Abstract: A generic transaction replication service receives update transactions from individual application servers, and forwards the update transactions for processing to all application servers that run the same service application, thereby enabling each application server to maintain a replicated copy of service content data. Upon receiving an update transaction, the application servers perform the specified update, and asynchronously report back to the transaction replication service on the "success" or "failure" of the transaction. When inconsistent transaction results are reported by different application servers, the transaction replication service uses a voting scheme to decide which application servers are to be deemed "consistent," and takes inconsistent application servers off-line for maintenance. Each update transaction replicated by the transaction replication service is stored in a transaction log.

Abstract: Access rights of users of a computer network with respect to data entities are specified by a relational database stored on one or more security servers. Application servers on the network that provide user access to the data entities generate queries to the relational database in order to obtain access rights lists of specific users. An access rights cache on each application server caches the access rights lists of the users that are connected to the respective application server, so that user access rights to specific data entities can rapidly be determined. Each user-specific access rights list includes a series of category identifiers plus a series of access rights values. The category identifiers specify categories of data entities to which the user has access, and the access rights values specify privilege levels of the users with respect to the corresponding data entity categories.