Enforcing granular access control policy
AssigneePalantir Technologies Inc.
InventorsPeter Wilczynski, Arseny Bogomolov, Alexander Mark, Teofana Hadzhiganeva, Kevin Ng, Nathaniel Klein, Sharon Hao
Life of this patent
Estimating the term…
Abstract
An example method of enforcing granular access policy for embedded artifacts comprises: detecting an association of an embedded artifact with a resource container; associating the embedded artifact with at least a subset of an access control policy associated with the resource container; and responsive to receiving an access request to access the embedded artifact, applying the access control policy associated with the resource container for determining whether the access request is grantable.
Claims20
A method for providing granular access control, comprising:
- receiving an association of an embedded artifact with a resource container;
- associating the embedded artifact with a subset of an access control policy of the resource container, wherein the subset of the access control policy of the resource container includes an intersection of the access control policy of the resource container and an initial access control policy of the embedded artifact;
- receiving an access request to access the embedded artifact;
- applying the subset of the access control policy to determine whether the access request is grantable;
- and
- in response to determining that the access request is grantable, granting the access request;
- wherein the method is performed using one or more processors.
A system for providing granular access control, comprising:
- one or more memories comprising instructions stored thereon;
- and
- one or more processors configured to execute the instructions and perform operations comprising:
- receiving an association of an embedded artifact with a resource container;
- associating the embedded artifact with a subset of an access control policy of the resource container, wherein the subset of the access control policy of the resource container includes an intersection of the access control policy of the resource container and an initial access control policy of the embedded artifact;
- receiving an access request to access the embedded artifact;
- applying the subset of the access control policy to determine whether the access request is grantable;
- and
- in response to determining that the access request is grantable, granting the access request.
A method for providing granular access control, comprising:
- receiving an association of an embedded artifact with a resource container;
- associating the embedded artifact with a subset of an access control policy of the resource container, wherein the subset of the access control policy of the resource container includes an intersection of the access control policy of the resource container and an initial access control policy of the embedded artifact, the initial access control policy retrieved based on an access control policy pointer in metadata of the embedded artifact;
- receiving an access request to access the embedded artifact;
- applying the subset of the access control policy to determine whether the access request is grantable;
- and
- in response to determining that the access request is grantable, granting the access request;
- wherein the method is performed using one or more processors.
Dependencies are inferred from the claim text.