Automatic generation of policies and roles for role based access control
View Patent ↗A method ( 400 ) of automatically generating policies and/or roles for role based access (RBAC). The method can include presenting a policy or policy generation table ( 300 ) identifying scripts ( 304 ) and roles ( 302 ) to which the scripts correspond to an operator, and receiving at least one operator input selecting a plurality of desired scripts to be associated with a desired policy or role. The method also can include parsing the scripts to identify corresponding verb-switches ( 204 ), and comparing the parsed verb-switches to existing policies or roles ( 114 ). When there is at least one of the parsed verb-switches that does not correspond to at least one existing policy, the parsed verb-switch that does not correspond to at least one existing policy can be identified and a policy ( 106 ) that includes the identified verb-switch can be generated.
1. A method of automatically generating policies for role based access (RBAC), comprising:
presenting a policy generation table identifying scripts and roles to which the scripts correspond to an operator;
receiving at least one operator input selecting a plurality of desired scripts to be associated with a desired policy;
parsing from the selected scripts verb-switches contained within the selected scripts;
comparing each of the parsed verb-switches to existing policies;
when there is at least one of the parsed verb-switches that does not correspond to at least one existing policy, identifying the parsed verb-switch that does not correspond to at least one existing policy and generating a policy that includes the identified verb-switch.
2. The method of claim 1 , further comprising:
when there is not at least one of the parsed verb-switches that does not correspond to at least one existing policy, communicating a message to the operator indicating that there is at least one existing set of policies to which each of the parsed verb-switches correspond.
3. The method of claim 1 , further comprising:
automatically selecting at least one additional script.
4. The method of claim 3 , wherein automatically selecting at least one additional script comprises:
automatically selecting at least one additional script associated with a role to which an operator selected script corresponds.
5. The method of claim 1 , further comprising:
receiving at least one script not identified by the policy generation table.
6. The method of claim 5 , wherein receiving at least one script not identified by the policy generation table comprises:
receiving at least one operator input that identifies the script at a particular data storage location.
7. The method of claim 1 , wherein generating the policy that includes each of the identified verb-switches comprises:
adding the identified verb-switches to an existing policy.
8. The method of claim 1 , further comprising:
updating a data repository with at least one policy that is generated.
9. A method of automatically generating roles for role based access (RBAC), comprising:
presenting a policy generation table identifying scripts and roles to which the scripts correspond to an operator;
receiving at least one operator input selecting a plurality of desired scripts to be associated with a desired role;
parsing from the selected scripts verb-switches contained within the selected scripts;
comparing each of the parsed verb-switches to existing roles; and
when there is not at least one existing role to which each of the verb-switches corresponds, generating a role that includes each of the parsed verb-switches.
10. The method of claim 9 , further comprising:
when there is at least one existing role to which each of the parsed verb-switches corresponds, communicating a message to the operator indicating that there is at least one existing role to which each of the parsed verb-switches correspond.
11. The method of claim 9 , further comprising:
automatically selecting at least one additional script.
12. The method of claim 11 , wherein automatically selecting at least one additional script comprises:
automatically selecting at least one additional script associated with a role to which an operator selected script corresponds.
13. The method of claim 9 , further comprising:
receiving at least one script not identified by the policy generation table.
14. The method of claim 13 , wherein receiving at least one script not identified by the policy generation table comprises:
receiving at least one operator input that identifies the script at a particular data storage location.
15. The method of claim 9 , wherein generating the role that includes each of the identified verb-switches comprises:
adding the identified verb-switches to an existing role.
16. The method of claim 9 , further comprising:
updating a data repository with the generated role.
17. An information system, comprising:
a role based access control (RBAC) policy/role generator that:
presents a policy generation table identifying scripts and roles to which the scripts correspond to an operator;
receives at least one operator input selecting a plurality of desired scripts to be associated with a desired policy;
parses from the selected scripts verb-switches contained within the selected scripts;
compares the parsed verb-switches to existing policies; and
when there is at least one of the parsed verb-switches that does not correspond to at least one existing policy, identifies the parsed verb-switch that does not correspond to at least one existing policy and generates a policy that includes the identified parsed verb-switch.
18. The information system of claim 17 , wherein:
the RBAC policy/role generator communicates a message to the operator indicating that there is at least one existing set of policies to which each the parsed verb switches correspond.
19. The information system of claim 17 , wherein:
the RBAC policy/role generator automatically selects at least one additional script.
20. The information system of claim 17 , wherein:
the RBAC policy/role generator automatically receives at least one script not identified by the policy generation table.