Document control

A system, comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory comprises program instructions executable by the processor to:
• bind, by a policy server, a policy to a document, wherein
• the policy comprises one or more document control rules that assign one or more access rights associated with the document and describe one or more limitations on individual access by authenticated clients to the document, and
• the document control rules are stored in a private portion of the policy;
• record, by the policy server, one or more document management rules in the policy, wherein
• the one or more document management rules describe one or more document management functions configured to be applied to the document by a different server, and
• the one or more document management rules are stored in a public portion of the policy;
• provide access, by the policy server, to the document control rules in the private portion of the policy, wherein said program instructions executable by the processor to provide access to the document control rules comprise program instructions executable by the processor to determine that a client requesting access to the document control rules is authenticated and has permission to access the private portion of the policy;
• and
• provide access, by the policy server, to the document management rules in the public portion of the policy, wherein access to the public portion does not require authentication or permission as is required for access to the private portion of the policy;
• and
• store, by the policy server, data describing one or more applications of the one or more document management rules by the different server in association with the document.

A non-transitory computer readable storage medium, comprising program instruction executable to implement:

• binding, by a policy server, a policy to a document, wherein
• the policy comprises one or more document control rules that assign one or more access rights associated with the document and describe one or more limitations on individual access by authenticated clients to the document, and
• the document control rules are stored in a private portion of the policy;
• recording, by the policy server, one or more document management rules in the policy, wherein
• the one or more document management rules describe one or more document management functions configured to be applied to the document by a different server, and
• the one or more document management rules are stored in a public portion of the policy;
• providing access, by the policy server, to the document control rules in the private portion of the policy, wherein said program instruction executable to implement providing access to the document control rules comprise program instruction executable to implement determining that a client requesting access to the document control rules is authenticated and has permission to access the private portion;
• and
• providing access, by the policy server, to the document management rules in the public portion of the policy, wherein access to the public portion does not require authentication or permission as is required for access to the private portion;
• and
• storing, by the policy server, data describing one or more applications of the one or more document management rules by the different server in association with the document.