Synchronization of permissioned content in cloud-based environments

A system comprising:

• a repository storing content items;
• and
• a cloud-based server coupled to the repository and configured to provide multiple user accounts access to a content item from the repository, the cloud-based server being further configured to:
• receive instructions to assign a permission attribute to the content item that is accessible to the multiple user accounts;
• receive instructions to mark the content item for synchronization between the cloud-based server and client devices associated with the multiple user accounts;
• synchronize the content item by downloading the content item, along with the permission attribute, from the repository to a location on the client devices;
• receiving a notification of a change to a local copy of the content item from a client device associated with one of the multiple user accounts;
• determine whether the change to the local copy of the content item is permitted based on the permission attribute assigned to the content item;
• in response to determining that the change to the local copy of the content item is not permitted, transmitting a permission failed message to the client device,
• wherein the permission failed message causes the client device to restore the local copy of the content item to its most recent state;
• and
• in response to determining that the change to the local copy of the content item is permitted, transmitting a permission successful message to the client device,
• wherein the permission successful message causes the client device to upload the change to the local copy of the content item to the cloud-based server for synchronizing the change to the content item with the client devices associated with rest of the multiple user accounts.

A method comprising:

• receiving, by a cloud-based server, an instruction to assign a permission attribute to a content item in a cloud-based storage and collaboration platform hosted, at least in part, by the cloud-based server,
• wherein the content item is stored in a datastore coupled to the cloud-based server, and
• wherein the content item is marked for synchronization with multiple user accounts associated with multiple users of the cloud-based storage and collaboration platform;
• detecting, by the cloud-based server, an attempt by one user of the multiple users of the cloud-based storage and collaboration platform to take an action on the content item;
• performing, by the cloud-based server, a permission check to determine whether the action is permitted on the content item based, at least in part, on the permission attribute assigned to the content item;
• and
• allowing or preventing, by the cloud-based server, the user from performing the action on the content item based on a result from the permission check.

A machine-readable storage medium having instructions stored thereon, which when executed by one or more processors of a computer system, cause the computer system to:

• process a content item transmitted by a cloud-based server,
• wherein the content item is marked for synchronization between the cloud-based server and at the at least one computer system, and
• wherein the content item is associated with at least one permission attribute;
• detect a change to the content item on the computer system;
• prior to uploading the change to the content item to the cloud-based server, perform a permission check with the cloud-based server to determine whether the change to the content item is permitted based, at least in part, on the at least one permission attribute associated with the content item;
• process a result of the permission check transmitted by the cloud-based server, the result indicating that the change to the content item will be rejected by the cloud-based server during a synchronization procedure;
• and
• restore the content item when the change to the content item is rejected by the cloud-based server.