International Business Machines Corporation

Kenneth Carlin Nelson

Tawei Hu

Lily Liang

David Mun-Hien Choy

Randal James Richardt

Gerald Edward Kozina

Yuping Wang

Rupa Bhaghavan

Marilene Araujo Noronha

Alan Tsu-I Yaung

Jy-Jine James Lin

Brett Edward Morris

Mang-Rong Ho

Lynda Arnold Hansen

Dwayne Lorenzo Richardson

David M Choy

Edward Joseph Perry

An Feng-I Chen

Hui-I Hsiao

Kenneth Louis Milsted

Alan T Yaung

I-Shin Andy Wang

Mimi Phuong-Thao Vo

James Lin

Karen Wolfe Brannon

Mayank Vipin Shah

Khanh M Le

Edward Joseph Gallagher

Howard Hao Zhang

Donald Edward Benson

Ting Zhao

Christopher T Lehman

Wayne Frederick Miller

Fang-Yi Wang

Sharon McKenna Sanders

Randy Richardt

Matthew Laue

Deb Sudipta

Qing Lu

Tracee Tao

Sudipta Deb Deb

Ed Gallagher

Gerald R Clarke

Various embodiments of a method, apparatus and article of manufacture provide a decision point in a workflow system comprising a server and at least a first client work node. A decision point work node is provided at the server. A SQL expression which is associated with the decision point work node and the first client work node is generated. The server determines whether to route a work package to the first client work node based on the SQL expression.

Use of generated SQL for evaluation of decision point rules in a workflow system

Embodiments of the present invention support a flexible access control design that includes flexible ownership and assignment of access control lists (ACLs). The ACLs can be assigned to one or more resources, or items, or types of resources or items. A creator or owner of an ACL can grant privileges to others such that they may modify or assign the ACL. Each ACL can have one or more owners, i.e., users that can exercise control over the ACL. Any owner of an ACL can designate certain privileges to other users. These other users may then use the ACL based on the privileges granted to them.

Facilitating ownership of access control lists by users or groups

Systems, methods and articles of manufacture are disclosed for processing documents for electronic discovery. A request may be received to perform a task on documents, each document having a distinct document identifier. A task record may be generated to represent the requested task. The task record may include information specific to the request task. However, the task record need not include any document identifiers. At least one batch record may be generated that includes the document identifier for each of the documents. The task record may be associated with the at least one batch record. The requested task may be performed according to the task record and the at least one batch record. An audit record may be generated for the performed task. The audit record may be associated with the at least one batch record.

Reducing processing overhead and storage cost by batching task records and converting to audit records

In a content management system having a plurality of resource managers storing objects, a replica resource manager stores a replica of an object stored in one of the plurality of resource managers. A library server contains a resource manager table that defines the plurality of resource managers and includes availability information for each of those resource managers. When a client requests an object, the library server identifies a primary resource manager storing the object. The library server also determines a replica resource manager storing a replica of the object and returns information identifying that replica resource manager if the resource manager table indicates that the primary resource manager is unavailable and indicates that the replica resource manager is online and available. The client then retrieves the replica object without incurring a timeout delay waiting for the primary resource manager to respond to an access request.

Fail over resource manager access in a content management system

System for authenticating a user for logon to a content manager running on top of a database manager. A connect procedure connects the user to a database manager; and then a logon procedure logs on the user to the content manager selectively responsive to the user connecting to the database manager; the user being authenticated by a third party by way of a user exit or a trusted logon environment and privilege; or the user being authenticated by the content manager.

System and method for ensuring security with multiple authentication schemes

Analyzing performance data from a relational database to discover poorly performing SQL statements includes creating event records of performance data for query statements executed by a relational database management system, and condensing the performance data in the event records. A performance summary can be generated for each condensed event record. The performance summaries can then be analyzed based on performance characteristics to identify poorly performing SQL statements.

Analysis of performance data from a relational database system for applications using stored procedures or SQL

A system to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Implementing access control for queries to a content management system

Access to system and user defined entities (objects, data items, or the like) is managed by a content manager. A privilege grants a user an ability to access system such controlled entities. An item is an atomic user data entity stored in the CM library server. A privileges table is used to store system and user defined privileges. A privilege is represented by a row in the table. Each privilege has a unique privilege code, with codes 0 to 999 reserved to store system-defined privileges and codes beyond 999 open for user-defined privileges thus allowing application specific privileges to be added without limit.

System and method for managing application specific privileges in a content management system

A computer-based method with multilevel hashing for lookup of a complex nested object (such as access control list) which has a plurality of nesting levels and each level has at least one element. Method stores representatives of a complex nested object in a data structure at locations determined by recursive multilevel hashing of the complex nested object elements. When needed, a match for an inputted complex nested object is determined by applying the same recursive multilevel hashing to the inputted complex nested object, as used during the storing of the complex nested object, and performing integer comparisons with hash values of the stored complex nested object.

Matching of complex nested objects by multilevel hashing

A method of controlling access in a content management system includes defining a domain among a plurality of domains for the content management system and designating a domain administrator for the domain. This enables the domain administrator to perform administrative tasks within the domain without revealing or affecting information in other domains of the content management system. For example, a domain administrator can view user information only for users associated with that domain. The domain administrator also can associate a user with only the defined domain, thereby limiting the user's access to information in the system to information associated with the domain.

Method for delegation of administrative operations in user enrollment tasks

A system automates workflow routing within a system such as a content management system. The system administrator specifies initial workflow process and priorities for item types, ItemTypes. When the administrator defines an ItemType, a drop-down field is provided by the present system in which the available process names are displayed. A second drop-down field provided by the present system will contain the priority for the work. The administrator may select one of each for the new document, item, or folder. This process and priority information is stored as part of the ItemType definition in the library server. When an item is created, the library server checks the definition of the ItemType. If auto-workflow is specified, a work package is created by the present system on the first node in the specified process. The priority of the item is also set as previously defined by the administrator.

System and method for automatically starting a document on a workflow process

A method to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Method for implementing access control for queries to a content management system

Growing community of inventors

Hollister, CA, United States of America

Kenneth Carlin Nelson