Rule based access for removable storage

摘要

Various techniques and solutions are described for rule-based access to removable storage devices. For example, a request can be received to perform a file system operation using a removable storage device that is formatted with a file system that does not support access controls. A rules-based check of the received request can be performed by a service by checking the request against a plurality of rules. Based on results of the rules-based check, the request can be allowed or denied.

主权项

1. A method, implemented at least in part by a computing device, for rule-based access to removable storage devices, the method comprising:
receiving, by a service of the computing device, a request to perform a file system operation using a removable storage device of the computing device, wherein the removable storage device is formatted with a file system that does not support access controls, and wherein the request to perform the file system operation is received from a third-party application running on the computing device; performing, by the service of the computing device, a rules-based check of the received request, wherein the rules-based check comprises checking the received request against a plurality of rules, wherein the rules-based check is performed independent of the file system of the removable storage device, and wherein the performing the rules-based check of the received request comprises:
checking a rule, of the plurality of rules, that limits access to one or more file types registered by the third-party application; determining, by the service of the computing device, whether to allow the request to perform the file system operation based on results of the rules-based check; and when the request to perform the file system operation is allowed, performing the file system operation.