Abstract: A system to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Abstract: A system to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Abstract: A method to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Abstract: A system and method to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Abstract: The security evaluation method of the invention utilizes multiple levels of security evaluation before certain user's can gain access to system resources. Upon receiving a user access request, the method acquires qualification data regarding the access request and determines a security level that is applicable to a selected system resource which is indicated by the user access request. Thereafter, the method performs at least one of a plurality of security tests to determine if the qualification data matches the security level applicable to the selected system resource. At least some of the plurality of security tests are arranged to be performed in an order of speed of execution, with a fastest executable security evaluation test being performed first and a slowest executable security test being performed last.

Abstract: The invention controls access to data resources by performing the steps of: providing (i) a first directory which relates data objects to object groups, each object group including all data objects having a common assigned security attribute; (ii) a second directory which relates functions to function groups, each function group including functions having a common execution attribute; (iii) a third directory which relates users to user groups, each user group including users having a common user attribute; and a permission directory which lists allowed combinations of (user group, function group, object group). In response to a request from a user to perform a function with respect to an object, the permission directory is examined to determine if the access request is to be allowed or not allowed.

Abstract: A computer system responds to a user query by providing a screen which displays a response that is influenced by prior expressed preferences of the user. The computer system includes a knowledge base of data pertaining to one or more subjects. The system monitors a user's entries and records priority information regarding data preferences of the user. Upon receiving a user's query regarding a selected subject in the knowledge base, the system selects a template for responding to the user's query. The template contains both fixed and variable fields and the system inserts replacement data in the variable fields. The replacement data is selected in accord with recorded priority information relating to the selected subject. The priority information enables a sorting of the replacement data so as to provide data to the user which is inferentially related to the user's prior entry history.

Abstract: A system and method for allowing communication of a large number of parameters from a computer user to an application program with a relatively small amount of interaction. The system uses a plurality of graphical metaphors to represent a collection of known personality or collective knowledge representations to extract a computer user's preferences. A computer user expresses how much likeness exists between themselves and a set of metaphoric graphical objects which is translated into an intermediary format which enables the computer to provide a higher quality of pattern matching and differentiation.

Abstract: A server-based application intercepts an initial request for access to documents which may contain imbedded references to linked information. A request is made from the server to the actual location of the requested document as it is found on a network (e.g. WORLD-WIDE WEB, INTERNET, etc.). The document is retrieved into the server and parsed to discover all imbedded addresses contained therein. The server then replaces each imbedded address with its own address plus the original imbedded address such that all future references to the imbedded information will be supplied by the server. Additional linking information, functions and/or environment escape information may then be prepended and/or postpended to the requested document independently through the server.