Automatic resource ownership assignment system and method

Abstract

A method for automatic folder ownership assignment, including ascertaining which first folders, among a first multiplicity of folders, have at least one of modify and write permissions to non-IT administration entities, adding the first folders to a list of candidates for ownership assignment, defining a second multiplicity of folders which is a subset of the first multiplicity of folders and not including the first folders and descendents and ancestors thereof, ascertaining which second folders among the second multiplicity of folders, have permissions to non-IT administration entities, adding the second folders to the candidates, defining a third multiplicity of folders, which is a subset of the second multiplicity of folders and not including the second folders and descendents and ancestors thereof, ascertaining which third folders among the third multiplicity of folders are topmost folders, adding the third folders to the candidates, and recommending possible assignment of ownership of the candidates.

1 . A system for automatic folder ownership assignment in an enterprise computer network, the system comprising:
 modify/write permissions scrutinizing functionality operative for ascertaining which first folders, among a first multiplicity of folders in an enterprise computer network, have at least one of modify and write permissions to entities other than IT administration entities, and adding said first folders to a list of base-folder candidates for ownership assignment;   first pruning functionality operative for defining a second multiplicity of folders, said second multiplicity of folders being a subset of said first multiplicity of folders which does not include said first folders, all descendents of said first folders and all ancestors of said first folders;   permissions scrutinizing functionality operative for ascertaining which second folders among said second multiplicity of folders, have permissions to entities other than IT administration entities and adding said second folders to said list of base-folder candidates for ownership assignment;   second pruning functionality operative for defining a third multiplicity of folders, said third multiplicity of folders being a subset of said second multiplicity of folders which does not include said second folders, all descendents of said second folders and all ancestors of said second folders;   topmost folder scrutinizing functionality operative for ascertaining which third folders among said third multiplicity of folders are topmost folders and adding said third folders to said list of base-folder candidates for ownership assignment; and   possible ownership assignment recommendation functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates.   
     
     
         2 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 1  and wherein said possible ownership assignment recommendation functionality comprises:
 functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates to an entity which has been most active with regard to said at least one of said list of base-folder candidates. 
 
     
     
         3 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 1  and wherein said modify/write permissions scrutinizing functionality is also operative for ascertaining which first additional folders, among said first multiplicity of folders in said enterprise computer network comprise at least sensitive content, and adding said first additional folders to said list of base-folder candidates for ownership assignment. 
     
     
         4 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 1  and wherein said permissions scrutinizing functionality is also operative for ascertaining which second additional folders among said second multiplicity of folders comprise at least sensitive content, and adding said second additional folders to said list of base-folder candidates for ownership assignment. 
     
     
         5 . A system for automatic folder ownership assignment in an enterprise computer network, the system comprising:
 modify/write permissions scrutinizing functionality operative for ascertaining which first folders, among a first multiplicity of folders in an enterprise computer network, have at least one of modify and write permissions to entities other than IT administration entities and comprise at least sensitive content, and adding said first folders to a list of base-folder candidates for ownership assignment;   first pruning functionality operative for defining a second multiplicity of folders, said second multiplicity of folders being a subset of said first multiplicity of folders which does not include said first folders, all descendents of said first folders and all ancestors of said first folders;   permissions scrutinizing functionality operative for ascertaining which second folders among said second multiplicity of folders, have permissions to entities other than IT administration entities and comprise at least sensitive content, and adding said second folders to said list of base-folder candidates for ownership assignment;   second pruning functionality operative for defining a third multiplicity of folders, said third multiplicity of folders being a subset of said second multiplicity of folders which does not include said second folders, all descendents of said second folders and all ancestors of said second folders;   topmost folder scrutinizing functionality operative for ascertaining which third folders among said third multiplicity of folders are topmost folders and adding said third folders to said list of base-folder candidates for ownership assignment; and   possible ownership assignment recommendation functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates.   
     
