Hierarchical Cloud-Based Resource Identifier and Access Management System for Distributed Multi-tenant Data

A system comprising:

• one or more processors;
• and
• a memory storing instructions that, when executed by the one or more processors, cause the system to:
• receive an authorization request, the authorization request including a resource identifier including one or more path segments, the resource identifier uniquely identifying a set of resources in a microservice environment, the microservice environment including a plurality of microservices;
• process the resource identifier uniquely identifying the set of resources in the microservice environment to determine a complete set of effective permissions by:
• (a) determining whether a set of permissions is associated with the resource identifier is present in a resource access manager;
• (b) recording the set of permissions when the resource identifier is associated with the set of permissions in the resource access manager;
• (c) decatenating an end path segment from the resource identifier based on a delimiter;
• and
• (d) determining whether no path segments remain in the resource identifier after decatenation of the end path segment,
• wherein (a), (b), (c) and (d) are repeated until it is determined that no path segments remain in the resource identifier;
• and
• responsive to determining no path segments remain in the resource identifier, return an aggregated set of recorded permissions representing the complete set of effective permissions.