User experience container level identity federation and content security

A system including one or more processors coupled to memory, the memory loaded with computer instructions to control display of a workspace, the instructions, when executed on the processors, implement actions comprising:

• during a shared collaboration session sharing the workspace with multiple client nodes, executing a protocol to establish a first level authorization at a display client on a network node participating in the shared collaboration session for a participant operative identity (OID), the first level authorization enabling access to a workspace data set of the workspace during the shared collaboration session, the workspace data set having a plurality of entries that identify respective digital assets and locations in the workspace for graphical objects representing the respective digital assets, and wherein the plurality of entries includes a particular entry identifying a particular digital asset requiring a second level authorization;
• parsing the workspace data set to identify entries for digital assets having locations within a client viewport region of the workspace;
• displaying graphical objects on a display at the display client representing the identified digital assets accessible with the first level authorization;
• for the particular digital asset, communicating with an authorization server to return a result indicating status of second level authorization, and
• in response to a status indication that second level authorization is not established, displaying a placeholder graphical object at the display client, and
• in response to a status indication that second level authorization is established,
• displaying a graphical object representing the particular digital asset at the display client;
• and,
• when a placeholder graphical object is displayed, presenting a user interface object at the display client prompting execution of a protocol to establish second level authorization, and in dependence upon establishment of the second level authorization, replacing the placeholder graphical object with the graphical object representing the particular digital asset.

A non-transitory computer readable storage medium impressed with computer program instructions to control display of a workspace, the instructions, when executed on a processor, implement a method comprising:

• during a shared collaboration session sharing the workspace with multiple client nodes, executing a protocol to establish a first level authorization at a display client on a network node participating in the shared collaboration session for a participant operative identity (OID), the first level authorization enabling access to a workspace data set of the workspace during the shared collaboration session, the workspace data set having a plurality of entries that identify respective digital assets and locations in the workspace for graphical objects representing the respective digital assets, and wherein the plurality of entries includes a particular entry identifying a particular digital asset requiring a second level authorization;
• parsing the workspace data set to identify entries for digital assets having locations within a client viewport region of the workspace;
• displaying graphical objects on a display at the display client representing the identified digital assets accessible with the first level authorization;
• for the particular digital asset, communicating with an authorization server to return a result indicating status of second level authorization, and
• in response to a status indication that second level authorization is not established, displaying a placeholder graphical object at the display client, and
• in response to a status indication that second level authorization is established,
• displaying a graphical object representing the particular digital asset at the display client;
• and,
• when a placeholder graphical object is displayed, presenting a user interface object at the display client prompting execution of a protocol to establish second level authorization, and in dependence upon establishment of the second level authorization, replacing the placeholder graphical object with the graphical object representing the particular digital asset.

A method for controlling display of a virtual workspace, comprising:

• during a shared collaboration session sharing the virtual workspace with multiple client nodes, using a first level authorization protocol for at least one participant operative identity (OID) to authenticate and authorize at least one respective display client participating in the shared collaboration session to access the virtual workspace including a workspace data set stored on a server;
• sending, from the server, data from the workspace data set to the at least one respective display client participating in the shared collaboration session, the workspace data set having a plurality of entries that identify respective digital assets and locations in the shared virtual workspace for graphical objects representing the digital assets, and wherein the plurality of entries includes an entry identifying a particular digital asset requiring second level authorization;
• and
• accessing an authorization server that maintains resource access tokens usable to establish second level authorizations for display clients authorized to access the virtual workspace for content of the particular digital asset.

A collaboration system, comprising

• a workspace server including one or more processors coupled to memory, the memory loaded with computer instructions to control display of at least a portion of a virtual workspace, the instructions, when executed on the processors, implement actions comprising:
• during a shared collaboration session sharing the virtual workspace with multiple client nodes, using a first level authorization protocol for at least one participant operative identity (OID) to authenticate and authorize at least one respective display client participating in the shared collaboration session to access the virtual workspace including a workspace data set stored on the workspace server;
• and
• sending, from the workspace server, data from the workspace data set to the at least one respective display client participating in the shared collaboration session, the workspace data set having a plurality of entries that identify respective digital assets and locations in the virtual workspace for graphical objects representing the digital assets, and wherein the plurality of entries includes an entry identifying a particular digital asset requiring second level authorization;
• and
• an authorization server, including one or more processors coupled to memory, the memory loaded with computer instructions, the instructions, when executed on the processors, implement actions comprising:
• maintaining resource access tokens usable to establish second level authorizations for display clients authorized to access the virtual workspace for content of the particular digital asset.

A non-transitory computer readable storage medium impressed with computer program instructions to control display of at least a portion of a virtual workspace, the instructions, when executed on a processor or processors implementing actions comprising:

• during a shared collaboration session sharing the virtual workspace with multiple client nodes, using a first level authorization protocol for at least one participant operative identity (OID) to authenticate and authorize at least one respective display client participating in the shared collaboration session to access the virtual workspace including a workspace data set stored on a server;
• sending data from the workspace data set on the server to the at least one respective display client participating in the shared collaboration session, the workspace data set having a plurality of entries that identify respective digital assets and locations in the shared virtual workspace for graphical objects representing the digital assets, and wherein the plurality of entries includes an entry identifying a particular digital asset requiring second level authorization;
• and
• accessing an authorization server that maintains resource access tokens usable to establish second level authorizations for display clients authorized to access the virtual workspace for content of the particular digital asset.