     
         6 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 5  and wherein said possible ownership assignment recommendation functionality comprises:
 functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates to an entity which has been most active with regard to said at least one of said list of base-folder candidates. 
 
     
     
         7 . A system for automatic folder ownership assignment in an enterprise computer network, the system comprising:
 actual modification scrutinizing functionality operative for ascertaining which first folders, among a first multiplicity of folders in an enterprise computer network, have been at least actually modified by entities other than IT administration entities, and adding said first folders to a list of base-folder candidates for ownership assignment;   first pruning functionality operative for defining a second multiplicity of folders, said second multiplicity of folders being a subset of said first multiplicity of folders which does not include said first folders, all descendents of said first folders and all ancestors of said first folders;   actual access scrutinizing functionality operative for ascertaining which second folders among said second multiplicity of folders, have been at least actually accessed by entities other than IT administration entities and adding said second folders to said list of base-folder candidates for ownership assignment;   second pruning functionality operative for defining a third multiplicity of folders, said third multiplicity of folders being a subset of said second multiplicity of folders which does not include said second folders, all descendents of said second folders and all ancestors of said second folders;   topmost folder scrutinizing functionality operative for ascertaining which third folders among said third multiplicity of folders are topmost folders and adding said third folders to said list of base-folder candidates for ownership assignment; and   possible ownership assignment recommendation functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates.   
     
     
         8 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 7  and wherein said possible ownership assignment recommendation functionality comprises:
 functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates to an entity which has been most active with regard to said at least one of said list of base-folder candidates. 
 
     
     
         9 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 7  and wherein said actual modification scrutinizing functionality is also operative for ascertaining which first additional folders, among said first multiplicity of folders in said enterprise computer network comprise at least sensitive content, and adding said first additional folders to said list of base-folder candidates for ownership assignment. 
     
     
         10 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 7  and wherein said actual access scrutinizing functionality is also operative for ascertaining which second additional folders among said second multiplicity of folders comprise at least sensitive content, and adding said second additional folders to said list of base-folder candidates for ownership assignment. 
     
     
         11 . A system for automatic folder ownership assignment in an enterprise computer network, the system comprising:
 actual modification scrutinizing functionality operative for ascertaining which first folders, among a first multiplicity of folders in an enterprise computer network, have been at least actually modified by entities other than IT administration entities and comprise at least sensitive content, and adding said first folders to a list of base-folder candidates for ownership assignment;   first pruning functionality operative for defining a second multiplicity of folders, said second multiplicity of folders being a subset of said first multiplicity of folders which does not include said first folders, all descendents of said first folders and all ancestors of said first folders;   actual access scrutinizing functionality operative for ascertaining which second folders among said second multiplicity of folders, have been at least actually accessed by entities other than IT administration entities and comprise at least sensitive content, and adding said second folders to said list of base-folder candidates for ownership assignment;   second pruning functionality operative for defining a third multiplicity of folders, said third multiplicity of folders being a subset of said second multiplicity of folders which does not include said second folders, all descendents of said second folders and all ancestors of said second folders;   topmost folder scrutinizing functionality operative for ascertaining which third folders among said third multiplicity of folders are topmost folders and adding said third folders to said list of base-folder candidates for ownership assignment; and   possible ownership assignment recommendation functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates.   
     
     
         12 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 11  and wherein said possible ownership assignment recommendation functionality comprises:
 functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates to an entity which has been most active with regard to said at least one of said list of base-folder candidates. 
 
     
     
         13 . A system for automatic folder ownership assignment in an enterprise computer network, the system comprising:
 sensitive content scrutinizing functionality operative for ascertaining which first folders, among a first multiplicity of folders in an enterprise computer network, comprise at least sensitive content, and adding said first folders to a list of base-folder candidates for ownership assignment;   first pruning functionality operative for defining a second multiplicity of folders, said second multiplicity of folders being a subset of said first multiplicity of folders which does not include said first folders, all descendents of said first folders and all ancestors of said first folders;   topmost folder scrutinizing functionality operative for ascertaining which second folders among said second multiplicity of folders are topmost folders and adding said second folders to said list of base-folder candidates for ownership assignment; and   possible ownership assignment recommendation functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates.   
     
