Method for performing distributed administration

Abstract

A master defines properties for a resource. The master assigns the properties to an owner. The owner associates the properties to an administrator object, the administrator object being an administrator of a company. The administrator can then associate the property to other objects associated with the company, thereby granting other company users access to the resource property.

1 . A computer-implemented method for controlling access to a resource, comprising:
 authenticating a user;   accessing a user object in a container hierarchy;   checking the user object for a property of the resource;   if the user object lacks the property:
 identifying an association with a company object in the container hierarchy by the user object; and 
 checking the company object for the property. 
   
     
     
         2 . A computer-implemented method according to  claim 1 , further comprising, if the company object includes the property, permitting the user to access the resource. 
     
     
         3 . A computer-implemented method according to  claim 1 , further comprising, if the company object lacks the property, requesting permission to access the resource from an administrator for a company associated with the company object. 
     
     
         4 . A computer-implemented method according to  claim 1 , further comprising, if the company object lacks the property, sending a message to an owner of the resource about the attempt to access. 
     
     
         5 . Computer-readable media containing a program to control access to a resource, comprising:
 software to authenticate a user;   software to access a user object in a container hierarchy;   software to check the user object for a property of the resource;   if the user object lacks the property:
 software to identify an association with a company object in the container hierarchy by the user object; and 
 software to check the company object for the property. 
   
     
     
         6 . Computer-readable media according to  claim 5 , the program further comprising, if the company object lacks the property, software to request permission to access the resource from an administrator for a company associated with the company object.