# US 2014/0156960 A1 · Managing permissions for logical volume managers > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0156960 A1 - Document ID: US20140156960A1 - Status: Published application - Kind: A1 - Application number: 13/691,198 - Filed: 2012-11-30 - Published: 2014-06-05 - Earliest claimed: 2012-11-30 - Assignees: Red Hat Israel, Ltd. - Applicants: Red Hat Israel, Ltd. - Inventors: Federico Simoncelli - Web page: https://patentgrep.com/patent/US20140156960A1 ## CPC - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 12/1458: {by checking the subject access rights} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - G06F 2221/2145: Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A logical volume manager (LVM) may manage a plurality of logical volumes and a plurality of drives in a logical data storage using metadata stored on plurality of drives. The metadata may include a first set of permissions for a storage location in one of the logical volumes. The LVM may analyze permission data associated with the storage location and may override metadata (e.g., the permissions in the metadata) with a second set of permissions obtained from the permission data. The LVM may use the second set of permission data to access the storage location. ## Claims ### Claim 1 A method comprising: receiving a request to access a storage location in a logical volume managed by a logical volume manager executable by a processing device; analyzing global metadata associated with the storage location; determining, by the logical volume manager, a first set of permissions for the storage location, based on the global metadata; analyzing local permission data associated with the storage location; determining a second set of permissions for the storage location based on the local permission data, wherein the first set of permissions is different from the second set of permissions; and overriding the global metadata by using the second set of permissions to grant access to the storage location. ### Claim 2 (depends on 1) The method of claim 1, wherein the request to access the storage location is received from one or more of a virtual machine or a computing device that uses the logical volume. ### Claim 3 (depends on 1) The method of claim 1, further comprising: receiving second a request to access a second storage location in the logical volume; analyzing a second global metadata associated with the second storage location; determining, by the logical volume manager, a third set of permissions for the second storage location, based on the second global metadata; analyzing second local permission data associated with the second storage location; determining a fourth set of permissions for the second storage location based on the second local permission data, wherein the third set of permissions is different from the fourth set of permissions; and overriding the second global metadata by using the fourth set of permissions to grant access to the second storage location. ### Claim 4 (depends on 1) The method of claim 1, further comprising: updating the local permission data; receiving a second request to access the storage location; determining a third set of permissions for the storage location based on the updated local permission data; and overriding the global metadata by using the third set of permissions to grant access to the storage location. ### Claim 5 (depends on 1) The method of claim 1, wherein the storage location comprises one or more of a file, a directory, a volume, a volume group, a partition, or a set of data blocks. ### Claim 6 (depends on 1) The method of claim 1, further comprising: generating the local permission data. ### Claim 7 (depends on 6) The method of claim 6, wherein the local permission data is generated based on an identifier for one or more of a virtual machine, a computing device, or a user. ### Claim 8 (depends on 6) The method of claim 6, wherein the local permission data is generated based on user input, wherein the user input indicates one or more of the storage location, the second set of permissions, or an identifier. ### Claim 9 A system comprising: a memory to store data; a processing device coupled to the memory, the processing device to: receive a request to access a storage location in a logical volume managed by a logical volume manager executable by the processing device; analyze global metadata associated with the storage location; determine, by the logical volume manager, a first set of permissions for the storage location, based on the global metadata; analyze local permission data associated with the storage location; determine a second set of permissions for the storage location based on the local permission data, wherein the first set of permissions is different from the second set of permissions; and override the global metadata by using the second set of permissions to grant access to the storage location. ### Claim 10 (depends on 9) The system of claim 9, wherein the processing device is further to: receive second a request to access a second storage location in the logical volume; analyze a second global metadata associated with the second storage location; determine, by the logical volume manager, a third set of permissions for the second storage location, based on the second global metadata; analyze second local permission data associated with the second storage location; determine a fourth set of permissions for the second storage location based on the second local permission data, wherein the third set of permissions is different from the fourth set of permissions; and override the second global metadata by using the fourth set of permissions to grant access to the second storage location. ### Claim 11 (depends on 9) The system of claim 9, wherein the processing device is further to: updating the local permission data; receiving a second request to access the storage location; determining a third set of permissions for the storage location based on the updated local permission data; and overriding the global metadata by using the third set of permissions to grant access to the storage location. ### Claim 12 (depends on 9) The system of claim 9, wherein the processing device is further to: generate the local permission data. ### Claim 13 (depends on 12) The system of claim 12, wherein the local permission data is generated based on an identifier for one or more of a virtual machine, a computing device, or a user. ### Claim 14 (depends on 12) The system of claim 12, wherein the local permission data is generated based on user input, wherein the user input indicates one or more of the storage location, the second set of permissions, or an identifier. ### Claim 15 A non-transitory computer readable storage medium having instructions that, when executed by a processing device, cause the processing device to perform operations comprising: receiving a request to access a storage location in a logical volume managed by a logical volume manager; analyzing global metadata associated with the storage location; determining, by the logical volume manager, a first set of permissions for the storage location, based on the global metadata; analyzing local permission data associated with the storage location; determining a second set of permissions for the storage location based on the local permission data, wherein the first set of permissions is different from the second set of permissions; and overriding the global metadata by using the second set of permissions to grant access to the storage location. ### Claim 16 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein the operations further comprise: receiving second a request to access a second storage location in the logical volume; analyzing a second global metadata associated with the second storage location; determining, by the logical volume manager, a third set of permissions for the second storage location, based on the second global metadata; analyzing second local permission data associated with the second storage location; determining a fourth set of permissions for the second storage location based on the second local permission data, wherein the third set of permissions is different from the fourth set of permissions; and overriding the second global metadata by using the fourth set of permissions to grant access to the second storage location. ### Claim 17 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein the operations further comprise: updating the local permission data; receiving a second request to access the storage location; determining a third set of permissions for the storage location based on the updated local permission data; and overriding the global metadata by using the third set of permissions to grant access to the storage location. ### Claim 18 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein the operations further comprise: generating the local permission data. ### Claim 19 (depends on 18) The non-transitory computer readable storage medium of claim 18, wherein the local permission data is generated based on an identifier for one or more of a virtual machine, a computing device, or a user. ### Claim 20 (depends on 18) The non-transitory computer readable storage medium of claim 18, wherein the local permission data is generated based on user input, wherein the user input indicates one or more of the storage location, the second set of permissions, or an identifier.