International Business Machines Corporation

Tawei Hu

Kenneth Carlin Nelson

Lily Liang

David Mun-Hien Choy

Yuping Wang

Edward Joseph Perry

Alan Tsu-I Yaung

Jy-Jine James Lin

Howard Hao Zhang

Randal James Richardt

Gerald Edward Kozina

Mang-Rong Ho

Khanh M Le

An Feng-I Chen

Yongliang Li

Thomas S Lee

Phong Kim Truong

Iun Veng Leong

David M Choy

Thomas G Burket

Rupa Bhaghavan

Seifu Ali

Hui-I Hsiao

Alan T Yaung

I-Shin Andy Wang

Mimi Phuong-Thao Vo

James Lin

Karen Wolfe Brannon

Mayank Vipin Shah

Li Ming Wang

Dwayne Lorenzo Richardson

Edward Joseph Gallagher

Donald Edward Benson

Randy Richardt

Matthew Laue

Tracee Tao

Sudipta Deb Deb

Ed Gallagher

Gerald R Clarke

Deb Sudipta

End of retention processing is provided. Included is: creating, using a content manager (CM), an end of retention policy for a content in a database management system (DBMS; and creating, based on the end of retention policy, a stored procedure in the DBMS for managing the end of retention policy.

End of retention processing using a database manager scheduler

A system and article of manufacture providing a high performance access control list. The preferred embodiments operate in a computer network having a plurality of users of the network and comprising a database management system and a content management system controlling access to a plurality of entities shareable by the users of the network, the content management system using an access control list table having group privilege rules and user privilege rules for controlling access to the entities. A high performance ACL system and article of manufacture is provided, the system and article including a run-time compiled ACL table, wherein the compiled ACL table provides resolved privilege rules for each of the users at run-time, and using the compiled ACL table, the content management system accesses user-selected ones of the entities based on the resolved privilege rules.

High run-time performance system

A system to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Implementing access control for queries to a content management system

Access to system and user defined entities (objects, data items, or the like) is managed by a content manager. A privilege grants a user an ability to access system such controlled entities. An item is an atomic user data entity stored in the CM library server. A privileges table is used to store system and user defined privileges. A privilege is represented by a row in the table. Each privilege has a unique privilege code, with codes 0 to 999 reserved to store system-defined privileges and codes beyond 999 open for user-defined privileges thus allowing application specific privileges to be added without limit.

System and method for managing application specific privileges in a content management system

A method of controlling access in a content management system includes defining a domain among a plurality of domains for the content management system and designating a domain administrator for the domain. This enables the domain administrator to perform administrative tasks within the domain without revealing or affecting information in other domains of the content management system. For example, a domain administrator can view user information only for users associated with that domain. The domain administrator also can associate a user with only the defined domain, thereby limiting the user's access to information in the system to information associated with the domain.

Method for delegation of administrative operations in user enrollment tasks

A method providing a high performance access control list. The preferred embodiments operate in a computer network having a plurality of users of the network and comprising a database management system and a content management system controlling access to a plurality of entities shareable by the users of the network, the content management system using an access control list table having group privilege rules and user privilege rules for controlling access to the entities. A high performance ACL method is provided, the method comprising providing a run-time compiled ACL table, wherein the compiled ACL table provides resolved privilege rules for each of the users at run-time, and using the compiled ACL table, the content management system accessing user-selected ones of the entities based on the resolved privilege rules.

High run-time performance method for setting ACL rule for content management security

A method to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Method for implementing access control for queries to a content management system

System and method for authorizing access to an entity by a user, by binding an access control list to each entity; specifying for the user a set of user privileges; intersecting the access control list and set of user privileges in a compiled ACL table; incrementally refreshing the compiled ACL table responsive to run time modification of relevant tables containing the access control list and set of user privileges; and referencing the compiled access control list to authorize a user request to access an entity.

System and method for incremental refresh of a compiled access control table in a content management system

A system and method for authorizing access to a controlled entity by a user. A set of user privileges is provided for user; and a content manager intersects an access control list (ACL) and the set of user privileges to authorize access. Binding level control indicia selectively binds an access control list (ACL) to the controlled entity at item type, item, mixed, or library binding level. An item type comprises one or more component items with each component item having one or more item views which together form an item type view. A content manager is responsive to the binding level to perform ACL checking for authorizing access to the controlled entity by the user.

System and method for configurable binding of access control lists in a content management system

A method, system and article of manufacture for reducing a deadlock probability during transaction processing in a computer network system having a plurality of users of the network system that comprises a content management system performing implicit transactions via API calls to a library server on a plurality of entities shareable by users of the network. The computer-implemented method comprises invoking a transaction sequence in response to a transaction request, performing a prepare portion of the transaction sequence, implicitly committing the prepare portion of the transaction, performing an update portion of the transaction sequence, and fully committing the transaction.

Library server locks DB2 resources in short time for CM implicit transaction

A content management system provides versioning capability that can either be controlled by the client application or be transparent thereto. Control of document versions depends on the root and child component attributes that are defined by the hierarchical structure of the document. When a document is updated, the present system performs any or all of the following scenarios as desired by the user: replace the existing attribute values stored in the root component instance for a specified document; replace the existing attribute values stored in a specified child component instance for the specified document; add a new child component instance into the hierarchical structure for the specified document; or delete an existing child component instance from the hierarchical structure for the specified document.

System and method for item versioning in a content mangement system

A content management system is provided including a server computer and a client computer. The server includes a data repository and a stored procedure. The disclosed methodology provides a way of handling parameter passing of structured data for stored procedures in the system. The system is capable of both encoding data into a structured data format and decoding data from the structured data format. The structured data format employs a binary large object (BLOB) and character large object (CLOB) to achieve handling of fixed length binary data and variable length character data. Advantageously, the stored procedure interface need not be rewritten and customized for each stored procedure in the server.

Method and apparatus of parameter passing of structured data for stored procedures in a content management system

Methods, systems, and program products for managing multimedia content. These are built upon a combination of a high level content model for specific multimedia content types and a low level physical for mapping to a data engine. The method, system, and program product include representing multimedia content management objects and managing the objects in a relational database. The relational database is adapted for representing data in a plurality of relational database tables, where each of the relational database tables has at least one row with a plurality of columns. Content is managed by associating the object as an item to a row in a first relational database table; and associating additional components, if any, of the object to additional relational database tables.

Method, system, and program product to support multiple content-management data models

A content management system is provided including a plurality of tables forming a tree-based storage hierarchy. The system includes a library server having a stored procedure which creates a hierarchical tree-based storage structure having any number of child components horizontally and any number of component types vertically thus specifying a tree topology. Advantageously, a single invocation of the stored procedure will create the specified tree-based data storage structure which is stored in the library server.

Growing community of inventors

San Jose, CA, United States of America

Tawei Hu