International Business Machines Corporation

Jy-Jine James Lin

Alan Tsu-I Yaung

Tawei Hu

David Mun-Hien Choy

Taejae Lee

Yuping Wang

Kehsing J Chou

An Feng-I Chen

Kenneth Carlin Nelson

Robert N Summers

I-Shin Andy Wang

Basuki N Soetarman

Mimi Phuong-Thao Vo

Mei-Ing W Huang

Chung-Sheng Li

John Richard Smith

Sriram Kolinjivadi Padmanabhan

Yuan-Chi Chang

Lawrence David Bergman

Hui-I Hsiao

Frederick Thomas Sharp

Anant Deep Jhingran

Lily Liang

Gene Y C Fuh

Howard Hao Zhang

Edward Joseph Perry

Robin Williams

Wayne Frederick Miller

Siucheong Kenny Tse

Access to system and user defined entities (objects, data items, or the like) is managed by a content manager. A privilege grants a user an ability to access system such controlled entities. An item is an atomic user data entity stored in the CM library server. A privileges table is used to store system and user defined privileges. A privilege is represented by a row in the table. Each privilege has a unique privilege code, with codes 0 to 999 reserved to store system-defined privileges and codes beyond 999 open for user-defined privileges thus allowing application specific privileges to be added without limit.

System and method for managing application specific privileges in a content management system

An architecture to enable search gateways as part of a federated search supports searching for data in one or more heterogeneous data sources. The one or more heterogeneous data sources are within a computer system. Initially, a request for data is received at a federated data source. From the federated data source, data is retrieved from one or more of one or more terminal data repositories or one or more search gateway data sources.

Architecture to enable search gateways as part of federated search

System and method for authorizing access to an entity by a user, by binding an access control list to each entity; specifying for the user a set of user privileges; intersecting the access control list and set of user privileges in a compiled ACL table; incrementally refreshing the compiled ACL table responsive to run time modification of relevant tables containing the access control list and set of user privileges; and referencing the compiled access control list to authorize a user request to access an entity.

System and method for incremental refresh of a compiled access control table in a content management system

A system and method for authorizing access to a controlled entity by a user. A set of user privileges is provided for user; and a content manager intersects an access control list (ACL) and the set of user privileges to authorize access. Binding level control indicia selectively binds an access control list (ACL) to the controlled entity at item type, item, mixed, or library binding level. An item type comprises one or more component items with each component item having one or more item views which together form an item type view. A content manager is responsive to the binding level to perform ACL checking for authorizing access to the controlled entity by the user.

System and method for configurable binding of access control lists in a content management system

Provided is a method, system, and program for performing workflow related operations. An application programming interface call (API) is received to perform a workflow related operation. A determination is made of at least one stored procedure call associated with the received API. The determined at least one stored procedure is then called to cause the execution of one determined stored procedure on a database server to perform the workflow related operation of the API.

Method, system, and program for performing workflow related operations using an application programming interface

Provided is a method, system, and program for performing an Input/Output (I/O) operation on an object during execution of a workflow comprised of nodes. A plurality of objects are stored in one of multiple data stores, wherein each object is identified within the data store with a first object identifier. A workflow packet references at least one object with a second object identifier, wherein the second object identifier indicates one of the data stores and the first object identifier of the referenced object in the data store. An I/O request for one target object referenced by one second object identifier in the workflow packet is received from one node. A determination is made from the second object identifier for the target object the data store and the first object identifier of the target object. The I/O request is performed on the target object at the determined first object identifier in the determined data store.

Method, system, and program for using objects in data stores during execution of a workflow

Provided is a method, system, and program for maintaining workflow related information. At least one table is provided in a database storing workflow related data. A plurality of methods are provided, wherein each method specifies an operation to perform on the workflow related data in the at least one table, and wherein each method is associated with one stored procedure call. One stored procedure is provided in the database for each stored procedure call and corresponding method, wherein the stored procedure includes a plurality of database statements to perform the method operation. One stored procedure is executed in the database to perform the corresponding method operation on workflow related data in one table.

Method, system, and program for maintaining information in database tables and performing operations on data in the database tables

The present invention discloses a method, apparatus, and article of manufacture for tracking and propagating state changes in a message-driven computer program. In accordance with the present invention, a program in the memory of a computer receives a notification signal indicating that an event has occurred and transitions a first component from a current state to a new state based on the notification signal, wherein the states are represented by discrete objects or components. The computer program propagates, to a second component subordinate to a first component representing the new state, a signal indicating the new state of the first component.

Tracking and propagating updates to a message-driven system of interdependent components

Methods and apparatus for providing a multi-tier object-relational database architecture are disclosed. In one illustrative embodiment of the present invention, a multi-tier database architecture comprises an object-relational database engine as a top tier, one or more domain-specific extension modules as a bottom tier, and one or more universal extension modules as a middle tier. The individual extension modules of the bottom tier operationally connect with the one or more universal extension modules which, themselves, operationally connect with the database engine. The domain-specific extension modules preferably provide such functions as search, index, and retrieval services of images, video, audio, time series, web pages, text, XML, spatial data, etc. The domain-specific extension modules may include one or more IBM DB2 extenders, Oracle data cartridges and/or Informix datablades, although other domain-specific extension modules may be used.

Methods and apparatus for constructing and implementing a universal extension module for processing objects in a database

A method, apparatus, and article of manufacture for an object-oriented framework for managing access control in a multimedia database connected to a computer is provided. A datastore access control object is generated for the datastore, wherein the datastore access control object enables controlling access to the datastore. An access control list object is manipulated with the datastore access control object to set access privileges.

Object-oriented framework for managing access control in a multimedia database

A method, apparatus, and article of manufacture for a computer-implemented access control system. The access control system controls access by users to functions of an application program executed by a computer and connected to a multimedia datastore. Application privileges are defined to control access to functions of the application program which operate upon data items of the multimedia datastore. For the application program, one or more users are associated with one or more application privileges. Access by users to functions of the application program is restricted depending upon whether the user has been associated with the application privilege for the function. If the user has been associated with the application privilege, access to the function is granted, if not, access to the function is denied.

Access control system for a multimedia datastore

A design and implementation of a client/server framework for federated multi-search and update across heterogeneous datastores. In particular, a technique for manipulating data in one or more heterogeneous datastores at a computer is provided. An object-oriented model is provided for integrating one or more heterogeneous datastores with a federated datastore. One or more heterogeneous datastores and a federated datastore are generated based on the object-oriented model. The generated datastores are organized into a federated composition.

Design and implementation of a client/server framework for federated multi-search and update across heterogeneous datastores

A method, apparatus and article of manufacture for a universal calling interface for executing a stored procedure in a computer. Parameter information is retrieved from a database catalog and the computer performs type checking against the user-entered parameters. If there is not a type mismatch then the computer executes the stored procedure without the user entering information about the parameters such as address and type.

Growing community of inventors

Cupertino, CA, United States of America

Jy-Jine James Lin