Abstract: A role passing and persistence mechanism that implements role-based access control at a container level is disclosed. In one implementation, the role passing and persistence mechanism provides one or more RBAC services. Functions provided by the role passing and persistence mechanism include role validating, role persisting and role administration. The role passing and persistence mechanism is used to persist role information for a session between a client and a container for any type of client. No matter which adaptor a client uses to connect to the container, the role passing and persistence mechanism provides a uniform method of passing role information to the container such that persisted role information can be used by any service hosted by the container after the session is established and the role information has been persisted.

Abstract: An approach for managing functionalities within a system generally involves the use of indicators, such as privileges, that are associated with the functionalities. Each functionality is associated with an indicator that is used to determine whether the associated functionality is available for use by an end user. A determination is made that one or more particular functionalities are to be associated with the response because the particular indicator is included in the set of indicators and corresponds to the one or more functionalities. If the system includes functionalities for which indicators are not included in the set of indicators, those functionalities are not reflected in the response. The response is sent so that information regarding the one or more particular functionalities can be displayed via a user interface. In some implementations, an access control mechanism can use privileges for determining functionality availability and privileges for determining user access.

Abstract: Provided are a method, system, and program for allocating resources, wherein the resources are capable of being configured from a computer system. User interface elements are rendered enabling user selection of a plurality of strategies concerning allocation of computational resources, including a participation strategy having one of at least two values indicating a degree of user involvement in the allocation of computational resources and at least one configuration strategy specifying a configuration for the resource allocation. Selection of a plurality of resource allocation constraints is enabled if the selected value for the participation strategy is a first value. Selection of one of a plurality of configuration modes is enabled if the selected value for the participation strategy is a second value. An allocation is made of the resources based on the selected at least one configuration strategy and one of the selected resource allocation constraints or the selected configuration mode.

Abstract: Provided are a method, system and article of manufacture for object evaluation. A criteria is received. A determination is made if an object includes an operation corresponding to the criteria. The determined included operation is executed. A result is generated based on the execution.