Just-in-time data object permission restriction

A system comprising:

• one or more data processors;
• and
• a non-transitory computer readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform a set of actions including:
• receiving, using a computer system, an instruction to define or modify a permission constraint corresponding to a file;
• determining a time period during which the defined or modified permission constraint corresponding to the file is to apply;
• storing, in a data store, a permission-instruction data set representing the defined or modified permission constraint as a pending permission constraint without committing the pending permission constraint to the file before receiving a user request to access the file, wherein storing the permission-instruction data set in the data store does not include locating the file and does not include modifying one or more permissions of the located file, wherein the permission-instruction data set includes data indicative of the time period;
• postponing committing the pending permission constraint to the file based on the permission-instruction data set until a user request to access the file is received;
• receiving a particular user request to access the file within the time period;
• in response to the particular user request within the time period, committing the pending permission constraint to the file at least in part by locating the file and modifying one or more permissions of the file.

A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause one or more data processors to perform a set of actions including:

• receiving, using a computer system, an instruction to define or modify a permission constraint corresponding to a file;
• determining a time period during which the defined or modified permission constraint corresponding to the file is to apply;
• storing, in a data store, a permission-instruction data set representing the defined or modified permission constraint as a pending permission constraint without committing the pending permission constraint to the file before receiving a user request to access the file, wherein storing the permission-instruction data set in the data store does not include locating the file and does not include modifying one or more permissions of the located file, wherein the permission-instruction data set includes data indicative of the time period;
• postponing committing the pending permission constraint to the file based on the permission-instruction data set until a user request to access the file is received;
• receiving a particular user request to access the file within the time period;
• in response to the particular user request within the time period, committing the pending permission constraint to the file at least in part by locating the file and modifying one or more permissions of the file.