A useful aspect of content management systems is the functionality that is built into the content management system including being able to apply uniform policies to content managed by the system (for example, access, retention services, searching services, version control, backup, etc.). However, the ability for these services to access all the content under management can be problematic for security. For example, using a global search in some cases would show the existence of documents that should be kept secret (for example, a reduction in force plan, a merger or acquisition proposal, etc.). In some cases, it would be useful for a small group of users to be able to take advantage of the capabilities of the content management system with regard to accessing a specific set of content items or objects to the exclusion of other users of the content management system.
Various embodiments of the invention are disclosed in the following detailed description and the accompanying drawings.
The invention can be implemented in numerous ways, including as a process, an apparatus, a system, a composition of matter, a computer readable medium such as a computer readable storage medium or a computer network wherein program instructions are sent over optical or electronic communication links. In this specification, these implementations, or any other form that the invention may take, may be referred to as techniques. A component such as a processor or a memory described as being configured to perform a task includes both a general component that is temporarily configured to perform the task at a given time or a specific component that is manufactured to perform the task. In general, the order of the steps of disclosed processes may be altered within the scope of the invention.
A detailed description of one or more embodiments of the invention is provided below along with accompanying figures that illustrate the principles of the invention. The invention is described in connection with such embodiments, but the invention is not limited to any embodiment. The scope of the invention is limited only by the claims and the invention encompasses numerous alternatives, modifications and equivalents. Numerous specific details are set forth in the following description in order to provide a thorough understanding of the invention. These details are provided for the purpose of example and the invention may be practiced according to the claims without some or all of these specific details. For the purpose of clarity, technical material that is known in the technical fields related to the invention has not been described in detail so that the invention is not unnecessarily obscured.
Containerized security is disclosed. An indication is received that a content item included in a body of managed content is associated with a container. Container security is imposed on the content item, resulting in some embodiments in the content item being accessible to one or more users who are members of a collaboration or other group with which the container is associated but not accessible to users, e.g., of a content management system used to store and/or manage the body of managed content, who are not members. In some embodiments, containerized security for managed content uses a combination of access control objects and aspects to ensure that a defined subset of content, such as content “governed” or controlled by room security, remains subject to a security policy associated with the subset of content.
In some embodiments, an aspect or logic associated with the container is triggered when a content item is linked to a collaboration space folder or other container, or set to be triggered by a subsequent event, such as a “save” event. The aspect or logic—causes a database object used to represent the content item, and/or all of its constituent parts in the case of a complex content item, such as an email having one or more attachments, are accessible only to members of the collaboration. In some embodiments, access is limited at least in part by associating with the content item a mandatory access control list (MACL) that must be satisfied, i.e., a user associated with a request to access the content item must be included in the MACL, in order to access the content item. In some embodiments, a user otherwise entitled to access the content item, e.g., by virtue of the user's role and/or other attributes and/or privileges with respect to the body of managed content generally, but not included in the MACL, is denied access. In some embodiments, the aspect or other logic described above ensures that content items linked to a folder or other container associated with the collaboration space become associated with the MACL and/or the business logic used to enforce it.
Although the foregoing embodiments have been described in some detail for purposes of clarity of understanding, the invention is not limited to the details provided. There are many alternative ways of implementing the invention. The disclosed embodiments are illustrative and not restrictive.
