Patent ID: 9396343
Filing Date: 2016-07-19
CPC Classification: G06F,H04L

Claim Text:
1. A method, comprising: defining, by a storage system for a plurality of entities, a policy access control list (PACL) comprising one or more access rules, each of the access rules comprising one or more user conditions and one or more entity conditions, wherein the plurality of entities comprise a context entity and a content entity; receiving, from a user, a request to access a given entity; identifying, by the storage system, one or more user attributes associated with the user; identifying one or more entity attributes associated with the given entity; for each of the one or more access rules, applying, the one or more user conditions to the one or more user attributes, and applying the one or more entity conditions to the one or more entity attributes; granting, to the user, access to the given content entity upon determining that a minimum threshold of the one or more user conditions and the one or more entity conditions are met; and providing, by the context entity, context to multiple content entities, and wherein the entity comprises entities comprise a given content entity, and wherein the entity attributes comprise content entity attributes, wherein each of the entity attributes is selected from a list comprising a context entity attribute and a content entity attribute, and wherein the PACL comprises a context PACL, and wherein each of the user conditions comprises a context user condition, and wherein each of the entity conditions comprises a context entity condition, wherein the PACL comprises a content PACL, and wherein each of the user conditions comprises an additional content user condition, and wherein each of the entity conditions comprises a content entity condition, wherein granting access to the given entity comprises migrating the given content entity from a first storage system to a second storage system, and wherein the PACL comprises one or more entity migration conditions and one or more entity migration rules, and wherein migrating the given entity comprises using the one or more entity migration conditions and the one or more entity migration rules.