Abstract: A role passing and persistence mechanism that implements role-based access control at a container level is disclosed. In one implementation, the role passing and persistence mechanism provides one or more RBAC services. Functions provided by the role passing and persistence mechanism include role validating, role persisting and role administration. The role passing and persistence mechanism is used to persist role information for a session between a client and a container for any type of client. No matter which adaptor a client uses to connect to the container, the role passing and persistence mechanism provides a uniform method of passing role information to the container such that persisted role information can be used by any service hosted by the container after the session is established and the role information has been persisted.

Abstract: Various embodiments of a system and method for provisioning a storage consumer with storage in a SAN networked computer system are disclosed. A SAN networked computer system may include one or more consumers of storage, such as host computers, a plurality of storage devices, and one or more SAN fabrics including the devices needed to connect the storage consumers to the storage devices. The system may also include a storage consumer-centric storage provisioner. To provide a storage consumer with storage, the storage consumer-centric storage provisioner may perform discovery on the system to acquire topologic information on the system along with the characteristics of system components. The storage provisioner may contextualize the information into the perspective of the storage consumer to present a user with candidate system configuration parameters from which to select, and when sufficient parameter selections have been input, the provisioner may configure the system according to the user selections.

Abstract: An approach for managing functionalities within a system generally involves the use of indicators, such as privileges, that are associated with the functionalities. Each functionality is associated with an indicator that is used to determine whether the associated functionality is available for use by an end user. A determination is made that one or more particular functionalities are to be associated with the response because the particular indicator is included in the set of indicators and corresponds to the one or more functionalities. If the system includes functionalities for which indicators are not included in the set of indicators, those functionalities are not reflected in the response. The response is sent so that information regarding the one or more particular functionalities can be displayed via a user interface. In some implementations, an access control mechanism can use privileges for determining functionality availability and privileges for determining user access.

Abstract: An access control mechanism that implements access control at a container level is disclosed. In one implementation, the access control mechanism provides one or more access control services, and registers these services with a container. Once registered, the access control services are exposed to other applications in the container, and those applications can invoke the services to have the access control mechanism implement access control on their behalf. The access control mechanism implements access control for all applications within the container; thus, the applications do not need to implement their own access control mechanisms. In addition, the access control mechanism is not an operating system component. Thus, by relying on the access control mechanism for access control functionality, the applications are not relying on any operating system component. As a result, the applications, the container, and the access control mechanism can be ported to and run on other operating systems/platforms.

Abstract: Provided are a method, system, and program for processing a call. A call is invoked from a caller object to a target object, wherein the caller and target objects comprise component objects loaded with caller and target class loaders, respectively, and wherein the caller object invokes the call using a local method invocation. The classes needed to process the call are loaded if the needed classes are not already loaded and if the target class loader is capable of loading the needed classes. Further classes that comprise the needed classes are dynamically loaded if the target class loader is not capable of loading the needed classes. The call is invoked after the needed classes are loaded and available for the target object to process the call.

Abstract: Provided are a method, system, and program for processing objects in a distributed computing environment. A determination is made of a program is needed to process a component. A file including the determined program is requested from a remote process. The requested file is received from the remote process, wherein the requested file includes a plurality of sections, each including different programs. At least one section includes programs that are intended only to be executed in a remote address space of the remote process and at least one other section includes programs that are intended to be downloaded from the remote process and execute in a client address space that is different than the remote address space. The programs are loaded from the section including the determined program to execute in the client address space to process the component.

Abstract: Provided are a computer implemented method, system, and program for discovering components within a network. A discovery operation is initiated to discover a network component. Upon discovering information on one network component, an entry is added to a data store providing information on the discovered component. In response to adding the entry to the data store, at least one of a plurality of programs is called to process the added entry, wherein each called program either accepts or declines to process the added entry. One program accepting to process the added entry initiates a further discovery operation in response to accepting the added entry. A new entry is added to the data store providing information on one network component discovered during the further discovery operation, wherein at least one program is called to process the new entry in response to adding the new entry.

Abstract: Provided are a method, system, and program for making resources available for access to a client. A list is provided indicating a plurality of resources to make available for access to clients over a network and the list is processed to determine resources. Attributes of the resources are determined and reference codes are generated for the determined resources based on the determined attributes. The reference codes are associated with the resources for which the codes were generated. In response to receiving a request to one reference code from the client, a determination is made from the resource associated with the requested reference code and returning the determined resource to the requesting client.

Abstract: Provided are a method, system, and program for allocating resources, wherein the resources are capable of being configured from a computer system. User interface elements are rendered enabling user selection of a plurality of strategies concerning allocation of computational resources, including a participation strategy having one of at least two values indicating a degree of user involvement in the allocation of computational resources and at least one configuration strategy specifying a configuration for the resource allocation. Selection of a plurality of resource allocation constraints is enabled if the selected value for the participation strategy is a first value. Selection of one of a plurality of configuration modes is enabled if the selected value for the participation strategy is a second value. An allocation is made of the resources based on the selected at least one configuration strategy and one of the selected resource allocation constraints or the selected configuration mode.

Abstract: Provided are a computer implemented method, system, and program for discovering components within a network. A discovery operation is initiated to discover a network component. Upon discovering information on one network component, an entry is added to a data store providing information on the discovered component. In response to adding the entry to the data store, at least one of a plurality of programs is called to process the added entry, wherein each called program either accepts or declines to process the added entry. One program accepting to process the added entry initiates a further discovery operation in response to accepting the added entry. A new entry is added to the data store providing information on one network component discovered during the further discovery operation, wherein at least one program is called to process the new entry in response to adding the new entry.

Abstract: Provided are a method, system, and program for processing objects in a distributed computing environment. A determination is made of a program is needed to process a component. A file including the determined program is requested from a remote process. The requested file is received from the remote process, wherein the requested file includes a plurality of sections, each including different programs. At least one section includes programs that are intended only to be executed in a remote address space of the remote process and at least one other section includes programs that are intended to be downloaded from the remote process and execute in a client address space that is different than the remote address space. The programs are loaded from the section including the determined program to execute in the client address space to process the component.

Abstract: Provided are a method, system, and program for loading program components into a runtime environment. A loader hierarchy is provided indicating an order in which loaders are invoked to load multiple types of program components. A plurality of first type loaders are used to load a first type of program components that are capable of being used by a second type of program components loaded by at least one second type loader. The second type loader is defined at a lower level in the loader hierarchy than the first type component loaders.

Abstract: Provided are a method, system, and program for making resources available for access to a client. A list is provided indicating a plurality of resources to make available for access to clients over a network and the list is processed to determine resources. Attributes of the resources are determined and reference codes are generated for the determined resources based on the determined attributes. The reference codes are associated with the resources for which the codes were generated. In response to receiving a request to one reference code from the client, a determination is made from the resource associated with the requested reference code and returning the determined resource to the requesting client.