Abstract: Access to system and user defined entities (objects, data items, or the like) is managed by a content manager. A privilege grants a user an ability to access system such controlled entities. An item is an atomic user data entity stored in the CM library server. A privileges table is used to store system and user defined privileges. A privilege is represented by a row in the table. Each privilege has a unique privilege code, with codes 0 to 999 reserved to store system-defined privileges and codes beyond 999 open for user-defined privileges thus allowing application specific privileges to be added without limit.

Abstract: An architecture to enable search gateways as part of a federated search supports searching for data in one or more heterogeneous data sources. The one or more heterogeneous data sources are within a computer system. Initially, a request for data is received at a federated data source. From the federated data source, data is retrieved from one or more of one or more terminal data repositories or one or more search gateway data sources.

Abstract: System and method for authorizing access to an entity by a user, by binding an access control list to each entity; specifying for the user a set of user privileges; intersecting the access control list and set of user privileges in a compiled ACL table; incrementally refreshing the compiled ACL table responsive to run time modification of relevant tables containing the access control list and set of user privileges; and referencing the compiled access control list to authorize a user request to access an entity.

Abstract: A system and method for authorizing access to a controlled entity by a user. A set of user privileges is provided for user; and a content manager intersects an access control list (ACL) and the set of user privileges to authorize access. Binding level control indicia selectively binds an access control list (ACL) to the controlled entity at item type, item, mixed, or library binding level. An item type comprises one or more component items with each component item having one or more item views which together form an item type view. A content manager is responsive to the binding level to perform ACL checking for authorizing access to the controlled entity by the user.

Abstract: Provided is a method, system, and program for performing workflow related operations. An application programming interface call (API) is received to perform a workflow related operation. A determination is made of at least one stored procedure call associated with the received API. The determined at least one stored procedure is then called to cause the execution of one determined stored procedure on a database server to perform the workflow related operation of the API.

Abstract: Provided is a method, system, and program for performing an Input/Output (I/O) operation on an object during execution of a workflow comprised of nodes. A plurality of objects are stored in one of multiple data stores, wherein each object is identified within the data store with a first object identifier. A workflow packet references at least one object with a second object identifier, wherein the second object identifier indicates one of the data stores and the first object identifier of the referenced object in the data store. An I/O request for one target object referenced by one second object identifier in the workflow packet is received from one node. A determination is made from the second object identifier for the target object the data store and the first object identifier of the target object. The I/O request is performed on the target object at the determined first object identifier in the determined data store.

Abstract: Access to system and user defined entities (objects, data items, or the like) is managed by a content manager. A privilege grants a user an ability to access system such controlled entities. An item is an atomic user data entity stored in the CM library server. A privileges table is used to store system and user defined privileges. A privilege is represented by a row in the table. Each privilege has a unique privilege code, with codes 0 to 999 reserved to store system-defined privileges and codes beyond 999 open for user-defined privileges thus allowing application specific privileges to be added without limit.

Abstract: Provided is a method, system, and program for maintaining workflow related information. At least one table is provided in a database storing workflow related data. A plurality of methods are provided, wherein each method specifies an operation to perform on the workflow related data in the at least one table, and wherein each method is associated with one stored procedure call. One stored procedure is provided in the database for each stored procedure call and corresponding method, wherein the stored procedure includes a plurality of database statements to perform the method operation. One stored procedure is executed in the database to perform the corresponding method operation on workflow related data in one table.

Abstract: The present invention discloses a method, apparatus, and article of manufacture for tracking and propagating state changes in a message-driven computer program. In accordance with the present invention, a program in the memory of a computer receives a notification signal indicating that an event has occurred and transitions a first component from a current state to a new state based on the notification signal, wherein the states are represented by discrete objects or components. The computer program propagates, to a second component subordinate to a first component representing the new state, a signal indicating the new state of the first component.

Abstract: Methods and apparatus for providing a multi-tier object-relational database architecture are disclosed. In one illustrative embodiment of the present invention, a multi-tier database architecture comprises an object-relational database engine as a top tier, one or more domain-specific extension modules as a bottom tier, and one or more universal extension modules as a middle tier. The individual extension modules of the bottom tier operationally connect with the one or more universal extension modules which, themselves, operationally connect with the database engine. The domain-specific extension modules preferably provide such functions as search, index, and retrieval services of images, video, audio, time series, web pages, text, XML, spatial data, etc. The domain-specific extension modules may include one or more IBM DB2 extenders, Oracle data cartridges and/or Informix datablades, although other domain-specific extension modules may be used.

