Providing multiple roles in computer-implemented workspaces

Patent metadata

Field	Value
Publication number	US-9600849-B2
Application number	US-201313795892-A
Country	US
Kind code	B2
Filing date	Mar 12, 2013
Priority date	Mar 12, 2013
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

Providing multiple roles in computer-implemented workspaces. When a first computer workspace in which a user has been assigned a first role and a second role is accessed, a first subset of content defined by the first role and a second subset of content defined by the second role can be made accessible to the user. Input to switch access from the first computer workspace to a second computer workspace that is different from the first computer workspace and in which the user is assigned only the second role can be received. In response, only the second subset of content can be provided to the user and access to the first subset of content can be prohibited.

First claim

What is claimed is:

1. A method performed by data processing apparatus, the method comprising:
determining that a user has accessed a computer system, the computer system providing a plurality of computer workspaces, each computer workspace associated with a corresponding context, each context including at least one of a geographical location from which the user accesses the computer system or a time of day when the user accesses the computer system, each computer workspace providing content, at least a portion of the content being accessible by the user;
identifying a current context associated with the user access of the computer system, the current context identifying at least one of a current geographical location from which the user accesses the computer system or a current time of day when the user accesses the computer system;
based on the current context associated with the user access, identifying, automatically and without user intervention, a first computer workspace from the plurality of computer workspaces satisfying the identified current context, wherein the user has been assigned a first role and a second role in the first computer workspace and assigned only the second role in a second computer workspace that is different from the first computer workspace, the first role defining a first subset of the content that is accessible by the user, and the second role defining a second subset of the content that is accessible by the user, the second workspace in the plurality of computer workspaces;
in response to identifying the first computer workspace, automatically and without user intervention, granting access to the user for the identified first computer workspace;
in response to a request from the user for the first computer workspace received while accessing the computer system in the current context that matches the corresponding context of the first computer workspace and after the user has been granted access to the first computer workspace, providing the first subset of the content and the second subset of the content to the user; and
in response to the user accessing the computer system in a new context that matches the corresponding context of the second computer workspace, providing only the second subset of the content to the user.

2. The method of claim 1 , wherein the content includes data and computer-implemented applications accessible by the user.

3. The method of claim 1 , further comprising persisting a first relationship and a second relationship between the user and the first computer workspace, wherein the first relationship and the second relationship are based on the first role and the second role, respectively.

4. The method of claim 3 , wherein persisting the first relationship comprises tagging the first relationship with a string of characters that represents the first role.

5. The method of claim 3 , wherein persisting the first relationship comprises persisting the first relationship in the first computer workspace.

6. The method of claim 3 , wherein persisting the second relationship comprises persisting the second relationship in a user account associated with the user.

7. The method of claim 3 , wherein persisting the first relationship comprises associating an identifier to identify the user and an identifier to identify the first computer workspace with the first role.

8. The method of claim 1 , further comprising receiving a selection of the first computer workspace in a user interface that displays the first computer workspace and the second computer workspace.

9. The method of claim 8 , further comprising, in response to receiving a selection of the second computer workspace in the user interface, displaying a different user interface that provides only the second subset of the content.

10. The method of claim 8 , comprising:
receiving, in the user interface, an input to switch from the first computer workspace to the second computer workspace; and
displaying a different user interface that displays the second subset of content in response to receiving the input to switch.

11. The method of claim 1 , wherein the first role is assigned based on a business role of the user in the context of the first computer workspace.

12. A non-transitory computer-readable medium storing instructions executable by data processing apparatus to perform operations including:
determining that a user has accessed a computer system, the computer system providing a plurality of computer workspaces, each computer workspace associated with a corresponding context, each context including at least one of a geographical location from which the user accesses the computer system or a time of day when the user accesses the computer system, each computer workspace providing content, at least a portion of the content being accessible by the user;
identifying a current context associated with the user access of the computer system, the current context identifying at least one of a current geographical location from which the user accesses the computer system or a current time of day when the user accesses the computer system;
based on the current context associated with the user access, identifying, automatically and without user intervention, a first computer workspace from the plurality of computer workspaces satisfying the identified current context, wherein the user has been assigned a first role and a second role in the first computer workspace and assigned only the second role in a second computer workspace that is different from the first computer workspace, the first role defining a first subset of the content that is accessible by the user, and the second role defining a second subset of the content that is accessible by the user, the second workspace in the plurality of computer workspaces;
in response to identifying the first computer workspace, automatically and without user intervention, granting access to the user for the identified first computer workspace;
in response to a request from the user for the first computer workspace received while accessing the computer system in the current context that matches the corresponding context of the first computer workspace and after the user has been granted access to the first computer workspace, providing the first subset of the content and the second subset of the content to the user; and
in response to the user accessing the computer system in a new context that matches the corresponding context of the second computer workspace, providing only the second subset of the content to the user.

13. The medium of claim 12 , the operations further comprising persisting a first relationship and a second relationship between the user and the first computer workspace, wherein the first relationship and the second relationship are based on the first role and the second role, respectively.

14. The medium of claim 13 , wherein persisting the first relationship comprises tagging the first relationship with a string of characters that represents the first role.

15. The medium of claim 13 , wherein persisting the first relationship comprises persisting the first relationship in the first computer workspace.

16. The medium of claim 13 , wherein persisting the second relationship comprises persisting the second relationship in a user account associated with the user.

17. A system comprising:
data processing apparatus; and
a computer-readable medium storing instructions executable by the data processing apparatus to perform operations comprising:
determining that a user has accessed a computer system, the computer sy

Assignees

• Ebner Rachel
• Bleier Orly
• Tamari Avihai
• Shemesh Ida
• Kritchker Lea
• Sap Portals Israel Ltd

Inventors

• Ebner Rachel
• Bleier Orly
• Tamari Avihai
• Shemesh Ida
• Kritchker Lea

Classifications

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06Q50/22 Primary

  Social work or social welfare, e.g. community support activities or counselling services · CPC title

• G06Q10/103 Primary

  Workflow collaboration or project management · CPC title

• G16H40/20

  for the management or administration of healthcare resources or facilities, e.g. managing hospital staff or surgery rooms · CPC title