Patent ID: 9015797
Filing Date: 2015-04-21
Classification: G06F,H04L

Abstract:
1. A method for managing access to computer resources, the method comprising: receiving a request, from a client, for performing one or more operations on a computer resource, including: determining functions of a resource manager that are required to perform the requested one or more operations on the resource; obtaining, by the resource manager, metadata of the resource, security policies for the client to perform the requested one or more operations on the resource, and data about other operations requested by other clients on the resource; determining, based on the metadata, whether the requested one or more operations result in altering the metadata and violating an isolation condition of the resource by the requested one or more operations; determining, based on the security policies, whether the requested one or more operations result in violating rights of the client that requested the one or more operations on the resource; determining, based on the data about the other operations requested by the other clients, whether the one or more operations requested by the client result in distorting results of the other operations requested by the other clients; and performing the requested one or more operations on the resource when the requested one or more operations do not result in altering the metadata or violating the isolation of the resource by the requested one or more operations, do not result in violating the rights of the client, and do not result in distorting the results of the other operations requested by the other clients.