     
         14 . A system for automatic folder ownership assignment in an enterprise computer network according to  claim 13  and wherein said possible ownership assignment recommendation functionality comprises:
 functionality operative for recommending possible assignment of ownership of at least one of said list of base-folder candidates to an entity which has been most active with regard to said at least one of said list of base-folder candidates. 
 
     
     
         15 . A method for automatic folder ownership assignment in an enterprise computer network, the method comprising:
 maintaining a list of base-folder candidates for ownership assignment;   ascertaining which first folders, among a first multiplicity of folders in an enterprise computer network, have at least one of modify and write permissions to entities other than IT administration entities, and adding said first folders to said list of base-folder candidates for ownership assignment;   defining a second multiplicity of folders, said second multiplicity of folders being a subset of said first multiplicity of folders which does not include said first folders, all descendents of said first folders and all ancestors of said first folders;   ascertaining which second folders among said second multiplicity of folders, have permissions to entities other than IT administration entities and adding said second folders to said list of base-folder candidates for ownership assignment;   defining a third multiplicity of folders, said third multiplicity of folders being a subset of said second multiplicity of folders which does not include said second folders, all descendents of said second folders and all ancestors of said second folders;   ascertaining which third folders among said third multiplicity of folders are topmost folders and adding said third folders to said list of base-folder candidates for ownership assignment; and   recommending possible assignment of ownership of at least one of said list of base-folder candidates.   
     
     
         16 . A method for automatic folder ownership assignment in an enterprise computer network according to  claim 15  and wherein said recommending comprises:
 recommending possible assignment of ownership of at least one of said list of base-folder candidates to an entity which has been most active with regard to said at least one of said list of base-folder candidates. 
 
     
     
         17 . A method for automatic folder ownership assignment in an enterprise computer network according to  claim 15  and also comprising ascertaining which first additional folders, among said first multiplicity of folders in said enterprise computer network comprise at least sensitive content, and adding said first additional folders to said list of base-folder candidates for ownership assignment. 
     
     
         18 . A method for automatic folder ownership assignment in an enterprise computer network according to  claim 15  and also comprising ascertaining which second additional folders among said second multiplicity of folders comprise at least sensitive content, and adding said second additional folders to said list of base-folder candidates for ownership assignment. 
     
     
         19 . A method for automatic folder ownership assignment in an enterprise computer network, the method comprising:
 maintaining a list of base-folder candidates for ownership assignment;   ascertaining which first folders, among a first multiplicity of folders in an enterprise computer network, have at least one of modify and write permissions to entities other than IT administration entities and comprise at least sensitive content, and adding said first folders to said list of base-folder candidates for ownership assignment;   defining a second multiplicity of folders, said second multiplicity of folders being a subset of said first multiplicity of folders which does not include said first folders, all descendents of said first folders and all ancestors of said first folders;   ascertaining which second folders among said second multiplicity of folders, have permissions to entities other than IT administration entities and comprise at least sensitive content, and adding said second folders to said list of base-folder candidates for ownership assignment;   defining a third multiplicity of folders, said third multiplicity of folders being a subset of said second multiplicity of folders which does not include said second folders, all descendents of said second folders and all ancestors of said second folders;   ascertaining which third folders among said third multiplicity of folders are topmost folders and adding said third folders to said list of base-folder candidates for ownership assignment; and   recommending possible assignment of ownership of at least one of said list of base-folder candidates.   
     
     
         20 . A method for automatic folder ownership assignment in an enterprise computer network according to  claim 19  and wherein said recommending comprises:
 recommending possible assignment of ownership of at least one of said list of base-folder candidates to an entity which has been most active with regard to said at least one of said list of base-folder candidates.