Patent ID: 9602517
Date: 2017-03-21
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: receiving, by a processing device, a request of a user to perform an operation with respect to a first resource, the request identifying the user, the first resource and the requested operation; in response to the request, determining, by the processing device and in view of a resource-based master data structure, a first resource-based permission data structure of a plurality of resource-based permission data structures, the first resource-based permission data structure associated with the first resource; accessing, by the processing device, the first resource-based permission data structure to identify a first resource entry associated with the user; upon determining that the first resource entry associated with the user does not indicate that the user has a permission to perform the requested operation with respect to the first resource, determining, by the processing device, a second resource-based permission data structure of the plurality of resource-based permission data structures, the second resource-based permission data structure associated with a second resource that is a parent of the first resource; accessing, by the processing device, the second resource-based permission data structure to identify a second resource entry associated with the user; and upon determining that the second resource entry associated with the user indicates that the user has a permission to perform the requested operation with respect to the second resource, allowing the user to perform the requested operation with respect to the first resource.