Patent ID: 9742838
Date: 2017-08-22
CPC Classifications: G06F,H04L

Claim:
1. A method, comprising: identifying an operation requested to be performed by a multi-tenant platform-as-a-Service (PaaS) system, wherein the multi-tenant PaaS system comprises nodes to execute applications owned by a plurality of users, wherein functionality of the applications is provided by instances of cartridges deployed on the nodes, and wherein the cartridges each comprise at least one of configuration templates, scripts, or dependencies that are used to execute at least one of the applications on at least one of the nodes of the multi-tenant PaaS system, and wherein the operations comprise at least one of a gear operation, a cartridge operation, or an application operation; identifying an instance of a cartridge of the cartridges, the identified instance of the cartridge associated with the identified operation; determining, by a processing device of the multi-tenant PaaS system, access contexts for the operation with respect to the identified instance of the cartridge, the access contexts comprising a user or component that is attempting to access a file of the instance of the cartridge for the identified operation, wherein the user comprises at least one of a cartridge author of the cartridge or an application developer of one of the applications utilizing the cartridge, and wherein the component comprises a broker component of the multi-tenant PaaS system; referencing, by the processing device, a locked files manifest of the cartridge with the determined access contexts, the locked files manifest identifying: applying access permissions to the instance of the cartridge according to the determined access contexts and the locked files manifest.