Method and system access controller controlling access requests in a large database system having administrators, by defining the roles, covering one or more privileges, and representing a competence of the user to perform specific tasks

摘要

Method of controlling access of a user (7) to the resources (2d) of a data systems (1): (a) define roles covering one or several privileges and representing a user competence to carry out specific tasks;record in memory (10,12) the rules;record a list of access controls, defining the conditions for obtaining a right to use a resource type, to know a configured permission in terms of privileges in the memory (10,12) Two level access control is used, a first on the type of resources (2d) and a second on identifying the resources. The method identifies the user as well as his role and privileges; compares the privileges and permissions requested by the user with the configured required privileges and permissions recorded in memory and authorizes action required on the resource when the requested and configured permissions correspond and that one of the required privileges correspond to the privilege of the entity. The system access controller includes a administration machine (2a) having an access control service ,RAC, (6) and storage memory (10) for roles, privileges and access control lists