Patent ID: 11954220
Assignee: PURE STORAGE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 8:
9. An apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
assigning, to a container storage volume of a storage system, a volume-level access policy that indicates one or more allowable storage operations;
determining whether to allow access to the container storage volume based on the volume-level access policy and one or more attributes that comprise a type of storage operation of a request for the access;
receiving a request to modify the volume-level access policy to an updated volume-level access policy; and
denying the request responsive to the updated volume-level access policy being less restrictive than the volume-level access policy.