| 摘要 |
A system, apparatus, method, or computer program product of restricting file access is disclosed wherein a set of file write access commands are determined from data stored within a storage medium. The set of file write access commands are for the entire storage medium. Any matching file write access command provided to the file system for that storage medium results in an error message. Other file write access commands are, however, passed onto a device driver for the storage medium and are implemented. In this way commands such as file delete and file overwrite can be disabled for an entire storage medium. |
| 主权项 |
1. A computer implemented method for applying, by at least one computer processor, a computer file system operation access privilege to a computer storage medium, comprises:
associating, by the at least one computer processor, the computer file system operation access privilege with at least a portion of the computer storage medium; intercepting, by the at least one computer processor, by at least one computer file system trap layer or at least one file system filter layer, an attempted operation on said at least a portion of the computer storage medium,
wherein said intercepting occurs regardless of an identity of a user attempting the attempted operation; comparing, by the at least one computer processor, the attempted operation to the computer file system operation access privilege; and allowing, or denying, by the at least one computer processor, the attempted operation based on the comparing the attempted operation to the computer file system operation access privilege. |
