Patent ID: 9251363
Filing Date: 2016-02-02
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method for controlling access to a file system having data elements, comprising the steps of: maintaining a record of respective actual accesses by users of said file system to said data elements, said users being organized in a user hierarchy; defining a proposed removal of a set of said users from a superset of said users, wherein members of said superset have common access privileges to a portion of said data elements, and wherein following an implementation of said proposed simulated removal, members of said set retain respective proposed residual access permissions to said data elements; automatically ascertaining, prior to said implementation of said proposed removal, whether at least one of said respective actual accesses are disallowed to non-members of said set by said respective proposed residual access permissions, said non-members of said set having actual access profiles which are similar to the actual access profiles of said members of said set, said members of said set being nondescendants of said non-members of said set in said user hierarchy; and generating an error indication, responsively to said step of automatically ascertaining.