Microsoft Technology Licensing, LLC

Alexandru Dan Burst

John Lincoln DeMaris

Alin Sirbu

Zachary J Shallcross

Steve Rayson

Michael Robert Van Waardhuizen

Mary David Pasch

David Koronthaly

Frederico A Mameri

Merwan Vishnu Hade

Samuel Lenz Banina

David Alexander Blyth

Alisson A S Sol

Ajey Pankaj Shah

Yubo Jia

Michael Brandon Silverstein

Kristofer D Hoffman

Kerem Yuceturk

Sujata Suresh Adgaonkar

David Timothy Chan

Mark David Sisley

Alexandra Leewon Schultz

Onur Dagci

Elias David Block

Kathryn Bergina Dramstad

Dwayne Wensley Ricardo Codrington

John Lincoln Demaris

David Chan

Methods for externally-delegated access control and authorization of applications and resources are performed by systems and devices. A request for access by a user to a resource of a first application is received from a client device. A memory data structure that associates the resource of the first application with an application identifier and permission information is accessed to obtain the application identifier and the permission information. A query is provided to a second application, identified by the application identifier, which has a different authorization model than the first application. The query includes a user identifier and the permission information. The second application performs a permission check and authorization for the user based on the query. A query response that includes an access indication is the received from the second application. The request is granted or denied based on the access indication.

System and method for externally-delegated access control and authorization

An item is shared based on an information boundary and access control settings. An application such as a document management application detects a selection of an information boundary to manage a sharing action associated with the item. The information boundary includes rules to define how the item is shared. A selection of an access control list is also detected to manage recipients who have an access to the item. The access control list allows a recipient in the list an ability to search and discover the item. In response to a detection of the sharing action to share the item, the information boundary and the access control list is applied to the item. The item is then shared based on the information boundary and the access control list through a link of the item transmitted to a recipient.

Item sharing based on information boundary and access control list settings

A collaboration service is disclosed that hosts various collaboration sites. Each of the sites includes desktop pages and mobile pages. A routing service redirects mobile requests for the desktop pages to the mobile pages in accordance with a desktop-to-mobile mapping that defines an unbalanced correspondence between the desktop pages and the mobile pages. The routing service also redirects desktop requests for the mobile pages to the desktop pages in accordance with a mobile-to-desktop mapping that defines a balanced correspondence between them desktop pages and the mobile pages.

Unbalanced mapping between desktop and mobile pages

System and method involving the manipulation of information that may be embedded in content in a variety of ways and for a number of reasons, such as for protecting the embedded content from unauthorized users. Additionally, application program interfaces are disclosed that expose one or more methods relating to encoding data before the data is embedded in some content. Conversely, a method for decoding data that has been embedded in content is provided.

Manipulation of information embedded in content

A facility for obtaining information related to a selection within a hierarchical data structure is provided. The facility detects a selection of a node in a hierarchical data structure, and determines whether the node is a significant node. Responsive to determining that the currently selected node is a significant node, the facility transforms the significant node into a format suitable for retrieving additional information related to the significant node. For example, the format may include a context, which identifies a piece of metadata, and at least one item of data from the hierarchical data structure. The facility then obtains the additional information.

Obtaining and displaying information related to a selection within a hierarchical data structure

Growing community of inventors

Kirkland, WA, United States of America

Alexandru Dan Burst