Restricting access to a data storage system on a local network

A method for managing access to files stored on a network attached storage device (NAS), the method comprising:

• receiving, from a client, a request to retrieve a local code comprising a code generated by a cloud service that authorizes the client to access files stored on the NAS;
• determining whether the request from the client was received over a local network;
• responsive to determining that the request from the client was not received over the local network, denying the client access to the NAS;
• and
• responsive to determining that the request from the client was received over the local network, sending to the client over the local network the local code.

A network-attached storage device (NAS) comprising:

• data storage means for storing computer-executable instructions;
• first network interface means for communicating over a local network;
• second network interface means for communicating over a wide area network;
• and
• control means for controlling the data storage means, the first network interface means, and the second network interface means and configured to, upon execution of the computer executable instructions:
• receive, from a client, a request to retrieve a local code comprising a code generated by a cloud service that authorizes the client to access the NAS;
• determine whether the request received from the client was received over the local network;
• responsive to determining that the request from the client was not received over the local network, deny the client access to the NAS;
• and
• responsive to determining that the request from the client was received over the local network, send to the client over the local network the local code.