STORAGE LEVEL ACCESS CONTROL FOR DATA GROUPING STRUCTURES

摘要

One or more techniques and/or systems are provided for implementing storage level access control for data grouping structures. For example, a storage level access guard may be defined for a data grouping structure (e.g., a Qtree, a portion of a volume, etc.) of a storage device. The storage level access guard may be defined at a storage level of the storage device such that clients and/or certain administrators such as domain administrators may be restricted from accessing and/or changing the storage level access guard, which may increase data security. A hidden and unmodifiable property may be applied to the storage level access guard, which may be stored in a directory associated with the data grouping structure so that a logical replication of the data grouping structure may also replicate the storage level access guard.

主权项

1. A method for implementing storage level access control for data grouping structures, comprising:
defining a storage level access guard for a data grouping structure of a storage device, the storage level access guard defined at a storage level of the storage device; receiving a data access request from a client; and evaluating the data access request utilizing the storage level access guard to determine whether to allow or deny the data access request at the storage level.