Patent ID: 8504653

Claim:
A computer-implemented method comprising: under control of one or more computer systems configured with executable instructions, receiving a data object from an originator; generating a content object associated with the data object, the content object comprising a permissions section that includes an intrinsic permission identifying accessibility of the data object associated with the content object, a share permission identifying actions that a user with shared access to the content object is authorized to perform to the content object, and a copy permission identifying actions that a user with a copy of the content object is authorized to perform to the copy of the content object, each of the intrinsic permission, the share permission, and the copy permission comprising one or more of an accessible permission identifying whether the user is allowed to access the content object, a content accessible permission identifying whether the user is allowed to access content of the content object, a content modifiable permission identifying whether user is allowed to modify the content of the content object, a metadata modifiable permission identifying whether the user is allowed to modify the metadata associated with the content object, a deletion allowed permission identifying whether the user is allowed to delete the content object, a search allowed permission identifying whether the user is allowed to perform search associated with the content object, or a content never expires permission identifying that the content of the content object does not expire; assigning a value to the intrinsic permission of the content object, the intrinsic permission identifying accessibility of the data object associated with the content object; denying modification of the value of the intrinsic permission of the content object by the originator; and denying modification of the value of the intrinsic permission of the content object by users other than the originator.