Number | Name | Date | Kind |
---|---|---|---|
5107443 | Smith et al. | Apr 1992 | A |
5793365 | Tang et al. | Aug 1998 | A |
5930801 | Falkenhainer et al. | Jul 1999 | A |
5956715 | Glasser et al. | Sep 1999 | A |
6233600 | Salas et al. | May 2001 | B1 |
6311269 | Luckenbaugh et al. | Oct 2001 | B2 |
6505300 | Chan et al. | Jan 2003 | B2 |
6557013 | Ziff et al. | Apr 2003 | B1 |
6564246 | Varma et al. | May 2003 | B1 |
6671695 | McFadden | Dec 2003 | B2 |
7003502 | Wizdo et al. | Feb 2006 | B1 |
7031957 | Harris | Apr 2006 | B2 |
7124101 | Mikurak | Oct 2006 | B1 |
7130807 | Mikurak | Oct 2006 | B1 |
7139973 | Kirkwood et al. | Nov 2006 | B1 |
7139999 | Bowman-Amuah | Nov 2006 | B2 |
7149698 | Guheen et al. | Dec 2006 | B2 |
7162504 | McCauley et al. | Jan 2007 | B2 |
7165041 | Guheen et al. | Jan 2007 | B1 |
7167844 | Leong et al. | Jan 2007 | B1 |
7191397 | Brooke et al. | Mar 2007 | B2 |
7236966 | Jackson et al. | Jun 2007 | B1 |
7236975 | McCauley et al. | Jun 2007 | B2 |
7236989 | McCauley et al. | Jun 2007 | B2 |
7236990 | McCauley et al. | Jun 2007 | B2 |
7240076 | McCauley et al. | Jul 2007 | B2 |
7246138 | McCauley et al. | Jul 2007 | B2 |
7254836 | Alkove et al. | Aug 2007 | B2 |
7260584 | Hailey et al. | Aug 2007 | B2 |
7287218 | Knotz et al. | Oct 2007 | B1 |
7296296 | Dunbar et al. | Nov 2007 | B2 |
7315826 | Guheen et al. | Jan 2008 | B1 |
7403901 | Carley et al. | Jul 2008 | B1 |
7415478 | Owen et al. | Aug 2008 | B2 |
7415484 | Tulkoff et al. | Aug 2008 | B1 |
7433896 | Owen et al. | Oct 2008 | B2 |
7440863 | Manfredi | Oct 2008 | B2 |
7512578 | Abnous et al. | Mar 2009 | B2 |
7702730 | Spataro et al. | Apr 2010 | B2 |
7752258 | Lewin et al. | Jul 2010 | B2 |
7912799 | Abnous et al. | Mar 2011 | B2 |
8280917 | Wei et al. | Oct 2012 | B1 |
8290947 | Brette et al. | Oct 2012 | B2 |
8312062 | Spivak et al. | Nov 2012 | B1 |
8341299 | Wei et al. | Dec 2012 | B2 |
8347295 | Robertson et al. | Jan 2013 | B1 |
8347321 | Spivak et al. | Jan 2013 | B1 |
8375015 | Wei et al. | Feb 2013 | B2 |
8386608 | Rankov et al. | Feb 2013 | B1 |
8396938 | Oscherov et al. | Mar 2013 | B2 |
8400407 | Oleskevich et al. | Mar 2013 | B2 |
8447827 | Oscherov et al. | May 2013 | B2 |
8539493 | Robertson et al. | Sep 2013 | B1 |
8560572 | Wei et al. | Oct 2013 | B2 |
8595265 | Wei et al. | Nov 2013 | B2 |
8612635 | Wei et al. | Dec 2013 | B2 |
8650224 | Wei et al. | Feb 2014 | B2 |
8655857 | Oscherov et al. | Feb 2014 | B1 |
8656410 | Wei et al. | Feb 2014 | B1 |
8682827 | Abnous et al. | Mar 2014 | B2 |
8694546 | Wei et al. | Apr 2014 | B2 |
8732141 | Randall et al. | May 2014 | B2 |
8782096 | Abnous et al. | Jul 2014 | B2 |
8812683 | Rankov et al. | Aug 2014 | B2 |
8819048 | Abnous et al. | Aug 2014 | B1 |
8826280 | Robertson et al. | Sep 2014 | B1 |
20020194485 | Ram et al. | Dec 2002 | A1 |
20040111423 | Irving et al. | Jun 2004 | A1 |
20040168058 | Margolus | Aug 2004 | A1 |
20040239700 | Baschy | Dec 2004 | A1 |
20050039034 | Doyle et al. | Feb 2005 | A1 |
20050182641 | Ing et al. | Aug 2005 | A1 |
20050193236 | Stager et al. | Sep 2005 | A1 |
20060080316 | Gilmore et al. | Apr 2006 | A1 |
20060101017 | Eder | May 2006 | A1 |
20060265375 | Hess | Nov 2006 | A1 |
20070204078 | Boccon-Gibod et al. | Aug 2007 | A1 |
20070276878 | Zheng et al. | Nov 2007 | A1 |
Entry |
---|
Ming-Ju Yang, Wen-Chung Chang, Win-Jet Luo, Shou-Ping Hsu, Kao-Feng Yarn, Tsung-Chan Cheng, and Po-Chun Yang, “A User-Friendly Web Content Management System”, Innovative Computing Information and Control, 20008. ICICIC '08. 3rd International Conference on Jun. 18-20, 2008 pp. 367-367 Digital Object Identifier 10.1109/ICICIC.2008.102. |
