System and method for discovering and exposing controlling-user networks
In one embodiment, a method is performed by a computer system comprising physical computer hardware. The method includes discovering a controlling-user network for at least one user. The controlling-user network comprising a plurality of controlling users. The plurality of controlling users each control one or more sites of a content-management system. The method further includes profiling the plurality of controlling users based, at least in part, on information gleaned from sites on the content-management system controlled by the plurality of controlling users. In addition, the method includes exposing the controlling-user network to the at least one controlling user using a result of the profiling.
1. A method of discovering a user-specific controlling-user network for a particular user of a content-management system, the content-management system comprising a plurality of managed sites, the user-specific controlling-user network comprising a plurality of controlling users of the content-management system, the method comprising, by a computer system:
passing a security identifier of the particular user to a directory-services system;
responsive to the passing, receiving, from the directory-services system, user groups of which the particular user is a member;
requesting, from an administrative system, security identifiers of controlling users of the plurality of managed sites of the content-management system, network locations of the plurality of managed sites and access control lists for the plurality of managed sites, wherein the controlling users represent specific users who are primarily responsible for the plurality of managed sites of the content-management system;
responsive to the requesting, receiving, from the administrative system, the security identifiers of the controlling users of the plurality of managed sites of the content-management system, the network locations of the plurality of managed sites and the access control lists for the plurality of managed sites;
determining, via the security identifiers of the controlling users, which of the controlling users are members of at least one of the user groups of which the particular user is a member;
compiling information related to managed sites of the content-management system that are controlled by the determined controlling users, the compiled information comprising, for each managed site that is controlled by a controlling user of the determined controlling users, the network location of the managed site and the access control list of the managed site;
acquiring, via the access control lists in the compiled information, security principals of the managed sites that are controlled by the determined controlling users;
ascertaining whether each of the security principals refers to a user or a group of users;
resolving each said security principal that refers to a group of users to individual users;
integrating each said security principal that refers to a user and the individual users of each said resolved security principal into a set of permissioned users who have been granted access to one or more of the managed sites that are controlled by the determined controlling users; and
removing from the set of permissioned users those users who are not a controlling user of at least one managed site of the content-management system, the removing yielding the plurality of controlling users of the user-specific controlling-user network.
2. The method of claim 1 comprising, prior to the acquiring, removing from the compiled information those managed sites for which the particular user is not a controlling user.
3. The method of claim 1 , comprising:
generating one or more profiles of the plurality of controlling users based, at least in part, on information gleaned from sites on the content-management system controlled by the plurality of controlling users; and
exposing the user-specific controlling-user network to the particular user using a result of the generating.
4. The method of claim 3 , wherein the generating comprises generating a plurality of controlling-user profiles corresponding to the plurality of controlling users.
5. The method of claim 4 , wherein each controlling-user profile comprises information selected from the group consisting of: security information, content information, infrastructure information, directory information, and site-configuration information.
6. The method of claim 4 , wherein the exposing comprises:
providing a searchable interface to the particular user;
receiving search criteria;
comparing the search criteria to the plurality of controlling-user profiles;
generating controlling-user information responsive to the search criteria; and
providing the controlling-user information to the particular user.
7. The method of claim 6 , wherein the controlling-user information comprises a list of controlling users.
8. The method of claim 7 , comprising allowing the particular user to contact one or more controlling users on the list of controlling users.
