Method, system and program product for verifying access to a data object

Abstract

An improved solution for verifying access to a data object. In particular, the invention automatically determines when access to the data object requires verification and provides an owner of the data object a set of current users for verification. The set of current users can include all or a subset of the users / user groups that have access to the data object. Additionally, an indication of one or more attributes of each user can be provided to the owner to assist in verification. Access information can be updated based on a response from the owner.

Description

REFERENCE TO PRIOR APPLICATIONS [0001] This application is a continuation application of co-pending U.S. patent application Ser. No. 10 / 898,099, filed on Jul. 22, 2004, which is hereby incorporated by reference.BACKGROUND OF THE INVENTION [0002] 1. Technical Field [0003] The invention relates generally to verifying user access to a data object, and more particularly to a solution that automatically determines when access to the data object requires verification and assists an owner of the data object in verifying the access. [0004] 2. Background Art [0005] Many companies limit the number of users that can access a certain data object (e.g., a database, directory, file, etc.). To this extent, some companies require that the access privileges of users be periodically reviewed in order to ensure that it remains current. For example, the data object can have an associated owner that is responsible for managing it. The owner may be required to periodically (e.g., annually) verify that ac...

AI Technical Summary

Benefits of technology

[0009] The invention provides a solution for verifying access to a data object. Specifically, the invention automatically determines when access to a data object requires verification, and provides an owner of the data object a set of current users that currently can access it. The set of current users can be selected from a set of current user groups and a set of additional users that currently have access to the data object. In one embodiment, an indication of one or more attributes of each user in the set of current users is also provided to the owner. The owner can review the set of current users and respond appropriately. For example, the owner can respond by providing a set of verified users. Access information, such as a verification history and the set of current users, can be updated based on the response from the owner. As a result, the invention provides an improved solution for verifying access to the data object.

Problems solved by technology

Many companies limit the number of users that can access a certain data object (e.g., a database, directory, file, etc.).

In some cases, the data object owner may not have ready access to the necessary information, thereby requiring assistance from co-workers and delay in completing the verification.

As a result, access verification is frequently a time consuming, tedious task that frequently fails to be consistently and reliably performed.

However, these solutions often unintentionally remove the access rights for some users.

Images