Patent ID: 8965925
Filing Date: 2015-02-24
Classification: G06F,Y10S

Abstract:
1. A method comprising: mapping, by a computer of an access control system, each of a plurality of user identifiers associated with users to a corresponding set of classification tags each indicating a classification for an object in a file system; obtaining, by the computer of the access control system, a first set of classification tags based on the mapping and a user identifier associated with a user requesting access to the file system in a network having a plurality of machines running networked file systems; obtaining, by the computer of the access control system and for each of one or more objects in the file system, a second set of classification tags based on an object identifier corresponding to the each of the one or more objects in the file system, wherein each of the classification tags of the second set indicates a classification for that object; comparing, by the computer of the access control system, each of the classification tags of the first set with each of the classification tags of the second set for each of the one or more objects; and controlling, by the computer of the access control system, performance of operations on the one or more objects in the file system based upon one or more classification tags from the second set for the one or more objects matching one or more classification tags from the first set.