M.C. D'Ornellas, “Applying Digital Rights Management to Complex Content Management Systems”, Computational Science and Engineering, 2008. CSE '08. 11th IEEE International Conference on Jul. 16-18, 2008 pp. 429-435 Digital Object Identifier 10.1109/CSE.2008.64. |
J. Souer and M. Van Mierloo. “A Component Based Architecture for Web Content Management: Runtime Deployable WebManager Component Bundles”, Web Engineering, 2008. ICWE '08. Eighth International Conference on Jul. 14-18, 2008 pp. 366-369 Digital Identifier 10.1109/ICWE.2008.32. |
Sung Ho Jang, Chang Hyeon Noh, and Jong Sik Lee, “Semantic Web-Based Digital Content Management in Grid Computing” Semantic Computing and Applications, 2008. IWSCA '08. IEEE International Workshop on Jul. 10-11, 2008 pp. 129-131 Digital Object Identifier 10.1109/IWSCA.2008.8. |
O-Hoon Choi, Jung-Eun Lim, Dong-Hyun Lee, Hong-Seok Na, and Doo-Kwon Baik, “A multimedia contents management system based on a metadata-net in home network” Consumer Electronics, IEEE Transactions on vol. 54, Issue 2, May 2008 pp. 468-473 Digital Object Identifier 10.1009/TCE.2008.4560116. |
W. Harrison, “Content Mismanagement Systems” Software, IEEE vol. 23, Issue 1, Jan.-Feb. 2006 pp. 5-8 Digital Object Identifier 10.1109/MS.2006.7. |
M. Grossniklaus, M.C. Norrie, B. Signer, and N. Weibel, “Producing Interactive Paper Documents Based on Multi-Channel Content Publishing”, Automated Production of Cross Media Contect for Multi-Channel Distribution, 2007. AXMEDIS '07. Third International Conference on Nov. 28-30,. 2007 pp. 89-96 Digital Object Identifier 10.1109/AXMEDIS.2007.22. |
Feng-Hsu Wang, “A Contextualization Method of Browsing Events in Web-based Learning Content Management System for Personalized Learning”, Advanced Learning Technologies, 2007. ICALT 2007. Seventh IEEE International Conference on Jul. 18-20, 2007 Digital Object Identifier 10.1109/ICALT.2007.9. |
“KBMS-Prototype KRISYS usermanual overview” KBMS-Prototype KRISYS User Manual, Dec. 1, 1992, pp. 1-94, XP002193794. |
Mattos N M et al.: “Grand tour of concepts for obect-orientation from a database point of view” Data & Knowledge Engineering, Amsterdam, NL, vol. 9, No. 3, Jan. 1, 1992, pp. 321-352, XP009020749. |
Bertino E et al.: “Object-Oriented Database Management Systems: Concepts and Issues” Computer, IEEE Service Center, Los Alamitos, CA US, vol. 24, No. 4, Apr. 1, 1991, pp. 33-47, XP000227753 ISSN: 0018-9162. |
Chowdhury et al., Logical vs Numerical Inference on Statistical Databases, Proceedings of the 29th Annual Hawaii International Conference on System Sciences, 1996, pp. 3-10. |
Hayashi et al., A Network-Centric Approach to Low-Power Consumption Sensor-Network with Related Service Intergration, SICE Annual Conference 2012, Aug. 20-23, Akita University, Akita , Japan, pp. 1433-1436. |
Hayashi et al., A Network-Centric Approach to Sensor-Data and Service Intergration, SICE Annual Conference 2011, Sep. 13-18, 2011, Waseda University, Tokyo, Japan, pp. 2037-2042. |
Shankar et al., Managing Pervasive Systems Using Role-Based Obligation Policies, 2006, Fourth Annual IEEE International Conference on DOI. |
Weingroff et al., Tools for Managing Collaboration, Communication, and Website Content Development in a Distributed Digital Library Community, JCDL, Jun. 7-11, 2005. |
Stephen P. Levitt, C++: An Evolving Language, IEE Africon, pp. 1197-1202, 2004. |