Efficient computation of aggregated data in containers supporting item level access control
AssigneeMicrosoft Corporation
InventorF. Soner Terek
Life of this patent
Estimating the term…
Loading patent…
AssigneeMicrosoft Corporation
InventorF. Soner Terek
Estimating the term…
A computer system data container such as a directory or data folder includes various items (e.g., e-mail messages) having item level security controls. In this invention, the computer system ignores files for which the viewer has no viewing rights when summary data about the data container is displayed on the viewer's monitor. For each item level security setting, a running total is kept of an aggregate property (e.g., count of, size of) of all the items in the directory or folder of that security setting. Changes to the running total occur as items are added or deleted, or edited if the aggregate property is the size of all items of that security setting. Regardless of what the aggregated data is, the computer system adds only the running totals for which the user has viewing rights when computing summary data. Thus, the user cannot infer anything about non-viewable items from the summary data.
In a computer system that includes data containers in which a plurality of items are stored for access and viewing by a plurality of different users, and wherein the various items stored in a given data container are restricted in terms of access by differing levels of security that may be set for each such item, a method of tracking summary data about the items stored in a container in a manner which permits only that summary data to be displayed to a given user that corresponds to the given user's security level, the method comprising steps for:
In a computer system that includes data containers in which a plurality of items are stored for access and viewing by a plurality of different users, and wherein the various items stored in a given data container are restricted in terms of access by differing levels of security that may be set for each such item, a computer program product for implementing a method of tracking summary data about the items stored in a container in a manner which permits only that summary data to be displayed to a given user that corresponds to the given user's security level, the computer program product comprising:
Dependencies are inferred from the claim text.