Method and apparatus for controlling replication processing of object
According to one embodiment, the resource access unit accesses a first resource including a replication target object and policy data assigned to the object. The policy data includes base policy data including a first condition and assertion policy data including a second condition. The first retrieval unit obtains first attribute data for accessing the first resource. The first policy evaluation unit determines whether the first attribute satisfies the first condition. When the first condition is satisfied, the copy processing unit executes the copy processing for copying the object. The second retrieval unit obtains the second attribute data for accessing the second resource. The second policy evaluation unit determines whether the second attribute data satisfies the second condition. When the second condition is satisfied, the paste processing unit executes paste processing for pasting the object to the second resource.
1. An object replication control apparatus, comprising:
a resource access unit configured to access a first resource including a replication target object and policy data assigned to the object, in order to obtain the replication target object specified by a user and the policy data assigned to the object, wherein the policy data includes base policy data including a first condition for allowing a copy processing and assertion policy data identification data for specifying assertion policy data and the assertion policy data associated with the base policy data and including a second condition for allowing a paste processing;
a first retrieval unit configured to obtain first attribute data for accessing the first resource;
a first policy evaluation unit configured to determine whether the first attribute data obtained by the first retrieval unit satisfies the first condition included in the base policy data included in the policy data obtained by the resource access unit and to determine the assertion policy data identification data specifying the assertion policy data in accordance with the first condition;
a copy processing unit configured to execute the copy processing for copying the object obtained by the resource access unit, when the first condition is satisfied;
a database configured to store the copied object obtained as a result of execution of the copy processing and the assertion policy data included in the policy data obtained by the resource access unit, wherein the object and the assertion policy data are associated with each other;
a second retrieval unit configured to obtain the second attribute data for accessing the second resource specified by the user;
a second policy evaluation unit configured to determine whether the second attribute data obtained by the second retrieval unit satisfies the second condition included in the assertion policy data stored in the database in association with the object copied as a result of execution of the copy processing;
a paste processing unit configured to execute the paste processing for pasting the object, copied by executing the copy processing, stored in the database to the second resource, when the second condition is satisfied; and
a determination unit,
wherein the policy data of the first resource includes the base policy data and one or more pieces of assertion policy data associated with the base policy data,
when the first condition is satisfied, the determination unit determines one of one or more pieces of assertion policy data included in the policy data obtained by the resource access unit, in accordance with the assertion policy data identification data determined by the first policy evaluation unit, and
the database stores the object copied as a result of execution of the copy processing and the determined assertion policy data, wherein the object and the assertion policy data are associated with each other.
2. The apparatus according to claim 1 , wherein the first condition included in the base policy data includes, as a constituent element, at least one of a subject of access to the first resource, an object of the access, an action content of the access, and environment about the access,
the second condition included in the assertion policy data includes, as a constituent element, at least one of a subject of access to the second resource, an object of the access, an action content of the access, and environment about the access,
the first attribute data obtained by the first retrieval unit includes data about a subject of access to the first resource, an object of the access, an action content of the access, or environment about the access, and
the second attribute data obtained by the second retrieval unit includes data about a subject of access to the second resource, an object of the access, an action content of the access, or environment about the access.
3. An object replication control method, comprising:
accessing a first resource including a replication target object and policy data assigned to the object, in order to obtain the replication target object specified by a user and the policy data assigned to the object, wherein the policy data includes base policy data including a first condition for allowing a copy processing and assertion policy data identification data for specifying assertion policy data and the assertion policy data associated with the base policy data and including a second condition for allowing a paste processing;
obtaining first attribute data for accessing the first resource;
determining whether the obtained first attribute data satisfies the first condition included in the base policy data included in the obtained policy data and to determine the assertion policy data identification data specifying the assertion policy data in accordance with the first condition;
when the first condition is satisfied, executing the copy processing for copying the object obtained;
storing, to a database, the copied object obtained as a result of execution of the copy processing and the assertion policy data included in the obtained policy data, wherein the object and the assertion policy data are associated with each other;
obtaining second attribute data for accessing the second resource specified by the user;
determining whether the obtained second attribute data satisfies the second condition included in the assertion policy data stored in the database in association with the object copied as a result of execution of the copy processing;
when the second condition is satisfied, executing paste processing for pasting the object, copied by executing the copy processing, stored in the database to the second resource,
wherein the policy data of the first resource includes the base policy data and one or more pieces of assertion policy data associated with the base policy data;
when the first condition is satisfied, determining one of one or more pieces of assertion policy data included in the obtained policy data, in accordance with the determined assertion policy data identification data; and
storing the object copied as a result of execution of the copy processing and the determined assertion policy data, wherein the object and the assertion policy data are associated with each other.