Patent ID: 8555403

Claim:
A method of controlling access to managed content, comprising: reviewing a privileged code access control list (ACL) entry associated with a privileged portion of application code; reviewing a user ACL entry associated with a user; receiving from a privileged portion of application code an indication that a content management session associated with a user is to be promoted from a first level of access associated with the user ACL entry to a second level of access associated with the privileged code ACL entry based at least in part on the user's particular context; wherein receiving from a privileged portion of application code an indication that a session associated with a user is to be promoted from a first level of access associated with the user ACL entry to a second level of access associated with the privileged portion of application code includes receiving from the privileged code ACL entry an indication that the user is to be considered with respect to the session a member of a dynamic group associated with the privileged portion of code; and using a processor to allow a request associated with the content management session to perform with respect to a content item an operation that requires the second level of access through an application associated with the privileged portion of application code.