Abstract: The present invention is directed to technology for determining the set of groups of which a user is a member. A user can be a static member, dynamic member or nested member of a group. A user is a nested member of a first group if that user is a member of a second group and the second group is a member of the first group. There can be multiple levels of nesting. For example, an entity can be a nested member of a first group if that entity is a member of a second group, which is a member of a third group, which is a member of a fourth group, which is a member of the first group. The present invention can determine the groups of which the user is a static member, dynamic member or nested member.

Abstract: A policy, associated with a group, controls user subscription to and unsubscription from that group. In one embodiment, there are at least four policies for subscribing/unsubscribing: open, open with filter, control through workflow and closed. An open policy does not restrict subscription or unsubscription. The open with filter policy requires that a user satisfy a rule to subscribe, but does not require that the rule be satisfied to unsubscribe. The control through workflow policy requires a user to subscribe or unsubscribe through a workflow process. A close policy prohibits the subscription to or unsubscription from the group.

Abstract: The present invention is directed to technology for determining the members of groups. A group can have static members, dynamic members and/or nested members. An entity is a nested member of a first group if that entity is a member of a second group and the second group is a member of the first group. There can be multiple levels of nesting. For example, an entity can be a nested member of a first group if that entity is a member of a second group, which is a member of a third group, which is a member of a fourth group, . . . , which is a member of the first group. The present invention can determine the membership of a group, including the static members, dynamic members and/or nested members. Furthermore, the present invention can be used to expand one or more groups so that future requests to view the membership of a group can be performed in a more efficient manner.

Abstract: The present invention is directed to technology for modifying groups or other types of entries after those entries have been created. In one embodiment, the invention includes modifying group objects that have already been instantiated by adding and/or removing auxiliary classes and their associated attributes. The present invention can be used with an Identity System that stores group objects in a directory. Alternatively, the present invention can be used with other types of entries, other types of systems and/or other types of data stores.

Abstract: The present invention is directed to technology for determining the set of groups that a user is a member of. A user can be a static member, dynamic member or nested member of a group. A user is a nested member of a first group if that user is a member of a second group and the second group is a member of the first group. There can be multiple levels of nesting. For example, an entity can be a nested member of a first group if that entity is a member of a second group, which is a member of a third group, which is a member of a fourth group, which is a member of the first group. The present invention can determine the groups for which the user is a static member, dynamic member or nested member.

Abstract: A policy, associated with a group, controls user subscription to and unsubscription from that group. In one embodiment, there are at least four policies for subscribing/unsubscribing: open, open with filter, control through workflow and closed. An open policy does not restrict subscription or unsubscription. The open with filter policy requires that a user satisfy a rule to subscribe, but does not require that the rule be satisfied to unsubscribe. The control through workflow policy requires a user to subscribe or unsubscribe through a workflow process. A close policy prohibits the subscription to or unsubscription from the group.

Abstract: The present invention is directed to technology for modifying groups or other types of entries after those entries have been created. In one embodiment, the invention includes modifying group objects that have already been instantiated by adding and/or removing auxiliary classes and their associated attributes. The present invention can be used with an Identity System that stores group objects in a directory. Alternatively, the present invention can be used with other types of entries, other types of systems and/or other types of data stores.

Abstract: The present invention is directed to technology for determining the set of groups that a user is a member of. A user can be a static member, dynamic member or nested member of a group. A user is a nested member of a first group if that user is a member of a second group and the second group is a member of the first group. There can be multiple levels of nesting. For example, an entity can be a nested member of a first group if that entity is a member of a second group, which is a member of a third group, which is a member of a fourth group, which is a member of the first group. The present invention can determine the groups for which the user is a static member, dynamic member or nested member.

Abstract: The present invention is directed to technology for determining the members of groups. A group can have static members, dynamic members and/or nested members. An entity is a nested member of a first group if that entity is a member of a second group and the second group is a member of the first group. There can be multiple levels of nesting. For example, an entity can be a nested member of a first group if that entity is a member of a second group, which is a member of a third group, which is a member of a fourth group, . . . , which is a member of the first group. The present invention can determine the membership of a group, including the static members, dynamic members and/or nested members. Furthermore, the present invention can be used to expand one or more groups so that future requests to view the membership of a group can be performed in a more efficient manner.