Abstract: The present invention relates to the field of portal programming and in particular to a method and respective system for managing community control information in a portal environment. In order provide a method and system which facilitates the management of community membership information required for portal composite applications, it is proposed to generate and store a “user-to-role mapping” data item (55) in a respective storage structure and use that as re-usable control information intended to be easily re-usable for further or even many composite applications, which are managed including the use of that storage structure.

Abstract: Embodiments of the present invention address deficiencies of the art in respect to access control and provide a method, system and computer program product for access control management for a composite application. In a first embodiment, a method for role-based access control management for a composite application can be provided. The method can include selecting a component for deployment in a composite application and parsing a security policy for the component to identify a mapping between a specific role for the component and a virtual role for the composite application. Binding logic can be generated from the security policy and the component can be deployed into the composite application. Finally, security access operations for the virtual role can be processed through method calls to operations defined in the binding logic.

Abstract: Embodiments of the present invention address deficiencies of the art in respect to access control and provide a method, system and computer program product for access control management for a collection of heterogeneous application components. In a first embodiment, a data processing system for role-based access control management for multiple heterogeneous application components can include at least one business role descriptor associating a business role with multiple, different application roles for corresponding, disparate application components. The system also can include at least one access policy associating a user with the business role. Finally, the system can include policy deployment logic include program code enabled to process the access policy to assign the user to the different application roles in the disparate application components.

Abstract: The invention relates to a role-based access control system, including a role definition system for defining roles to be sets of permissions on individual resources thus forming role instances, respectively; and a super role definition system for defining at least one super role by grouping a set of role instances into one super role, wherein the one super role contains all permissions contained in the grouped resource instances. Furthermore, the present invention deals with an appropriate method, a computer program and a computer program product.

Abstract: The present invention provides a system and method for developing a Portal Application by creating a Portal Application Archive, and automatically deploying the Portal Application Archive into a Portal Server Application by using a Portal Application Archive specific deployment mechanism. The Portal Application Archive represents an entity which includes an assembly of all required application components forming a coherent Portal Application, and an application component assembly descriptor which specifies how the single application components need to be assembled to provide the complete Portal Application on the Portal Server Application.

Abstract: Under the present invention, role types are defined by association with certain permissible actions. Once defined in this manner, a role type can then be bound to “nodes” of a hierarchical tree that represent computer-based resources such as dynamic object spaces. Once bound to a node, instances of this role type are created that will be inherited by hierarchical descendants of that node unless a role type block (e.g., inheritance or propagation) has been established for the corresponding role type. The present invention also allows the computer-based resources to be defined as virtual or private. Virtual resources represent general protected concepts in the system instead of computer-based resources and are subject to be bound with roles, while private resources are not. That is, the private resources remain the “property” of the creating user or group.

Abstract: A tool and parts tray having a shallow tray base, formed of bent and welded sheet metal, with first and second generally identical suspension strap members formed of sheet metal bent and configured for securing, such as by welding, to the bottom and adjacent side of the tray base. The lower ends of the suspension strap members are triangularly configured to provide a base portion of the triangle for affixing to the bottom, a leg portion perpendicular to the bottom and a hypotenuse portion providing bracing to the leg portion. The other end of the suspension strap member is disposed at a right angle to the leg portion. First and second generally identical L-shaped members formed of sheet metal are adjustably attached at the suspension ends of the suspension straps to form a hook for positioning over a suitable support, such as a cross beam of a hydraulic vehicle lift. A tool and parts holding means is provide in the form of depressions in the tray bottom or by means of magnetic strips in the tray bottom.