Red Hat, Inc.

Michael B McCune

Maureen Emily Duffy

Jason Lilaus Connor

Peter Anthony Vetere

Robin L Norwood

Jesus M Rodriguez

Shannon Ray Hughes

Pradeep Kilambi

James Slagle

Some embodiments of an entitlement model have been presented. In one embodiment, a centralized server distributes copies of an operating system from a software vendor to a set of virtual guests of a virtual host running on a physical computing machine. The centralized server and the physical computing machine are coupled to each other within an internal network of a customer of the software vendor, whereas the centralized server has access to the software vendor external to the internal network of the customer. The centralized server may interact with a hypervisor of the physical computing machine to determine what type of license of the operating system the virtual host has and a number of copies of the operating system requested by the virtual guests.

Managing entitlements in a networked environment

Code for an application programming interface (API) can be automatically generated. For example, a processing device can receive a definition data describing functional and behavioral characteristics of the API in an API description language. The processing device can also receive a template data defining code logic for the API. The template data can include (i) template code in a template language, and (ii) program code in a programming language that is different from the template language and the API description language. The processing device can generate source code in the programming language using the template data and the definition data by performing operations in accordance with the template code. The operations can include at least replacing template variables with corresponding values from the definition file. The processing device can then compile the source code into an executable file, and execute the executable file to implement the API.

Automatically generating code for application programming interfaces

A method and system for providing an integrated application that includes software modules coupled to a message bus. The software modules include applications of different degrees of complexity and different number of components, such as management applications, service applications, and other similar applications. A computer system receives a first input that selects a user interface (UI) to access the integrated application. The selected UI can be a specific UI associated with a software module, or an orchestrator UI that unifies individual styles of the specific UIs. The computer system receives, via the selected UI, a second input to access a destination module among the software modules. If the selected UI is the orchestrator UI, the second input is forwarded to the destination module via the message bus. If the selected UI is a specific UI, the second input is sent to the destination module via the selected specific UI.

Integrated application that contains software modules coupled to a message bus

A method includes receiving a request of a user to perform an operation with respect to a first resource, in response to the request, determining, in view of a resource-based master data structure, a first resource-based permission data structure associated with the first resource, and accessing the first resource-based permission data structure to identify a first resource entry associated with the user. The method further includes upon determining that the first resource entry does not indicate that the user has a permission to perform the requested operation with respect to the first resource, determining a second resource-based permission data structure associated with a second resource that is a parent of the first resource, accessing the second resource-based permission data structure to identify a second resource entry associated with the user, and upon determining that the second resource entry indicates that the user has a permission to perform the requested operation with respect to the second resource, allowing the user to perform the requested operation with respect to the first resource.

Resource-centric authorization schemes

A method and system for the efficient creation and management of an e-mail distribution list. The method includes receiving, from a first sender, a first e-mail message directed to an e-mail address comprising a list name. An e-mail distribution list is created comprising a distribution list name, wherein the distribution list name is the list name of the e-mail address. The first sender is added as a first subscriber to the distribution list. A second e-mail communication directed to the e-mail address is received and the second sender is added as a second subscriber to the e-mail distribution list in view of the second e-mail communication.

Distribution list creation and subscription

A first request to change a permission of a first user for accessing a first resource is received via a service application programming interface (API) of an authorization server. In response to the first request, a first resource-based permission data structure associated with the first resource is accessed to identify an entry associated with the first user, wherein the first resource-based permission data structure has a plurality of entries corresponding to a plurality of users, respectively, each user being associated with one or more permissions for accessing the first resource. Further, one or more permissions in the identified entry associated with the first user are updated.

A first request is received, at a service application programming interface (API) of an authorization server, to change a permission of a first role for accessing a first resource. In response to the first request, a first role-based permission data structure associated with the first role is accessed to identify an entry associated with the first resource, where the first role-based permission data structure includes entries corresponding to resources, respectively. Each resource is associated with one or more permissions for a user of the first role to access the corresponding resource. One or more permissions are updated in the identified entry associated with the first resource.

Some embodiments of multiple organization support in a networked system have been presented. In one embodiment, a centralized server manages a networked system, which includes the centralized server and a set of computing machines coupled to each other within an internal network of a customer. The centralized server segregates data within the networked system by grouping data into the concept of an organization created by the customer in order to isolate the organizations.

Multiple organization support in a networked system

Some embodiments of virtualization management using a centralized server have been presented. In one embodiment, a centralized server obtains metadata of an operating system and information on provisioning computing resources from a software vendor. The centralized server is deployed within an internal network of a customer of the software vendor, where the internal network further includes a set of at least one physical machine. The centralized server may further generate a graphical user interface to allow users of the centralized server to manage a set of virtual machines running on the set of at least one physical machine. The set of virtual machines may include at least one virtual host and at least one virtual guest.

Growing community of inventors

Beaverton, OR, United States of America

Michael B McCune