Revocable object access

A method comprising:

• embedding a uniform resource locator (URL) that references an object into a document, the URL including a token and the object being separate from the document;
• receiving a request for the document;
• generating, in response to the request for the document in which the URL is embedded and independent of user input, a request to ascertain whether access to the object that is referenced by the URL is allowed, the request to ascertain whether access to the object is allowed including the URL and the token included in the URL, and the request to ascertain whether access to the object is allowed being separate from the request for the document;
• and
• allowing the object referenced by the URL and separate from the URL to be automatically retrieved in response to the request for the document and along with the document based on whether an access control list indicates that the token is usable to grant permission to access the object.

One or more computer readable memories storing instructions that are executable by one or more processors to cause the one or more processors to perform operations comprising:

• generating a uniform resource locator (URL) for an object, the URL being separate from the object and including a token that is usable to control access to the object;
• embedding the URL into a document;
• receiving a request for the document;
• generating, in response to the request for the document in which the URL is embedded and independent of user input, a request to ascertain whether access to the object that is referenced by the URL is allowed, the request to ascertain whether access to the object is allowed including the URL and the token included in the URL, and the request to ascertain whether access to the object is allowed being separate from the request for the document;
• and
• determining whether access to the object is permitted based on one or more token permission settings for the token in an access control list.