Patent ID: 8370388

Claim:
A method of controlling access to managed content, comprising: receiving a request to access a content item by a user; determining using a processor whether access to the content item is limited to members of any required group associated with the content item based on whether an access control list associated with the content item includes a required group entry specifying a required group, wherein the access control list includes one or more other entries that are not required group entries, and wherein each of the other entries specifies a type of access granted; in the event that access to the content item is limited to members of any required group associated with the content item, determining access based on whether the user is a member of the required group and further based on the one or more other entries of the access control list, wherein any access granted to the user based on the one or more other entries but not based on any required group entries is denied in the event that the user is not a member of the required group, and wherein the user is denied any access in the event that the user is a member of the required group but is not granted any access based on the one or more other entries; and in the event that access to the content item is not limited to members of any required group, determining access based on the one or more other entries of the access control list.