| 摘要 |
Determining authorization for actions includes defining a plurality of groups, defining a plurality of action types and corresponding levels of authorization for each of the groups, for at least a subset of the action types, defining a plurality of devices on which corresponding actions may be performed, wherein at least some of the devices correspond to portions of a data storage device, and, for the at least one of the groups, determining authorization for a requested action, where if the action corresponds to one of the devices, authorization is determined by examining the levels of authorization for action types corresponding to the at least one group and by examining the plurality of devices corresponding to the requested action and where if the action does not correspond to one of the devices, authorization is determined by examining the levels of authorization for action types corresponding to the at least one group. The action types may include system calls to the data storage device. The at least one of the devices may include at least one disk storage area of the data storage device. The at least one of the devices may include communication ports of the data storage device. The action types may indicate whether system calls are allowed on the communication ports. In response to a requested action being authorized, a tag may be returned that may be used in connection with subsequent requests that the action be performed. <IMAGE> |
