SYSTEM AND METHOD FOR SECURE MULTI-TENANCY IN DATADOMAIN OPERATING SYSTEM (DDOS), A PURPOSE BUILT BACKUP APPLIANCE (PBBA) OPERATING SYSTEM

摘要

A first request is received from a first user to access a first file system management objects (FSMOs) of a first tenant unit (TU), the first TU being one of a plurality of TUs. The first FSMO is one of a plurality of FSMOs, each FSMO containing namespace information of a particular tenant. In response to the first request, it is determined whether the first user is authorized to access the first FSMO, including identifying TUs that are associated with the first user, determining whether the first TU is included in the TUs, and if so, determining whether the first FSMO is included in FSMOs associated with the first TU. In response to determining that the first FSMO is included in a set of one or more FSMOs that are associated with the first TU, the first user to access the first FSMO is allowed.

主权项

1. A computer-implemented method for providing secure multi-tenancy in a storage system, the method comprising:
receiving a first request from a first user to access a first file system management objects (FSMOs) of a first tenant unit (TU), the first TU being one of a plurality of TUs, wherein the first FSMO is one of a plurality of FSMOs, each FSMO containing namespace information of a particular tenant; in response to the first request, determining whether the first user is authorized to access the first FSMO, including
identifying a set of one or more TUs that are associated with the first user,determining whether the first TU is included in the set of one or more TUs, anddetermining whether the first FSMO is included in a set of one or more FSMOs that are associated with the first TU, in response to determining that the first TU is included in the set of TUs associated with the first user; and in response to determining that the first FSMO is included in a set of one or more FSMOs that are associated with the first TU, allowing the first user to access the first FSMO.