by the asset host. The message includes embedded pipeline language parameters specifying desired asset characteristics of the hosted asset. The proxy routes the access request to the asset host. The asset received in response to the request has characteristics. The proxy compares the asset characteristics of the asset to the desired asset characteristics specified by the embedded pipeline language parameters. In response to a result of the comparison indicating that the asset's characteristics do not match the first desired asset characteristics specified by the embedded pipeline language parameters, the proxy transmits a transformed asset back to the requesting device.

    SERVICING ASSET REQUESTS VIA PROXY
    7.
    发明申请

    公开(公告)号:US20200053181A1

    公开(公告)日:2020-02-13

    申请号:US16654361

    申请日:2019-10-16

    摘要: A system includes a proxy device, a requestor device that communicates with the proxy via a first communications link, and an asset host that communicates with the proxy via a second communications link. The proxy receives receive an access request from a user of the requestor device via the first communication link. The access request is associated with a requested asset hosted by the asset host, and includes pipeline language parameters. Routing information associated with the asset host is determined, and the access request is routed to the asset host in response to verifying that the user is authorized to access the requested asset. The proxy device obtains the requested asset from the asset host, transforms the requested asset based on the pipeline language parameters, and transmits the transformed asset to the requestor device.

    Proxy-controlled request routing
    9.
    发明授权

    公开(公告)号:US10484496B2

    公开(公告)日:2019-11-19

    申请号:US16186213

    申请日:2018-11-09

    摘要: A system includes a proxy device, a requestor device that communicates with the proxy via a first communications link, and an asset host that communicates with the proxy via a second communications link. The proxy receives an access request from a user of the requestor device via the first communication link. The access request includes a request to access a resource hosted by the asset host. The proxy obtains access authorization information associated with the user, and determines whether the user is authorized to access the resource based on the access authorization information. The proxy determines routing information associated with the asset host, and conditionally routes the access request to the asset host via the second communications link based, at least in part, on the access authorization information. The; asset host provides the resource to the requestor device via a third communications link that bypasses the proxy device.

    Proxy-controlled request routing
    10.
    发明授权

    公开(公告)号:US10129354B2

    公开(公告)日:2018-11-13

    申请号:US15657566

    申请日:2017-07-24

    摘要: When a user sends a request to access an asset or resource, for example a program code file or a media file, the access request can be processed by a proxy device. The proxy can use directory information obtained from a directory, for example a company-wide Lightweight Directory Access Protocol (LDAP) directory, to determine whether or not the request is from an authorized network user listed in the directory. The proxy can use management information obtained from another database to determine roles, subordinate assignment information, and access authorization information associated with the requesting user. The proxy can conditionally route the request to a resource host based on the directory information and the management information. The proxy can also transform a resource returned in response to the request by using pipeline language parameters included in a URL associated with the access request.