Selective device access control

A system for selective device access control in a data storage system, comprising:

• a memory, including:
• a management module operational on the data storage system, wherein the management module is adapted for:
• initializing a plurality of access groups associated with logical devices used to access the data storage system, each of the plurality of access groups corresponding to a range of the logical devices;
• pursuant to a mount of a logical volume of the data storage system, providing a management class construct name associated with a mount request for the logical volume;
• determining whether the logical volume has been previously bound;
• reading a management class definition in a management class definition database, to determine if a match is found between the management class construct name associated with the mount request for the logical volume and the management class definition, if the logical volume has not been previously bound;
• and
• binding an access group name of one of the plurality of access groups to at least one of a metadata of the logical volume at a volume creation and a volume header of the logical volume, wherein the logical volume, once bound to the access group name, is granted access by those logical devices in a range of the logical devices corresponding to the one of the plurality of access groups.

A computer program product for selective device access control in a data storage system, the computer program product comprising a non-transitory computer-readable storage medium having computer-readable program code portions stored therein for:

• initializing a plurality of access groups associated with logical devices used to access the data storage system, each of the plurality of access groups corresponding to a range of the logical devices;
• pursuant to a mount of a logical volume of the data storage system, providing a management class construct name associated with a mount request for the logical volume;
• determining whether the logical volume has been previously bound;
• reading a management class definition in a management class definition database, to determine if a match is found between the management class construct name associated with the mount request for the logical volume and the management class definition, if the logical volume has not been previously bound;
• and
• binding an access group name of one of the plurality of access groups to at least one of a metadata of the logical volume at a volume creation and a volume header of the logical volume, wherein the logical volume, once bound to the access group name, is granted access by those logical devices in a range of the logical devices corresponding to the one of the plurality of access groups.