Abstract: A system and method for authorizing access to a controlled entity by a user. A set of user privileges is provided for user; and a content manager intersects an access control list (ACL) and the set of user privileges to authorize access. Binding level control indicia selectively binds an access control list (ACL) to the controlled entity at item type, item, mixed, or library binding level. An item type comprises one or more component items with each component item having one or more item views which together form an item type view. A content manager is responsive to the binding level to perform ACL checking for authorizing access to the controlled entity by the user.

Abstract: Access to system and user defined entities (objects, data items, or the like) is managed by a content manager. A privilege grants a user an ability to access system such controlled entities. An item is an atomic user data entity stored in the CM library server. A privileges table is used to store system and user defined privileges. A privilege is represented by a row in the table. Each privilege has a unique privilege code, with codes 0 to 999 reserved to store system-defined privileges and codes beyond 999 open for user-defined privileges thus allowing application specific privileges to be added without limit.

Abstract: System and method for authorizing access to an entity by a user, by binding an access control list to each entity; specifying for the user a set of user privileges; intersecting the access control list and set of user privileges in a compiled ACL table; incrementally refreshing the compiled ACL table responsive to run time modification of relevant tables containing the access control list and set of user privileges; and referencing the compiled access control list to authorize a user request to access an entity.

Abstract: Provided is a method, system, and program for maintaining workflow related information. At least one table is provided in a database storing workflow related data. A plurality of methods are provided, wherein each method specifies an operation to perform on the workflow related data in the at least one table, and wherein each method is associated with one stored procedure call. One stored procedure is provided in the database for each stored procedure call and corresponding method, wherein the stored procedure includes a plurality of database statements to perform the method operation. One stored procedure is executed in the database to perform the corresponding method operation on workflow related data in one table.

Abstract: Provided is a method, system, and program for performing workflow related operations. An application programming interface call (API) is received to perform a workflow related operation. A determination is made of at least one stored procedure call associated with the received API. The determined at least one stored procedure is then called to cause the execution of one determined stored procedure on a database server to perform the workflow related operation of the API.

Abstract: Provided is a method, system, and program for performing an Input/Output (I/O) operation on an object during execution of a workflow comprised of nodes. A plurality of objects are stored in one of multiple data stores, wherein each object is identified within the data store with a first object identifier. A workflow packet references at least one object with a second object identifier, wherein the second object identifier indicates one of the data stores and the first object identifier of the referenced object in the data store. An I/O request for one target object referenced by one second object identifier in the workflow packet is received from one node. A determination is made from the second object identifier for the target object the data store and the first object identifier of the target object. The I/O request is performed on the target object at the determined first object identifier in the determined data store.

Abstract: Methods and apparatus for providing a multi-tier object-relational database architecture are disclosed. In one illustrative embodiment of the present invention, a multi-tier database architecture comprises an object-relational database engine as a top tier, one or more domain-specific extension modules as a bottom tier, and one or more universal extension modules as a middle tier. The individual extension modules of the bottom tier operationally connect with the one or more universal extension modules which, themselves, operationally connect with the database engine. The domain-specific extension modules preferably provide such functions as search, index, and retrieval services of images, video, audio, time series, web pages, text, XML, spatial data, etc. The domain-specific extension modules may include one or more IBM DB2 extenders, Oracle data cartridges and/or Informix datablades, although other domain-specific extension modules may be used.

Abstract: An architecture to enable search gateways as part of a federated search supports searching for data in one or more heterogeneous data sources. The one or more heterogeneous data sources are within a computer system. Initially, a request for data is received at a federated data source. From the federated data source, data is retrieved from one or more of one or more terminal data repositories or one or more search gateway data sources.

Abstract: A method, apparatus, and article of manufacture for an object-oriented framework for managing access control in a multimedia database connected to a computer is provided. A datastore access control object is generated for the datastore, wherein the datastore access control object enables controlling access to the datastore. An access control list object is manipulated with the datastore access control object to set access privileges.

Abstract: A method, apparatus, and article of manufacture for a computer-implemented access control system. The access control system controls access by users to functions of an application program executed by a computer and connected to a multimedia datastore. Application privileges are defined to control access to functions of the application program which operate upon data items of the multimedia datastore. For the application program, one or more users are associated with one or more application privileges. Access by users to functions of the application program is restricted depending upon whether the user has been associated with the application privilege for the function. If the user has been associated with the application privilege, access to the function is granted, if not, access to the function is denied.