Role based search
The disclosure relates to accessing information, and more specifically to accessing information wherein the information is protected by access rules. In particular, the invention relates to a search system comprising integrated access request routines. The disclosure also relates to a search system and to a corresponding computer program.
1. A method of granting access to objects in a data storage comprising objects associated with different access rules, the method comprising:
receiving a request to access one or more sought objects from a requester, wherein the request comprises a search string defining the requested one or more sought objects;
retrieving access rules of the requested object or objects defined by the search string;
analyzing the access rules to determine if the requester is permitted to access the requested object or objects;
if the requester is not permitted to read at least one of the requested objects, then:
automatically sending a permission request, to authorize access to the at least one object that the requester is not permitted to read, to an authorizer; and
receiving a permission response from the authorizer to read the at least one object;
granting access to requested objects based on rules and received permissions; and
successively presenting sought objects to the requester as access is granted for the sought objects.
2. The method according to claim 1 further comprising presenting the at least one sought object to which permission is granted to the requester.
3. The method according to claim 1 further comprising presenting at least one link to the objects.
4. The method according to claim 1 , wherein the data storage is a cloud database.
5. The method according to claim 1 , further comprising:
retrieving the sought object or objects, to which access is granted from a database.
6. The method according to claim 1 , wherein the access rules are dynamic.
7. The method claim 1 , wherein the access rules correspond to different roles or users.
8. The method according to claim 1 , wherein one object may be associated with several rules.
9. A non-transitory computer-readable medium comprising computer readable instructions which, when executed by a controller, cause the controller to:
receive a request to access at least one sought object from a requester, wherein the request comprises a search string defining the requested at least one sought object;
retrieve access rules associated with the requested at least one sought object defined by the search string;
analyze the access rules to determine if the requester is permitted to access the requested at least one object;
in response to determining that the requester is not permitted to read a first one of the at least one object:
automatically send a permission request, to authorize access to the first object, to an authorizer, and
receive a permission response from the authorizer to read the first object;
grant access to requested objects based on the access rules and received permissions; and
successively present sought objects to the requester as access is granted for the sought objects.
10. A searching system for granting access to objects, the searching system comprising:
a data storage comprising objects associated with different access rules;
a rules and authorizer data storage; and
a data storage controller configured to:
receive a request to access one or several objects in the data storage from a requester, wherein the request comprises a search string defining the requested one or several objects;
retrieve access rules of the requested object or objects defined by the search string;
analyze the access rules to determine if the requester is permitted to access the requested object or objects, and if the requester is not permitted to read at least one of the requested objects, then:
automatically sending a permission request to authorize access to the at least one object that the requester is not permitted to read, to an authorizer;
receiving a permission response from the authorizer to read the at least one object;
grant access to the requested objects based on the access rules of the requested object and the received permissions; and
successively present objects to the requester as access is granted for the respective objects.
11. The system of claim 10 , wherein the access rules are dynamic.
12. The system of claim 10 , wherein the access rules correspond to different roles or users.
13. The system of claim 10 , wherein one object may be associated with several of the access rules.