发明名称 |
Evaluating removal of access permissions |
摘要 |
Methods and systems are provided for controlling access to a file system. A record of actual accesses by users of the file system is maintained. Before a user is removed from a set of users or before a privilege for a set of users to access a data element is removed, it is determined whether the actual recorded accesses of the user are allowed by residual access permissions that would remain after implementing the proposed removal of access permission. An error condition is generated if the proposed removal of the access permission would have prevented at least one of the actual accesses. In another aspect of the invention, the system determines if the users would have alternate access to the storage element following implementation of the proposal.
|
申请公布号 |
US2008271157(A1) |
申请公布日期 |
2008.10.30 |
申请号 |
US20070789884 |
申请日期 |
2007.04.26 |
申请人 |
FAITELSON YAKOV;KORKUS OHAD;KRETZER OPHIR |
发明人 |
FAITELSON YAKOV;KORKUS OHAD;KRETZER OPHIR |
分类号 |
H04L9/32 |
主分类号 |
H04L9/32 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|