General Electric Company

Oracle International Corporation

Bea Systems, Inc.

Sanjeev Chopra

Mark Spotswood

Stephen R Fanshier

Don Ferguson

Dariush Amiri

Atul Chandrakant Kshirsagar

Vineet Banga

Leo Chu

In some example embodiments, a method includes storing a user attribute, a resource attribute of a resource of a web service, one or more scope conditions for applying one of attributes in generating a decision of whether to permit an action, and a script comprising an access control policy comprising one or more policy conditions to be satisfied in order to permit an action. A web service request may be received for accessing the resource. The scope condition(s) may be determined to be satisfied, and a decision to permit or deny the web service request may be generated based on the access control policy, with use of the stored attribute in generating the decision being based on the determination that the scope condition(s) are satisfied. Generating the decision may comprise interpreting the script. The decision may be transmitted to the web service.

System and method for scoped attributes

A credentials database that includes a first credentials locker with a first path defining the location of the first locker, and a second credentials locker. An application program is executed and the application program is a computer program that has direct interaction with a user. A first service program and a second service program are executed, and the first service program and the second service program do not have direct interaction with the user. The first service program is called by the application program, and the second service program is called by the first service program. The first service program uses security credentials to request and obtain data from the second service program, and the second service program. The first service program always has access to and is able to obtain the current credentials.

Apparatus and method for obtaining up-to-date security credentials

A system and method for application scoping that can be added to the application model for an application server, making it less global-centric and more application-centric. The JNDI tree is configured to allow for an application-private JNDI section. This private JNDI section then acts as a private data repository for the application. Resources that are needed by the application can be stored in the application-specific JNDI tree, and thus 'scoped' to that particular application. As applications are added to the system, they can be specified in this way. The overall result is fewer changes at the system-wide or global level. The application scoping features provided by the invention include: Use of application scoped JNDI tree; Application Scoped JDBC DataSources; and Application Scoped Security. Application scoped resources provide two primary advantages&#x2014;Security, in that resources owned by one application can't be used by another; and Simplified packaging and configuration.

System and method for software application scoping

Growing community of inventors

Dublin, CA, United States of America

Sanjeev Chopra