Item sharing based on information boundary and access control list settings

A method comprising:

• maintaining an access control list, wherein the access control list does not include the identity of a downstream recipient;
• maintaining an information boundary comprising a rule that allows access to a cloud-based item if a user has an email address with a specified domain;
• receiving, from the downstream recipient, a request to access the cloud-based item via a link sent to the downstream recipient;
• adding the identity of the downstream recipient to the access control list;
• and
• granting the downstream recipient with access to the cloud-based item.

A system comprising:

• at least one processor;
• and
• a memory operatively connected with the at least one processor, wherein the memory stores computer-executable instructions that, when executed by the at least one processor, causes the at least one processor to execute a method that comprises:
• maintaining an access control list, wherein the access control list does not include the identity of a downstream recipient;
• maintaining an information boundary comprising a rule that allows access to a cloud-based item if a user has an email address associated with a specified group in an organization;
• receiving, from the downstream recipient, a request to access the cloud-based item via a link sent to the downstream recipient;
• adding the identity of the downstream recipient to the access control list;
• and
• granting the downstream recipient with access to the cloud-based item.

A computer-readable storage device storing computer-executable instructions that, when executed by at least one processor, causes the at least one processor to execute a method comprising:

• maintaining an access control list, wherein the access control list does not include the identity of a downstream recipient;
• maintaining an information boundary comprising a rule that allows access to a cloud-based item if a user has an email address with a specified domain;
• receiving, from the downstream recipient, a request to access the cloud-based item via a link sent to the downstream recipient;
• adding the identity of the downstream recipient to the access control list;
• and
• granting the downstream recipient with access to the cloud-based item.