Abstract: Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from an application to obtain permission and identity information related to the monitored requests, wherein the monitoring includes obtaining a runtime stack from the application, determining, based on environment information in the runtime stack, whether a first set of privileges available to the application are greater than a second set of privileges available to a the user of the application, storing the permission and identity information and an indication of whether the first set of privileges is greater than the second set of privileges in a data file, and adjusting the privileges for the user based on the determination.

Abstract: Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from an application to obtain permission and identity information related to the monitored requests, wherein the monitoring includes obtaining a runtime stack from the application, determining, based on environment information in the runtime stack, whether a first set of privileges available to the application are greater than a second set of privileges available to a the user of the application, storing the permission and identity information and an indication of whether the first set of privileges is greater than the second set of privileges in a data file, and adjusting the privileges for the user based on the determination.

Abstract: Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from a first application to obtain a set of call information based on runtime stack information related to calls of the first application requesting access to the file, storing the set of call information in a data file, receiving a request for access to the file from a second application, obtaining call information from a runtime stack from the second application, comparing the call information with the set of call information, determining the request for access is an abnormal request based on the comparing, and taking an action based on the determination.

Abstract: Systems, methods, and computer program products to perform an operation comprising monitoring a set of file access requests to a file from an application to obtain permission and identity information related to the monitored requests, wherein the monitoring includes obtaining a runtime stack from the application, storing the permission and identity information in a data file, determining for the application and a file of the set of files, privileges available to the application for the available authority based on the stored data file, determining a set of privileges needed by the application to access the file based on the stored data file, selecting privileges for a user of the application based on set of privileges needed by the application and the authority available to the application, and assigning the privileges for the user based on the selected privileges.

Abstract: The present invention generally is directed to a method, system and article of manufacture for managing software fixes for a software product in a computer system. The method comprises: for each of a plurality of software fixes for a corresponding software product, determining whether the corresponding software product is installed on the computer system; if the corresponding software product is installed, then determining whether the each one of the plurality of software fixes is installed in the computer system; and if the each one of the plurality of software fixes is installed, then setting a status value to reflect that the plurality of software fixes is installed.

Abstract: The present invention generally is directed to a method, system and article of manufacture for managing software fixes for a software product in a computer system. The method comprises: for each of a plurality of software fixes for a corresponding software product, determining whether the corresponding software product is installed on the computer system; if the corresponding software product is installed, then determining whether the each one of the plurality of software fixes is installed in the computer system; and if the each one of the plurality of software fixes is installed, then setting a status value to reflect that the plurality of software fixes is installed.