True Delete in Oracle Beehive
By Simon Thorpe on Sep 22, 2008
|Charles Phillips and Chuck Rozwat during their Open World keynote speech today demonstrated how an IRM integration has been prototyped to protect documents that are stored in a Workspace within Beehive. They described security as one of the main features of the Beehive platform; IRM extends this security when documents and emails are used outside the Beehive environment. As Chuck said, "I am a hoarder of documents", he often saves documents to his local machine where it is easer to work on them. However in doing so any security that applied to the document whilst it resided in the repository is lost when removed.
Not so with IRM, rights to the content, as defined inside Beehive, are persistantly applied even when the document is moved beyond the storage area of the Workspace. So Chuck saved a document down to the local machine, then Charles deleted the original document inside the Beehive Workspace with "True Delete". When Chuck next went to open the locally saved copy, he was denied access because of the true delete. This shows an important element of the new 11g release of Oracle IRM. We are able to delegate the request for rights from the IRM server to anything, in this instance it is the Beehive server
|but could well be a content management system, records management application, anything which stores rights about access to information. In this demo when Charles true-deleted the document, it automatically revoked all access to all copies of the document via IRM. So when Chuck tried to access the locally saved document it talked to the IRM server which denied access to the document. In fact it would deny access to any copy that exists anywhere, both inside and outside of Beehive and inside or outside the traditional enterprise security perimeters such as the firewall.|
|I had the chance to speak with James Leask, the IRM Developer flown over from the UK to work with the Beehive team and help them with the prototyping of the integration. James said "The new 11g server due for release next year, has a highly extensible architecture allowing me to quickly write a plugin to delegate rights to the Beehive server. It was written in Java and uses web services.".
James was available behind the scenes during the demonstration incase last minute changes were required. However everything went very smoothly, so much so, it was hard to believe that it was live software being shown and not just slideware.
"Implementing the integration was simple, it only took about a day. Leaving me the rest of the week to enjoy San Francisco!"
James Leask, IRM Developer