Patent ID: 8601549
Filing Date: 2013-12-03
Classification: G06F

Abstract:
1. A method for controlling access to a resource, the method comprising: determining one or more request attributes associated with a request for access to a resource; accessing an access control list associated with the resource, wherein the access control list comprises one or more access control attributes associated with the resource, wherein the request for access to the resource comprises an indication of a uniform resource identifier uniquely identifying the resource and accessing the access control list comprises using the uniform resource identifier to access the access control list associated with the resource; determining, by a processor, a permission defining one or more access abilities for the resource at least in part by comparing request attributes to the access control attributes and, for any access control attribute corresponding to a request attribute, including an ability associated with the corresponding access control attribute in the permission, wherein determining the permission comprises determining at least one permission mask and including an ability associated with the corresponding access control attribute in the permission comprises performing a logical OR operation on the ability associated with the corresponding access control attribute and one of the at least one permission mask, thereby accumulating the ability associated with the corresponding access control attribute in the permission, wherein determining at least one permission mask further comprises determining a first permission mask used for accumulation of positive abilities and a second permission mask used for accumulation of negative abilities, and wherein determining the permission further comprises performing a logical AND operation on the first permission mask and the second permission mask; and determining whether to grant the request based at least in part on the determined permission.