Patent ID: 6993581

Claim:
In a computer system including a host computer and a storage system that is coupled to the host computer and that stores data accessed by the host computer, the host computer comprising an application layer including at least one application program, the computer system including a plurality of storage resources that are visible to the application layer, the computer system having an access facility that grants access to the plurality of storage resources and requires a privilege level for the at least one application program to be granted access to one of the plurality of storage resources, a method of managing access to the plurality of storage resources, the method comprising acts of: (A) intercepting requests to access one of the plurality of storage resources from the application layer, each request being issued by a requester from among the at least one application program; and (B) modifying at least one of the requests intercepted in the act (A) in a manner that will impact the access facility in determining whether the requester satisfies the privilege level to be granted access to the one of the plurality of storage resources.