Secure computing system record access control

A computer-implemented method comprising:

• generating a record in a computing system, the record identifying a set of users associated with the record, and having an owner property that identifies a first user as an owner of the record;
• receiving a co-owner assignment request, from the first user, to assign a second user to the record as a co-owner;
• based on the co-owner assignment request, generating a co-owner property on the record that identifies the second user as a co-owner of the record;
• receiving a record modification request that requests a modification to the record, and includes a sender attribute that identifies the second user as a sender of the record modification request;
• based on a comparison of the co-owner property and the sender attribute, propagating the record modification request to the set of users, wherein propagating the record modification request comprises:
• for each respective user in the set of users, sending an email to the respective user, the email comprising the record modification request and having a protected email header that is generated by an email server associated with the first user and includes a unique identifier that identifies the first user as a sender of the email, wherein the protected email header is protected through control of the protected email header by the email server.

A computing system comprising:

• at least one processor;
• and
• memory storing instructions executable by the at least one processor, wherein the instructions, when executed, configure the computing system to provide:
• a record generation component configured to generate a record in a computing system, the record identifying a set of users associated with the record, and having an owner property that identifies a first user as an owner of the record;
• a co-owner assignment component configured to:
• receive a co-owner assignment request, from the first user;
• and
• based on the co-owner assignment request, identify a second user and store a co-owner property in association with the record that identifies the second user as a co-owner of the record;
• and
• a record security component configured to:
• receive a record modification request indicative of a modification to the record, the record modification request having a sender attribute that identifies the second user as a sender of the record modification request;
• and
• based on a comparison of the co-owner property and the sender attribute, propagate the record modification request to the set of users by sending, for each respective user of the set of users, an email to a respective computing system that is associated with the respective user, the email comprising a protected email header that is generated by an email server and stores a unique identifier that identifies the first user as a sender associated with the email, wherein the protected email header is protected through control of the protected email header by the email server;
• wherein the co-owner assignment component is configured to receive a request, from the first user, to remove the second user as a co-owner of the record and, in response, modify the co-owner property associated with the record.