Patent ID: 8732220

Claim:
A computer-implemented method of controlling access to all files of a file system, comprising using a processor of a computer to perform: responsive to invocation of each of a plurality of applications for execution by any particular one of a plurality of users of a file system, automatically creating, by a file system access layer that controls all access to all files of the file system, a user-specific and application-specific file system view for each of the invoked applications; automatically adding to the file system view, by the file system access layer, a copy of all files created by or changed by each of the invoked applications as the each application executes on behalf of the particular user, wherein for each of the invoked applications: all changes made by the invoked application to each added file, as the invoked application executes on behalf of the particular user, are made only to the copy added to the file system view; the automatically creating and the automatically adding are configured to prohibit the user from adding files to, or removing files from, the file system view for the invoked application; and the automatically creating and the automatically adding thereby isolate the files in the file system view created for the invoked application as the invoked application executes on behalf of the particular user from access by any of the other users and from access by any other application executed by the particular user; and upon completion of each of the executed applications invoked by the particular user, persisting the created file system view created therefor, such that the automatically-added copy of each of the changed or created files is available for a next execution of the completed application by the particular user through use of the persisted file system view.