The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Apr. 26, 2005
Filed:
May. 15, 2001
Richard D. Harrah, Seattle, WA (US);
Humberto a Sanchez, Ii, Ft Collins, CO (US);
Jeffrey R. Finz, Portland, OR (US);
Mary Thomas Robb, Fort Collins, CO (US);
Terence E. Lister, Fort Collins, CO (US);
Paula B. Curtis, Windsor, CO (US);
Douglas P. Drees, Fort Collins, CO (US);
Richard D. Harrah, Seattle, WA (US);
Humberto A Sanchez, II, Ft Collins, CO (US);
Jeffrey R. Finz, Portland, OR (US);
Mary Thomas Robb, Fort Collins, CO (US);
Terence E. Lister, Fort Collins, CO (US);
Paula B. Curtis, Windsor, CO (US);
Douglas P. Drees, Fort Collins, CO (US);
Hewlett-Packard Development Company, L.P., Houston, TX (US);
Abstract
A method and apparatus for managing tool execution via roles on a computer system while maintaining computer system security, wherein the computer system comprises a plurality of roles, are disclosed. Such a method and apparatus may include delegating tools to a user based on a role, wherein a tool provides root access for performing a specific task in the computer system and the role is an authorized role that enables the user to run the delegated tools, identifying one of the plurality of roles to be disabled, wherein the identified role is the authorized role, accessing the identified role, and, disabling the identified role so that the user cannot run the delegated tool(s). Disabled roles may likewise be enabled according to a disclosed method and apparatus. Embodiments of the invention may comprise authorization objects that comprise attributes identifying the roles and machine for which a user is authorized.