Patent ID: 9641536
Date: 2017-05-02
CPC Classifications: G06F,H04L

Claim:
1. A method, comprising: defining, by a storage system for a plurality of entities, a policy access control list (PACL) comprising one or more access rules, each of the access rules comprising one or more user conditions and one or more entity conditions, wherein the plurality of entities comprise a context entity and a content entity; receiving, from a user, a request to access a given entity; identifying, by the storage system, one or more user attributes associated with the user; identifying one or more entity attributes associated with the given entity; for each of the one or more access rules, applying, the one or more user conditions to the one or more user attributes, and applying the one or more entity conditions to the one or more entity attributes; granting, to the user, access to the given content entity upon determining that a minimum threshold of the one or more user conditions and the one or more entity conditions are met; and providing, by the context entity, context to multiple content entities, wherein the entity attributes comprise content entity attributes for the content entity, wherein the PACL comprises a content PACL for the content entity, and wherein each of the user conditions comprises an additional content user condition, wherein each of the entity conditions comprises a content entity condition, wherein granting access to the given entity comprises converting the given entity from a first format to a second format, wherein the PACL comprises one or more entity conversion rules and one or more entity conversion conditions, and wherein converting the given entity comprises using the one more entity conversion rules and the one or more entity conversion conditions.