9. An information handling system comprising a computer processor and memory, wherein the computer processor and memory in combination are operable to implement a method of discovering a user-specific controlling-user network for a particular user of a content-management system, the content-management system comprising a plurality of managed sites, the user-specific controlling-user network comprising a plurality of controlling users of the content-management system, the method comprising:
passing a security identifier of the particular user to a directory-services system;
responsive to the passing, receiving, from the directory-services system, user groups of which the particular user is a member;
requesting, from an administrative system, security identifiers of controlling users of the plurality of managed sites of the content-management system, network locations of the plurality of managed sites and access control lists for the plurality of managed sites, wherein the controlling users represent specific users who are primarily responsible for the plurality of managed sites of the content-management system;
responsive to the requesting, receiving, from the administrative system, the security identifiers of the controlling users of the plurality of managed sites of the content-management system, the network locations of the plurality of managed sites and the access control lists for the plurality of managed sites;
determining, via the security identifiers of the controlling users, which of the controlling users are members of at least one of the user groups of which the particular user is a member;
compiling information related to managed sites of the content-management system that are controlled by the determined controlling users, the compiled information comprising, for each managed site that is controlled by a controlling user of the determined controlling users, the network location of the managed site and the access control list of the managed site;
acquiring, via the access control lists in the compiled information, security principals of the managed sites that are controlled by the determined controlling users;
ascertaining whether each of the security principals refers to a user or a group of users;
resolving each said security principal that refers to a group of users to individual users;
integrating each said security principal that refers to a user and the individual users of each said resolved security principal into a set of permissioned users who have been granted access to one or more of the managed sites that are controlled by the determined controlling users; and
removing from the set of permissioned users those users who are not a controlling user of at least one managed site of the content-management system, the removing yielding the plurality of controlling users of the user-specific controlling-user network.
10. The information handling system of claim 9 , the method comprising, prior to the acquiring, removing from the compiled information those managed sites for which the particular user is not a controlling user.
11. The information handling system of claim 9 , the method comprising:
generating one or more profiles of the plurality of controlling users based, at least in part, on information gleaned from sites on the content-management system controlled by the plurality of controlling users; and
exposing the user-specific controlling-user network to the particular user using a result of the generating.
12. The information handling system of claim 11 , wherein the generating comprises generating a plurality of controlling-user profiles corresponding to the plurality of controlling users.
13. The information handling system of claim 12 , wherein the exposing comprises:
providing a searchable interface to the particular user;
receiving search criteria;
comparing the search criteria to the plurality of controlling-user profiles;
generating controlling-user information responsive to the search criteria; and
providing the controlling-user information to the particular user.
14. The information handling system of claim 13 , wherein the controlling-user information comprises a list of controlling users.
15. The information handling system of claim 14 , the method comprising allowing the particular user to contact one or more controlling users on the list of controlling users.
16. A computer-program product comprising a non-transitory computer-usable medium having computer-readable program code embodied therein, the computer-readable program code adapted to be executed to implement a method of discovering a user-specific controlling-user network for a particular user of a content-management system, the content-management system comprising a plurality of managed sites, the user-specific controlling-user network comprising a plurality of controlling users of the content-management system, the method comprising:
passing a security identifier of the particular user to a directory-services system;
responsive to the passing, receiving, from the directory-services system, user groups of which the particular user is a member;
requesting, from an administrative system, security identifiers of controlling users of the plurality of managed sites of the content-management system, network locations of the plurality of managed sites and access control lists for the plurality of managed sites, wherein the controlling users represent specific users who are primarily responsible for the plurality of managed sites of the content-management system;
responsive to the requesting, receiving, from the administrative system, the security identifiers of the controlling users of the plurality of managed sites of the content-management system, the network locations of the plurality of managed sites and the access control lists for the plurality of managed sites;
determining, via the security identifiers of the controlling users, which of the controlling users are members of at least one of the user groups of which the particular user is a member;
compiling information related to managed sites of the content-management system that are controlled by the determined controlling users, the compiled information comprising, for each managed site that is controlled by a controlling user of the determined controlling users, the network location of the managed site and the access control list of the managed site;
acquiring, via the access control lists in the compiled information, security principals of the managed sites that are controlled by the determined controlling users;
ascertaining whether each of the security principals refers to a user or a group of users;
resolving each said security principal that refers to a group of users to individual users;
integrating each said security principal that refers to a user and the individual users of each said resolved security principal into a set of permissioned users who have been granted access to one or more of the managed sites that are controlled by the determined controlling users; and
removing from the set of permissioned users those users who are not a controlling user of at least one managed site of the content-management system, the removing yielding the plurality of controlling users of the user-specific controlling-user network.