Abstract: A computer system comprises a management service having a plurality of objects. Each of the objects has at least one associated attribute with associated values. A master object in the management service includes a source attribute with associated data. One or more slave objects in the management service correspond to the master object and are distinct from the master object. Each of these slave objects has a destination attribute which corresponds to the source attribute of the master object. A propagation agent is capable of accessing the slave objects and transmitting the data associated with the source attribute to the destination attributes of the slave objects.

Abstract: A method for a source to obtain the rights of a target object is disclosed. The source first obtains the rights of a source object, which rights include authorization to access a target object and to modify authentication data of the target object. Next, the source object generates new authentication data. After accessing the target object using the rights of the source object, the source modifies the authentication data of the target object to include the new authentication data. Using the new authentication data, the source obtains the rights of the target object, whereby the source becomes a proxy for the target object. As a proxy, the source uses the rights of the target object. Alternative processes for proxy authentication, as well as apparatus for proxy authentication, are also disclosed.