Integrating Security by Obscurity with Access Control Lists

A method implemented at least in part by a computer, the method comprising:

• receiving an indication that a user desires to share content with a set of one or more other users;
• updating a data structure that associates identifiers with access rights to the content;
• providing one or more links to the one or more users, at least one of the links including information that identifies the content;
• receiving the information in conjunction with a request to access the content;
• and
• accessing the data structure to determine whether a user associated with the information has access rights to the content.

In a computing environment, an apparatus, comprising:

• a store capable of storing identifiers and access rights, the identifiers identifying one or more users, each identifier being associated with at least one access right, the access rights indicating rights granted to users associated with each access right's associated identifier;
• a permissions component operable to determine whether a requester is to be granted access to content based at least in part on information received in conjunction with a request for the content, the information including a user identifier and a content identifier;
• and
• a page builder operable to create a page for display based at least in part on the content for which access is granted.