Abstract: A method is disclosed for providing user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers. A reference monitor service is established and a plurality of access control profiles are stored therein. Thereafter, selected access control profiles are exchanged between the reference monitor service and a resource manager in response to an attempted access of a particular resource object controlled by that resource manager. The resource manager may then control access to the resource object by utilizing the exchanged access control profile. In a preferred embodiment of the present invention, each access control profile may include access control information relating to a selected user; a selected resource object; a selected group of users; a selected set of resource objects; or, a predetermined set of resource objects and a selected group of users.

Abstract: Variable authority level user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers. A reference monitor service is established and a plurality of access control profiles are stored therein, each including an identification of a selected user and a specified level of authority associated with that selected user. Thereafter, selected access control profiles are exchanged between the reference monitor service and a resource manager in response to an attempted access of a particular resource object controlled by that resource manager. The resource manager may then control access to the resource object by utilizing the exchanged access control profile to determine the extent access is permitted by means of the specified level of authority contained therein.

Abstract: The method of the present invention may be utilized to provide user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers. A reference monitor service is established and a plurality of access control profiles are stored therein. Thereafter, selected access control profile information may be communicated between the reference monitor service and a resource manager in response to an attempted access of a particular resource object controlled by that resource manager. A resource manager may utilize this communication technique to retrieve, modify, or delete a selected access control profile, as desired.

Abstract: A system and method for sharing software modules which are part of a computer program, and which have been previously loaded into a private area of main memory of a computer. The addresses of software modules which remain loaded in the private area after an execution of the computer program are kept track of. When a subsequent execution of the computer program requires a software module which has remained loaded in private memory, the address of the software module is obtained, and the computer program branches to that address.

Abstract: A method for maintaining a time frame selective document history log within a data processing system having multiple resource objects which are accessible by a plurality of users within the data processing system. A history log is created and associated with each resource object for which a document history log is desired. Next, a selected date-time frame of interest is specified and utilized to filter all activities which take place with respect to a particular resource object. Thereafter, only those activities which take place within the selected date-time frame of interest are recorded within the document history log. In one embodiment of the present invention a user may further specify that only selected activities which occur within the date-time frame of interest shall be recorded. In this manner it is possible to accurately record only selected activities during a prespecified date-time frame such that memory space within the system is more efficiently utilized within the document history log.

Abstract: A method for memory management within a document history log in a data processing system having multiple resource objects which are accessible by a plurality of users within the data processing system. A history log is created and associated with each resource object for which documentation of selected activities is desired. Next, a maximum memory size for each document history log is specified along with a protocol which dictates the order in which that memory shall be allocated after the maximum memory size has been exceeded. Thereafter, documentation of each activity which relates to a selected resource object is stored within its associated document history log after determining whether or not sufficient memory space is available. In the event sufficient memory space does not exist within the document history log, new activities are overwritten in accordance with the specified protocol. In the event such overwriting has not been specified, an appropriate error message is generated.

Abstract: A method for automatically generating document history log exception reports in a data processing system having multiple resource objects which are managed by one or more resource managers, each resource object being accessible by as plurality of users within a data processing system. A history log is created and associated with a selected resource object. Thereafter, the occurrence of each event and/or action relating to the selected resource object is recorded within the history log. The status of the history log is periodically determined and an exception report is automatically generated and transmitted to a previously designated individual in the event a lack of memory space within the history log will prevent the recordation of a subsequent event or activity. In one embodiment of the present invention an exception report is also generated in the event the selected resource object has been transferred to a resource manager which will not support a document history log.

Abstract: A method for maintaining a selective document history log within a data processing system having multiple resource objects which are accessible by a plurality of users within the data processing system. A history log is created and associated with each resource object for which documentation of selected activities is desired. Next, a list of one or more types of activity is generated and utilized to filter all activities which take place with respect to a particular resource object. Thereafter, documentation of each activity which corresponds to an entry on the list of activities of interest is recorded within the selective document history log. In this manner it is possible to accurately record only those activities of interest such that memory space is more efficiently utilized within the document history log. The system administrator or other manager may limit the authority of a user to establish a document history log.

Abstract: A method for maintaining an alterable document history log in a data processing system having multiple resource objects which are accessible by a plurality of users within the data processing system. A history log is created and associated with each resource object for which documentation of selected activities is desired. A list of one or more specified types of activities is generated and utilized to filter all activities which take place with respect to a particular resource object in order that the occurrence of selected activities may be documented. A characterization of these activity types is recorded in association with the document history log such that subsequent users may ascertain what types of activity occurrences have been recorded. In the depicted embodiment of the present invention access to a resource object may be locked and the list of specified types of activity altered.