System and method for managing access to computer resources

A system for managing access to computer resources, the system comprising:

• a hardware processor configured to:
• receive a request, from a client process, for performing an operation on a computer resource, including receiving the request by a kernel of an operating system for creating a separate process to perform the requested operation on the computer resource;
• obtain, by a resource manager, metadata of the computer resource and data relating to operations requested by other client processes on the computer resource;
• determine, based on the metadata, whether the requested operation alters the metadata and violates an isolation condition of the computer resource;
• determine, based on the data relating to the operations requested by the other client processes, whether the requested operation distorts the operations requested by the other client processes;
• and
• perform the requested operation on the resource upon detecting that the requested operation does not:
• alter the metadata, violate the isolation condition of the computer resource, and distort the operations requested by the other client processes.

A non-transitory computer-readable storage medium having a computer program product stored thereon, the computer program product comprising computer-executable instructions for managing access to computer resources, the instructions configured for:

• receiving a request, from a client process, for performing an operation on a computer resource, including receiving the request by a kernel of an operating system for creating a separate process to perform the requested operation on the computer resource;
• obtaining, by a resource manager, metadata of the computer resource and data relating to operations requested by other client processes on the computer resource;
• determining, based on the metadata, whether the requested operation alters the metadata and violates an isolation condition of the computer resource;
• determining, based on the data relating to the operations requested by the other client processes, whether the requested operation distorts the operations requested by the other client processes;
• and
• performing the requested operation on the resource upon detecting that the requested operation does not:
• alter the metadata, violate the isolation condition of the computer resource, and distort the operations requested by the other client processes.