METHODS AND SYSTEMS FOR SPECIFYING AND ENFORCING ACCESS CONTROL IN A DISTRIBUTED SYSTEM

摘要

Methods and systems for controlling access to objects of a distributed computing environment are described. In one configuration, a computing device receives a request from a principal to access a protected object and evaluating the transitive closure of the list of group identifiers. The protected object is associated with an access control list and has a time-invariant list of group identifiers. The list of group identifiers includes the access list is associated with the protected object to identify at least one principal authorized to access the protected object.