Abstract: A method for adaptively delegating a capability, comprising the steps of providing for the delegation of the capability to a first role; allowing the step of providing for the delegation to be initiated by a principal in a second role; and hierarchically relating the capability, the first role and the second role.

Abstract: Systems and methods are disclosed for providing security for a communities framework in a collaborative computing environment. A community can be provided for maintaining user membership during collaboration. The community can contain various collaboration resources, community services and members having access to the resources and services. A first layer of security can be implemented via membership and functional capabilities. Members can be assigned to various membership capabilities and these membership capabilities can be mapped to functional capabilities in order to control access to the resources by the various members. A second layer of security can be implemented via entitlements and security policies applied to the content repository. Entitlements can be applied at a node level of a content repository. Each node can be evaluated when operations are requested for it.

Abstract: A system and method for authorization to adaptively control access to a resource, comprising the steps of providing for the mapping of a principal to at least one role, wherein the at least one role is hierarchically related to the resource; providing for the evaluation of a policy based on the at least one role; and providing for the determination of whether to grant the principal access to the resource based on the evaluation of the policy.

Abstract: A system and method for authorization to adaptively control access to a resource, comprising the steps of providing for the mapping of a principal to at least one role, wherein the at least one role is hierarchically related to the resource; providing for the evaluation of a policy based on the at least one role; and providing for the determination of whether to grant the principal access to the resource based on the evaluation of the policy.

Abstract: Methods are disclosed for authorization to adaptively control access to a resource in a resource hierarchy. At least one role for a principal is retrieved from the resource hierarchy or a first cache based on whether the at east one role was previously retrieved from the resource hierarchy. A policy is retrieved from the resource hierarchy or a second cache based on whether the policy was previously retrieved from the resource hierarchy. The policy is evaluated based on the at least one role and a determination on whether to grant the principal access to the resource is made based on the evaluation of the policy.

Abstract: A system and method for authorization to adaptively control access to a resource, comprising the steps of providing for the mapping of a principal to at least one role, wherein the at least one role is hierarchically related to the resource; providing for the evaluation of a policy based on the at least one role; and providing for the determination of whether to grant the principal access to the resource based on the evaluation of the policy.

Abstract: A business platform can provide access to applications and provide for the integration of resources with other applications, including internal and external applications, services and systems. A portal framework included within the platform can render portals including graphical user interfaces for displaying and receiving content that can be used by various applications. A portal framework can provide an interface to various resources such that information received and displayed by the portal framework can be exchanged with internal and external resources using standards-based transport protocols, messaging systems, and document types. An integration framework can be invoked to exchange this information among applications and services. An integration framework can provide access to resources by integrating the resources with an application server. The portal framework and integration framework can be implemented on an application server which can support enterprise applications.

Abstract: A system and method for describing a portal page, comprising, defining a placeholder on a template, associating at least one portlet with the placeholder, and wherein the template can be customized for least one of a group and a user.

Abstract: A system and method of authorization comprising associating at least one role with a resource, associating at least one capability with the at least one role, and determining whether to permit a resource operation based on the at least one capability.

Abstract: A business platform can provide access to applications and provide for the integration of resources with other applications, including internal and external applications, services and systems. A portal framework included within the platform can render portals including graphical user interfaces for displaying and receiving content that can be used by various applications. A portal framework can provide an interface to various resources such that information received and displayed by the portal framework can be exchanged with internal and external resources using standards-based transport protocols, messaging systems, and document types. An integration framework can be invoked to exchange this information among applications and services. An integration framework can provide access to resources by integrating the resources with an application server. The portal framework and integration framework can be implemented on an application server which can support enterprise applications.

Abstract: An Extensible Markup Language (XML) document adapted to describe a portlet, comprising a name element including a name tag, a description element including a description tag, and a content resource element including a content tag.

Abstract: A system and a method for providing application flow integration in a portal framework. In accordance with one embodiment, the invention comprises a portal servlet, which handles all incoming servlet requests and determines whether the incoming request represents a request either for a portal page or for a non-portal page; and, a portal processor which handles all portal page requests passed by the portal servlet, and executes an appropriate webflow to update the current state of the portal page, depending on a current set of events. Each of a plurality of portlets may have an individual webflow associated with it.

Abstract: A method for adaptively managing entitlements, comprising the steps of providing for the association of a role with a first resource; and providing for the association of a policy with a second resource, wherein the policy is based at least partially on the role; and providing for hierarchically relating the role and the policy; and wherein the role is hierarchically equal or superior to the policy.

Abstract: A method for adaptively managing entitlements, comprising the steps of providing for the association of a role with a first resource; and providing for the association of a policy with a second resource, wherein the policy is based at least partially on the role; and providing for hierarchically relating the role and the policy; and wherein the role is hierarchically equal or superior to the policy.

Abstract: A method for adaptively delegating a capability, comprising the steps of providing for the delegation of the capability to a first role; allowing the step of providing for the delegation to be initiated by a principal in a second role; and hierarchically relating the capability, the first role and the second role.

Abstract: A system and method for authorization to adaptively control access to a resource, comprising the steps of providing for the mapping of a principal to at least one role, wherein the at least one role is hierarchically related to the resource; providing for the evaluation of a policy based on the at least one role; and providing for the determination of whether to grant the principal access to the resource based on the evaluation of the policy.

Abstract: A method for authorization to adaptively control access to a resource, comprising the steps of: retrieving at least one role for a principal from one of: 1) a first hierarchy; and 2) a first cache; retrieving a policy from one of: 1) a second hierarchy; and 2) a second cache; providing for the evaluation of the policy based on the at least one role; determining whether to grant the principal access to the resource based on the evaluation of the policy; wherein the at least one role is retrieved from the first cache if the at least one role was retrieved from the first hierarchy; and wherein the policy is retrieved from the second cache if the policy was previously retrieved from the second hierarchy.

Abstract: A business platform can provide access to applications and provide for the integration of resources with other applications, including internal and external applications, services and systems. A portal framework included within the platform can render portals including graphical user interfaces for displaying and receiving content that can be used by various applications. A portal framework can provide an interface to various resources such that information received and displayed by the portal framework can be exchanged with internal and external resources using standards-based transport protocols, messaging systems, and document types. An integration framework can be invoked to exchange this information among applications and services. An integration framework can provide access to resources by integrating the resources with an application server. The portal framework and integration framework can be implemented on an application server which can support enterprise applications.

Abstract: A system and a method for providing application flow integration in a portal framework. In accordance with one embodiment, the invention comprises a portal servlet, which handles all incoming servlet requests and determines whether the incoming request represents a request either for a portal page or for a non-portal page; and, a portal processor which handles all portal page requests passed by the portal servlet, and executes an appropriate webflow to update the current state of the portal page, depending on a current set of events. Each of a plurality of portlets may have an individual webflow associated with it.

Abstract: An Extensible Markup Language (XML) document adapted to describe a portlet, comprising a name element including a name tag, a description element including a description tag, and a content resource element including a content tag.