Loading patent…
AssigneeMicrosoft Corporation
InventorsDaniel S. Glasser, Ann Elizabeth McCurdy, Robert M. Price
Estimating the term…
A unified and straightforward approach to managing file and other resource security in a networked computing environment is disclosed. The invention can be implemented in a multi-user computer network that includes a client computer, a server computer that controls a resource sharable among users of the network, such as a shared file folder or directory, and a communications pathway between the client computer and the server computer. The resource is organized as a hierarchy of elements with a root element at the top of the hierarchy and additional elements below the root element. According to the invention, a request is received to change a protection, such as an access permission, of an element of the resource hierarchy (other than the root) with respect to a particular network user. If the element in question lacks an associated access control list, a nearest ancestor element of the hierarchy is located that has an associated access control list. The first (descendant) element inherits the access control list of the second (ancestor) element. This inheritance is done by generating a copy of the access control list of the second element and associating the generated copy with the first element. The requested change in protection is then incorporated into the generated copy that has been associated with the first element so as to establish an updated access control list for the first element. Further, the requested change can be propagated downwards in the hierarchy from the first element to its descendants having access control lists.
In a computer network having a plurality of users and comprising a server computer controlling a shareable resource organized as a hierarchy of elements, the hierarchy including a root element at a topmost point in the hierarchy and additional elements that are descendants of the root element in the hierarchy, a method of modifying attributes of the resource, the method comprising the computer-implemented steps of:
In a computer network having a plurality of users and comprising a server computer controlling a shareable resource and a user interface for controlling properties of the resource, the resource being organized as a hierarchy of elements, the hierarchy including a root element at a topmost point in the hierarchy and additional elements that are descendants of the root element in the hierarchy, a method of modifying properties of the resource, the method comprising the computer-implemented steps of:
In a computer network having a plurality of users and comprising a server computer controlling a shareable resource organized as a hierarchy of elements, the hierarchy including a root element at a topmost point in the hierarchy and additional elements that are descendants of the root element in the hierarchy, a method of modifying attributes of the resource, the method comprising the computer-implemented steps of:
In a computer network providing a shareable resource comprising components and having a first set of attributes for a first component of the resource, a method of modifying attributes of the resource, the method comprising the computer-implemented steps of:
A computer network system for use by a plurality of users, comprising:
An article of computer-readable media having contents that cause a computer network having a plurality of users and comprising a server computer controlling a resource sharaeble by users of the network, the resource being organized as a hierarchy of elements, the hierarchy including a root element at a topmost point in the hierarchy and additional elements that are descendants of the root element in the hierarchy, to modify attributes of the resource by performing the computer-implemented steps of:
In a computer network having a plurality of users and comprising a server computer controlling a shareable resource and a user interface for controlling attributes for the resource, the resource being organized as a hierarchy of elements, the hierarchy including a root element at a topmost point in the hierarchy and additional elements that are descendants of the root element in the hierarchy, a method of modifying attributes of the resource, the method comprising the computer-implemented steps of:
A computer-readable medium whose contents cause a computer network to modify attributes of a resource, the computer network having a plurality of users and comprising a server computer controlling a resource shareable by users of the network and a user interface for controlling attributes for the resource, the resource being organized as a hierarchy of elements, the hierarchy including a root element at a topmost point in the hierarchy and additional elements that are descendants of the root element in the hierarchy, by performing the steps of:
A method in a computer system for providing access control in a filesystem hierarchy, the filesystem hierarchy comprising a plurality of nodes arranged hierarchically such that each node may have one or more ancestor nodes and one or more descendent nodes, each node further capable of having an access control list identifying users that are permitted to access the node, the method comprising the steps of:
A method in a computer system for providing access control in a filesystem hierarchy, the filesystem hierarchy comprising a plurality of nodes arranged hierarchically such that each node may have one or more ancestor nodes and one or more descendent nodes, each node further capable of having associated with it an access control list identifying users that are permitted to access the node, the method comprising the steps of:
Dependencies are inferred from the claim text.