Patent ID: 8886672

Claim:
A method for providing access in a distributed filesystem, the method comprising: retrieving a user identification (ID) and a client ID of a requesting user, wherein the client ID corresponds with a client device; determining whether the client ID corresponds to at least one of a trusted client or a non-trusted client by comparing the client ID to a plurality of client IDs included in a list of clients that have been authenticated; obtaining extended access permissions of a filesystem object, wherein the extended access permissions include a T bit indicating whether the filesystem object was created on the trusted client, and an L bit indicating whether an owner of the filesystem object can access the filesystem object from the non-trusted client, wherein when the L bit is enabled, the owner is allowed access from the non-trusted client, and wherein when the L bit is disabled, the owner is not allowed access from the non-trusted client; and allowing access to the filesystem object based on the user ID, the client ID, and the extended access permissions of the filesystem object.