Abstract: The Authorized Authorization Set System comprising a modified operating system, a command table containing authorized authorization sets, and a modified RBAC security system, eliminates the need for inherited privileges that must be passed to subcommands in order for the command to run. The modified operating system accesses a table containing authorized authorization sets which identify the privileges for all subcommands within a command. When a user is assigned an accessauth for a command, and a sub-command is a privileged sub-command, the privileged sub-command is only run when the accessauth of the sub-command is included in the authorized authorization set of the command.

Abstract: In a non-volatile memory cell, charge is stored in a fully isolated substrate or floating bulk that forms a storage capacitor with a first poly strip and includes a second poly strip defining a read gate and a poly-filled trench defining a control gate.

Abstract: In accordance with an aspect of the invention, A Schottky junction field effect transistor (JFET) is created using cobalt silicide, or other Schottky material, to form the gate contact of the JFET. The structural concepts can also be applied to a standard JFET that uses N? type or P? type dopants to form the gate of the JFET. In addition, the structures allow for an improved JFET linkup with buried linkup contacts allowing improved noise and reliability performance for both conventional diffusion (N? and P? channel) JFET structures and for Schottky JFET structures. In accordance with another aspect of the invention, the gate poly, as found in a standard CMOS or BiCMOS process flow, is used to perform the linkup between the source and the junction gate and/or between the drain and the junction gate of a junction filed effect transistor (JFET).

Abstract: An approach is provided that uses policies to determine which parental privileges are inherited by the parent's child processes. A parent software process initializes a child software process, such as by executing the child process. The parent process is associated with a first set of privileges. The inheritance policies are retrieved that correspond to the parent process. A second set of privileges is identified based on the retrieved inheritance policies, and this second set of privileges is applied to the child software process.

Abstract: A system, method, and program product is provided that allows new privileges to be dynamically added to an operating system. Entities are assigned roles and these roles are associated with various authorizations. Authorizations are associated with privileges, including the new privilege. A request is received to dynamically add the new privilege to the operating system. The operating system then dynamically adds the new privilege to the system. A software service is installed that requires the new privilege. A request to execute the installed software service is received from an entity that is running on the operating system. The operating system allows the entity to execute the installed software service in response to determining that the entity has been granted the privilege. However, if the entity has not been granted the new privilege, then the operating system inhibits execution of the software service by the entity.

Abstract: The invention relates to a coloring composition for depositing colors to a keratin-containing substrate, said composition comprising: (a) one or more acid dyes; and (b) one or more cationic quaternary ammonium compounds, said quaternary ammonium compound being present in an amount which provides conditioning benefits but which is insufficient to interfere with deposition of said dye on said substrate.

Abstract: This invention relates to compositions containing pigments or other benefit agents in particulate form may be combined with a quaternary ammonium compound that can effectuate adsorption to anionic substrates, methods of making such compositions and methods of their use.

Abstract: A computer implemented method, computer program product, and system for managing objects. Responsive to receiving a find-rule method, and a path-rule table, wherein the path-rule table contains a set of paths, wherein each path references an object, wherein a file system locates the object using the path, and wherein the object has at least one attribute not known to the file system, a path-rule table identifier is created. The path-rule table is associated with the path-rule table identifier to form an associated path-rule table. The find-rule method is associated with the path-rule table identifier to form an associated find-rule method. The path-rule table identifier, the associated path-rule table, and the associated find-rule method are stored. The path-rule table identifier is returned.

Abstract: A computer implemented method, apparatus, and computer program product for access control in a mixed discretionary access control and role based access control environment. In one embodiment, an execution access for a command is determined using a set of role based authorizations for a user invoking the command. In response to a determination that the user invoking the command is authorized based on the set of role based authorizations, a privilege in a set of privileges associated with the command is raised. Raising the privilege in the set of privileges bypasses discretionary access control checks. In response to a determination that the user invoking the command is unauthorized based on the set of role based authorizations, an execution access for the command is determined using a set of discretionary access mode bits associated with the command.

