Abstract: A distributed access controller for controlling access to resources in a multi-domain distributed computing environment. The access controller is configured to receive a request from a user requesting performance of one or more operations on a particular resource. The access controller attempts to resolve the requested operations based on user hierarchy information and access list information for the particular resource. If all the operations in the user's request cannot be resolved based on the user hierarchy information and the access list information for the particular resource, the access controller then attempts to resolve the unresolved operations based on the particular user's user hierarchy information in combination with resource hierarchy information, and access list information for the resources in the resource hierarchy information.

Abstract: A distributed access controller for controlling access to resources in a multi-domain distributed computing environment. The access controller is configured to receive a request from a user requesting performance of one or more operations on a particular resource. The access controller attempts to resolve the requested operations based on user hierarchy information and access list information for the particular resource. If all the operations in the user's request cannot be resolved based on the user hierarchy information and the access list information for the particular resource, the access controller then attempts to resolve the unresolved operations based on the particular user's user hierarchy information in combination with resource hierarchy information, and access list information for the resources in the resource hierarchy information.

Abstract: A computer user interface for handling information objects. The interface allows a user to make a request for information in the form of a one-time query or a persistent query. With the one-time query, the user defines one or more conditions in terms of attributes and values. The appropriate classes of objects are checked and any matching objects are identified as satisfying the query. A persistent query allows such a condition to be active at all times so that when one or more objects are created that satisfy the condition, those objects are identified as meeting the condition. Other features of the user interface allow the user to define objects and publish objects. Objects can be created or edited based on a class whose attributes are inherited. A predefined selection of menu options makes creating, editing and publishing objects simple and efficient. Access controls and settings are provided to control rights to created objects.

Abstract: An extensible user interface in a system for handling information objects. The extensible interface allows a user to be presented with default interfaces, or viewers, for performing the basic functions of a “data browser” application of the invention. A primary feature of the data browser user interface is to allow requests for information in the form of a one-time query, or a persistent query, on data objects. With the one-time query, the user defines one or more conditions in terms of attributes and values. The appropriate classes of objects are checked and any matching objects are identified as satisfying the query. A persistent query allows such a condition to be active at all times so that when one or more objects are created that satisfy the condition, those objects are identified as meeting the condition. Other features of the user interface allow the user to define objects and publish objects. Objects can be created or edited based on a class whose attributes are inherited.