Abstract: A method, apparatus, and computer program product uses a SELECT FOR UPDATE, to pick up events from a TARGET_EVENT table. Selected events are reserved for processing by a cluster node which triggers a query. PICKUP_TIME and SERVER_ID values are inserted for each of the events picked from the TARGET_EVENT table. The events are grouped by TARGET and UID while preserving a relative order in an overall event sequence. A group of events is then submitted for processing.

Abstract: Automatically discovering attribute permissions is provided. A profile indicating a set of attributes that can be converted into permissions for a new target instance is provided. In response to detecting that the new target instance is being added, a convertible set of attributes for the new target instance is searched for based on the profile. Search results for the convertible set of attributes are displayed. Ones of the convertible set of attributes are selected as a set of attribute permissions for the new target instance for access control to the new target instance.

Abstract: A method, apparatus, and computer program product uses a SELECT FOR UPDATE, to pick up events from a TARGET_EVENT table. Selected events are reserved for processing by a cluster node which triggers a query. PICKUP_TIME and SERVER_ID values are inserted for each of the events picked from the TARGET_EVENT table. The events are grouped by TARGET and UID while preserving a relative order in an overall event sequence. A group of events is then submitted for processing.

Abstract: Automatically discovering attribute permissions is provided. A profile indicating a set of attributes that can be converted into permissions for a new target instance is provided. In response to detecting that the new target instance is being added, a convertible set of attributes for the new target instance is searched for based on the profile. Search results for the convertible set of attributes are displayed. Ones of the convertible set of attributes are selected as a set of attribute permissions for the new target instance for access control to the new target instance.

Abstract: A method, apparatus, and computer program product uses a SELECT FOR UPDATE, to pick up events from a TARGET_EVENT table. Selected events are reserved for processing by a cluster node which triggers a query. PICKUP_TIME and SERVER_ID values are inserted for each of the events picked from the TARGET_EVENT table. The events are grouped by TARGET and UID while preserving a relative order in an overall event sequence. A group of events is then submitted for processing.

Abstract: A method, apparatus, and computer program product uses a SELECT FOR UPDATE, to pick up events from a TARGET_EVENT table. Selected events are reserved for processing by a cluster node which triggers a query. PICKUP_TIME and SERVER_ID values are inserted for each of the events picked from the TARGET_EVENT table. The events are grouped by TARGET and UID while preserving a relative order in an overall event sequence. A group of events is then submitted for processing.

Abstract: Mechanisms are provided for calculating state of cryptographic objects and generating search filters for querying cryptographic objects based on the given state or on the given combination of unique states. The mechanism to calculate a state of a cryptographic object allows an application or system to resolve the current state of any cryptographic object with the following set of state altering date values: initial date, activation date, deactivation date, compromise date, and destroy date. A processing module may retrieve the state meta-data and calculate the current state of a given cryptographic object. The current state may be, for example, one of the following: unknown, pre-active, active, deactivated, compromised, destroyed, and destroyed-compromised. The mechanism to generate a search filter may generate a search query language (SQL) search filter to query for cryptographic objects using the state altering date values stored for each object.

Abstract: Mechanisms are provided for calculating state of cryptographic objects and generating search filters for querying cryptographic objects based on the given state or on the given combination of unique states. The mechanism to calculate a state of a cryptographic object allows an application or system to resolve the current state of any cryptographic object with the following set of state altering date values: initial date, activation date, deactivation date, compromise date, and destroy date. A processing module may retrieve the state meta-data and calculate the current state of a given cryptographic object. The current state may be, for example, one of the following: unknown, pre-active, active, deactivated, compromised, destroyed, and destroyed-compromised. The mechanism to generate a search filter may generate a search query language (SQL) search filter to query for cryptographic objects using the state altering date values stored for each object.