Abstract: A biased conductive plate is provided over an NVM cell structure to overcome data retention charge loss due to the presence of dielectric films that are conductive at higher temperatures. The biased conductive plate is preferably formed from the lowest metal layer in the fabrication process flow, but any biased conductive layer can be used.

Abstract: A method, apparatus, and computer usable program product for automatic activation of roles is provided. When a user initiates an action, a set of roles needed for the action is identified. A set of roles assigned to the user is also identified. From the two sets of roles, all roles that are common to both sets are identified in a subset of roles. Roles in this subset are assigned to the user and are sufficient for the action. One or more roles from this subset of roles is selected for activation depending on system policies in effect. Selected roles are automatically activated without requiring any intervention from the user. Once the selected roles are activated, they can become inactive upon completion of the current action, or remain active for subsequent actions by the user during all or part of a user session. System policies can decide how the roles are selected for activation, and the duration of which the roles remain active once activated.

Abstract: IR 6 (Cosmetics, Toiletry and Fragrance Association, Inc., 7th ed. 1997). Viscosities are measured using Brookfield viscometers (1,000–20,000 cps, Spindle No. 5, 20 rpm, 60 second run, 25 degrees C.) unless otherwise indicated. 967-00—IR # 6961-00-1-A low viscosity, stable dispersion of behenyl alcohol comprising: (a) 10–40 weight % on an actives basis of behenyl alcohol; (b) 1.0–8.0 weight % of an anionic surfactant selected from the group consisting of sodium lauryl ether sulfate, sodium lauryl sulfate, magnesium lauryl ether sulfate, magnesium lauryl sulfate, calcium lauryl ether sulfate, calcium lauryl sulfate, ammonium lauryl ether sulfate, and ammonium lauryl sulfate; and (c) 1.0–3.0 weight % (on an actives basis) of a betaine selected from the group consisting of C12–18 amidopropylbetaine; wherein the dispersion has a stability of at least 3 months at a temperature of 49 degrees C., a viscosity in the range of 1,000–20,000 centipoise, and no more than 0.2 weight % of cationic material.

Abstract: IR 6 (Cosmetics, Toiletry and Fragrance Association, Inc., 7th ed. 1997). Viscosities are measured using Brookfield viscometers (1,000-20,000 cps, Spindle No. 5, 20 rpm, 60 second run, 25 degrees C.) unless otherwise indicated. 967-00—IR # 6967-00-1-A low viscosity, stable dispersion of behenyl alcohol comprising: (a) 10-40 weight % on an actives basis of behenyl alcohol; (b) 1.0-8.0 weight % of an anionic surfactant selected from the group consisting of sodium lauryl ether sulfate, sodium lauryl sulfate, magnesium lauryl ether sulfate, magnesium lauryl sulfate, calcium lauryl ether sulfate, calcium lauryl sulfate, ammonium lauryl ether sulfate, and ammonium lauryl sulfate; and (c) 1.0-3.0 weight % (on an actives basis) of a betaine selected from the group consisting of C12-18 amidopropylbetaine; wherein the dispersion has a stability of at least 3 months at a temperature of 49 degrees C., a viscosity in the range of 1,000-20,000 centipoise, and no more than 0.2 weight % of cationic material.

Abstract: Personal care products are described which comprise a quaternary amino functional silicone elastomer.

Abstract: A pearlized cleansing composition for personal care comprising: (a) 4.00-30.00 weight % of an anionic material selected from the group consisting of water soluble lipophilic sulfates and sulfonates of 8 to 22 carbon atoms; (b) 0.25-4.0 weight % behenyl alcohol; and (c) water.

Abstract: A pearlized cleansing composition for personal care comprising:

Abstract: An information handling system includes a number of stations connected in a network configuration, each station including a processor, a storage and an I/O controller, where the processor operates under control of an operating system control program which is divided into a user (application) space and a kernel (system) space, the kernel may include a protocol layer interfacing the user application to a DLPI in the kernel, a DLPI which interfaces between the protocol module and a device driver interface, a device driver and a hardware device for connecting the station to the network. When data is to be received by a station from the network, the following steps are performed in the DLPI: recognize the network interface type (FDDI, Ethernet, Token Ring, etc.