ACCESS CONTROL BASED ON OPERATION EXPIRY DATA

摘要

The controlling of access to a file system entity based on location of the requestor and operation expiry data of the file system entity. Operation expiry data and location data are associated with a file system entity (e.g., a file, a directory, a partition, or a disk) such that the file system entity and the operation expiry data and the location data are moved or copied atomically together. Upon receiving a request to perform an operation on the file system entity, the system identifies a location status of the requestor. The system then identifies expiry data that corresponds to the location status, and that is associated with the requested operation. The system then uses the identified expiry data to determine whether or not the requested file operation is to be permitted.

主权项

1. A method for controlling access to a file system entity based on location of requestor and operation expiry data of the file, the method comprising:
an act of associating operation expiry data and location data with a file system entity such that the operation expiry data and the location data and the file system entity are moved or copied atomically together; an act of receiving a request to perform an operation on the file system entity; an act of identifying a location status associated with a requestor of the request; an act of identifying expiry data that corresponds to the location status, and that is associated with the requested operation; and an act of using the identified expiry data to determine whether the requested operation is permitted on the file system entity.