Back to results
US 10,095,879 B1Granted
Restrictive access control list
AssigneeDropbox, Inc.
InventorsThomas Kleinpeter, Tony Xu, Alex Sydell, Nils Bunger, Sam Jau, Aaron Staley, Sara Lin
Life of this patent
Estimating the term…
Abstract
The present technology pertains to a organization directory hosted by a synchronized content management system. The corporate directory can provide access to user accounts for all members of the organization to all content items in the organization directory on the respective file systems of the members' client devices. Members can reach any content item at the same path as other members relative to the organization directory root on their respective client device. In some embodiments novel access permissions are granted to maintain path consistency.
Claims15
A non-transitory computer readable medium comprising instructions stored thereon, when executed the instructions are effective to cause a content management system to:
- include a first folder in a restrictive access control list;
- determine whether the first folder included in the restrictive access control list is a folder that has an associated property that requires that the folder must be visible to all user accounts having access to a directory, and
- when it is determined that the folder has the associated property that requires that the folder must be visible to all user accounts having access to the directory, the access control list overrides a default access policy for the directory including the first folder to prohibit all user accounts having access to the directory from accessing the first folder but provide read-name-only access to the first folder for all user accounts except for a user account that is included in the restrictive access control list in association with the first folder,
- when it is determined that the folder does not have the associated property that requires the folder must be visible to all user accounts having access to the directory, the restrictive access control list overrides the default access policy for the directory including the first folder to prohibit all user accounts having access to the directory from accessing the first folder and from seeing the existence of the first folder except for a user account that is included in the restrictive access control list in association with the first folder.
1 more element
A method comprising:
- including a first folder in a restrictive access control list the restrictive access;
- determining whether the first folder included in the restrictive access control list is a folder that has an associated property that requires that the folder must be visible to all user accounts having access to a directory including the first folder;
- and
- providing the all user accounts with read-name-only access to the first folder, whereby the restrictive access control list overrides a default access policy for the directory including the first folder to prohibit all user accounts having access to the directory from accessing the first folder;
- and
- for a user account that is included in the restrictive access control list in association with the first folder, providing an access type specified in association with the user account in the restrictive access control list, wherein the default access policy for the directory permits all user accounts having access to the directory to at least read contents of each folder within the directory.
3 more elements
A content management system comprising:
- at least one processor;
- at least one memory having instructions stored thereon, that when executed the instructions are effective to cause the at least one processor to:
- include a first folder in a restrictive access control list;
- determine whether the first folder included in the restrictive access control list is a folder that has an associated property that requires that the folder must be visible to all user accounts having access to a directory, and
- when it is determined that the folder has the associated property that requires that the folder must be visible to all user accounts having access to the directory, the access control list overrides a default access policy for a directory including the first folder to prohibit all user accounts having access to the directory from accessing the first folder but provide read-name-only access to the first folder for all user accounts except for a user account that is included in the restrictive access control list in association with the first folder,
- when it is determined that the folder does not have the associated property that requires the folder must be visible to all user accounts having access to the directory, the restrictive access control list overrides a default access policy for a directory including the first folder to prohibit all user accounts having access to the directory from accessing the first folder and from seeing the existence of the first folder except for a user account that is included in the restrictive access control list in association with the first folder.
3 more elements
Dependencies are inferred from the claim text.