IP Library › Granted Patent US 11,799,867
Granted Patent B2
US 11,799,867 · App. 17/325,769 · Granted Oct 24, 2023

Propagating permissions on a resource hierarchy of a process

Inventors: Arif Iqbal (San Carlos, CA); Suman Ganta (Fremont, CA)
Assignee: Oracle International Corporation
H04L63/102G06F21/604G06F21/6218H04L63/101H04L63/104H04L63/20G06F2221/2141G06F2221/2145
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,799,867
App. No.
17/325,769
Granted
Oct 24, 2023
Kind
B2
Abstract

Permissions on a resource hierarchy of a process are propagated. The resource hierarchy of the process is accessed. The resource hierarchy includes multiple nodes arranged in level and each of the nodes is associated with a separate resource from a plurality of resources. A permission for a user is propagate from a first node to one or more lower nodes arranged below the first node in the resource hierarchy. The user is enabled to interact with each resource associated with the first node and the one or more of the lower nodes based on the propagated permission.

Claims (46)

1. A non-transitory processor-readable storage device including instructions for a method of propagating permissions on a resource hierarchy of a process, the method comprising:

accessing the resource hierarchy of the process, wherein the resource hierarchy includes multiple nodes arranged in levels, wherein each of the nodes is associated with a separate resource from a plurality of resources, wherein the nodes includes a first node at a location in the resource hierarchy, and wherein a permission for a user is associated with a first node of the nodes and is not associated with one or more lower nodes arranged below the first node;

propagating the permission for the user from the first node to the one or more lower nodes arranged below the first node in the resource hierarchy, wherein the permission is associated with the first node at the location in the resource hierarchy and is associated with the one or more lower nodes based on the propagating; and

enabling the user to interact with each resource associated with the first node at the location in the resource hierarchy and the one or more of the lower nodes based on the propagated permission.

2. The non-transitory processor-readable storage device of claim 1 , wherein the method further comprises:

preventing propagation of the permission to at least one of the lower nodes.

3. The non-transitory processor-readable storage device of claim 1 , wherein the method further comprises:

associating different data with each of the resources.

4. The non-transitory processor-readable storage device of claim 1 , wherein the method further comprises:

receiving computer executable instructions defining a role behavior with respect to the process based on a data condition.

5. The non-transitory processor-readable storage device of claim 4 , wherein the method further comprises:

providing different types of interactions for different instance of the process to a role member based on execution of computer executable instructions defining the role behavior.

6. The non-transitory processor-readable storage device of claim 4 , wherein the role behavior includes the permission.

7. The non-transitory processor-readable storage device of claim 1 , wherein the permission includes read, update, create, access, document_download, document_contribute, all, and none.

8. The non-transitory processor-readable storage device of claim 1 , wherein the method further comprises:

preventing propagation of the permission to at least one of lower node of the resource hierarchy.

9. The non-transitory processor-readable storage device of claim 1 , wherein the method further comprises:

accessing a role behavior associated with an instance of the process; and

modifying a membership and a permission associated with the particular role behavior for the particular instance without modifying the particular role behavior for other instances of the process.

10. The non-transitory processor-readable storage device of claim 9 , wherein the role behavior is a first role behavior and wherein the method further comprises:

providing a second role member user with a second type of interaction with the instance of the process based on execution of computer executable instructions defining the role behavior.

11. A method of propagating permissions on a resource hierarchy of a process, the method comprising:

accessing the resource hierarchy of the process, wherein the resource hierarchy includes multiple nodes arranged in levels, wherein each of the nodes is associated with a separate resource from a plurality of resources, wherein the nodes includes a first node at a location in the resource hierarchy, and wherein a permission for a user is associated with a first node of the nodes and is not associated with one or more lower nodes arranged below the first node;

propagating the permission for the user from the first node to the one or more lower nodes arranged below the first node in the resource hierarchy, wherein the permission is associated with the first node at the location in the resource hierarchy and is associated with the one or more lower nodes based on the propagating; and

enabling the user to interact with each resource associated with the first node at the location in the resource hierarchy and the one or more of the lower nodes based on the propagated permission.

12. The method of claim 11 , wherein the method further comprises:

preventing propagation of the permission to at least one of the lower nodes.

13. The method of claim 11 , wherein the method further comprises:

associating different data with each of the resources.

14. The method of claim 11 , wherein the method further comprises:

receiving computer executable instructions defining a role behavior with respect to the process based on a data condition.

15. The method of claim 14 , wherein the method further comprises:

providing different types of interactions for different instance of the process to a role member based on execution of computer executable instructions defining the role behavior.

16. The method of claim 14 , wherein the role behavior includes the permission.

17. The method of claim 11 , wherein the permission includes read, update, create, access, document_download, document_contribute, all, and none.

18. The method of claim 11 , wherein the method further comprises:

preventing propagation of the permission to at least one of lower node of the resource hierarchy.

19. The method of claim 11 , wherein the method further comprises:

accessing a role behavior associated with an instance of the process; and

modifying a membership and a permission associated with the particular role behavior for the particular instance without modifying the particular role behavior for other instances of the process.

20. An apparatus for propagating permissions on a resource hierarchy of a process, the apparatus comprising:

one or more hardware processors; and

one or more non-transitory processor-readable storage devices including instructions for:

accessing the resource hierarchy of the process, wherein the resource hierarchy includes multiple nodes arranged in levels, wherein each of the nodes is associated with a separate resource from a plurality of resources, wherein the nodes includes a first node at a location in the resource hierarchy, and wherein a permission for a user is associated with a first node of the nodes and is not associated with one or more lower nodes arranged below the first node;

propagating the permission for the user from the first node to the one or more lower nodes arranged below the first node in the resource hierarchy, wherein the permission is associated with the first node at the location in the resource hierarchy and is associated with the one or more lower nodes based on the propagating; and

enabling the user to interact with each resource associated with the first node at the location in the resource hierarchy and the one or more of the lower nodes based on the propagated permission.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 20, 2021
From: IQBAL, ARIF; GANTA, SUMAN
To: ORACLE INTERNATIONAL CORPORATION
Reel/Frame 056303/0202 →
Continuity (5)
Continuation 16039262 · Jul 18, 2018
Provisional Application 62566243 · Sep 29, 2017
Provisional Application 62566237 · Sep 29, 2017
Provisional Application 62566244 · Sep 29, 2017
Related Publication 20210273946A1 · Sep 2, 2021