Abstract: In one embodiment, a method is disclosed. The method may include applying a mandatory access control (MAC) policy to an item type, and receiving, from a processing device, a request to access a first item in a data structure, wherein the first item including the item type, responsive to receiving the request. The method may include executing the MAC policy to instruct the processing device to traverse one or more relationships between the first item and one or more other items to identify a target item, determining whether a derived attribute of the target item is satisfied. Responsive to determining the derived attribute of the target item is satisfied, the method may include enabling access to the first item.

Abstract: A method for implementing access controls for items of data belonging to a self-describing data structure including obtaining a query definition specifying a requested item of data in the self-describing data structure, determining domains associated with the requested item, the domains including a set of items within the self-describing data structure on an execution path of a query executed according to the query definition. For each respective domain associated with the requested item, the method includes determining subdomains associated with the requested item, determining a role of the user for the respective domain, the role is associated with a set of access permissions to items of data within the domain, and generating an output corresponding to whether access to the requested item is granted based on a policy for each of the subdomains associated with the requested item and the role of the user for the domain.

Abstract: A method for implementing access controls for items of data belonging to a self-describing data structure including obtaining a query definition specifying a requested item of data in the self-describing data structure, determining domains associated with the requested item, the domains including a set of items within the self-describing data structure on an execution path of a query executed according to the query definition. For each respective domain associated with the requested item, the method includes determining subdomains associated with the requested item, determining a role of the user for the respective domain, the role is associated with a set of access permissions to items of data within the domain, and generating an output corresponding to whether access to the requested item is granted based on a policy for each of the subdomains associated with the requested item and the role of the user for the domain.

Abstract: A method for implementing access controls for items of data belonging to a self-describing data structure including obtaining a query definition specifying a requested item of data in the self-describing data structure, determining domains associated with the requested item, the domains including a set of items within the self-describing data structure on an execution path of a query executed according to the query definition. For each respective domain associated with the requested item, the method includes determining subdomains associated with the requested item, determining a role of the user for the respective domain, the role is associated with a set of access permissions to items of data within the domain, and generating an output corresponding to whether access to the requested item is granted based on a policy for each of the subdomains associated with the requested item and the role of the user for the domain.

Abstract: A method for implementing access controls for items of data belonging to a self-describing data structure including obtaining a query definition specifying a requested item of data in the self-describing data structure, determining domains associated with the requested item, the domains including a set of items within the self-describing data structure on an execution path of a query executed according to the query definition. For each respective domain associated with the requested item, the method includes determining subdomains associated with the requested item, determining a role of the user for the respective domain, the role is associated with a set of access permissions to items of data within the domain, and generating an output corresponding to whether access to the requested item is granted based on a policy for each of the subdomains associated with the requested item and the role of the user for the domain.

Abstract: A method for implementing access controls for items of data belonging to a self-describing data structure including obtaining a query definition specifying a requested item of data in the self-describing data structure, determining domains associated with the requested item, the domains including a set of items within the self-describing data structure on an execution path of a query executed according to the query definition. For each respective domain associated with the requested item, the method includes determining subdomains associated with the requested item, determining a role of the user for the respective domain, the role is associated with a set of access permissions to items of data within the domain, and generating an output corresponding to whether access to the requested item is granted based on a policy for each of the subdomains associated with the requested item and the role of the user for the domain.

Abstract: A method and apparatus for translating parts along a path between processing stations. In a class of preferred embodiments, the parts are singulated electronic components, and the processing stations include nozzle arrays for directing jets of process fluid (such as water chemicals, gas or air) at the components. Each part rests on a pair of horizontally separated, endless belts. The top, bottom, and side surfaces of each part (and any leads protruding from the parts) are simultaneously exposed to treatment apparatus that may be positioned above and below the belts. If a downward-oriented nozzle array is disposed above the belts and an upward-oriented nozzle array is disposed below the belts, at the same position along the processing path, the top, bottom, and side surfaces of each part can be simultaneously exposed to process fluid jets from the nozzles.

Abstract: An electrolytic apparatus and a material handling apparatus, including a pair of drive chains oriented to rotate in a substantially vertical plane. One or more product carriers, each including a basket portion, are supported by the chains. As the chains rotate, the product carriers are translated along a path in a substantially vertical plane. One tier of treatment tanks, or two tiers of vertically separated treatment tanks, may be positioned below the drive chains. Workpieces, such as encapsulated electronic components, may be placed within the baskets and translated by the drive chains for sequential immersion in each tank. Sprocket arrays engaged with each drive chain at positions above each tank direct the baskets first upward and then downward over the tank end walls, or over any barriers between the tanks.

Abstract: A material handling apparatus, including a pair of drive chains (each configured as a continuous loop oriented in a substantially vertical plane), and one or more rigid members are attached between the chains. A product carrier is supported by each rigid member, and a product (which may include one or more integrated circuit leadframes) rests in each carrier. As the chains simultaneously rotate at the same rotational speed, they translate each member, carrier, and product along a carrier path in a substantially vertical plane. One or more nozzle arrays (each comprising one or more nozzles) are positioned along the carrier path, preferably above the drive chains. Barriers are preferably positioned between the drive chains and selected ones of the nozzles to prevent exposure of the drive chains to some or all of the jets from the nozzles (and especially to abrasive, corrosive, or otherwise harsh jets such as deflashing slurry jets).

Abstract: A random access oven system including an oven, a vestibule, a loading conveyor, and a cooling conveyor. A plurality of load carriers, arranged in one or more tiers, are translated within the oven by one or more drive chains, in response to remotely generated commands. Loads to be treated in the oven are queued on the loading conveyor and are supplied to the vestibule in response to remotely generated commands. Any desired load carrier may be brought to a position adjacent the vestibule where the load carried by the carrier may be transferred to a conveyor within the vestibule, or a load within the vestibule may be transferred to the load carrier. After exiting the oven following heat-treatment, a load within the vestibule may be transferred onto the cooling conveyor. After a desired cooling period, each load on the cooling conveyor may be transferred out of the inventive system, for example to an adjacent conveyor.