Patent ID: 7260718
Filing Date: 2007-08-21
Classification: G06F,Y10S

Abstract:
1. A method for controlling access to a computing system resource, being accessed through a symbolic link file, with an externally stored resource comprising the steps of: determining a system resource named in the symbolic link through which an access attempt is made; searching a protected objects database for entries protecting said system resource and generating a list of said entries; and generating an authorization decision for the access attempt based on security policies that govern all entries in the protected objects database that protect the system resource, the authorization decision being generated by retrieving a current entry from said generated database list; calling an access decision component of the externally stored resource to obtain an access decision for the access attempt based on the security policy that governs the current entry in the generated database list; determining whether the access decision component granted access; if the decision component granted access, determining whether more entries are in this database list; and updating a current entry in said database list when more entries are in the list and returning to said current entry retrieving step.