Patent ID: 8478798

Claim:
A computer-implemented method for providing filesystem services to a web application on a computing system, comprising: allocating a filesystem storage space on one or more storage devices for use by the web application; creating, for the web application, a private filesystem comprising a private root directory within the filesystem storage space; providing a programmatic interface on the computing system for use by code of the web application and through which the web application accesses the private filesystem; and managing filesystem access according to filesystem security criteria, wherein the filesystem security criteria include web application-specific criteria that allow the web application to access the private filesystem through the private root directory and do not allow the web application to access a host filesystem associated with the one or more storage devices, and wherein managing the filesystem access according to the filesystem security criteria includes: allowing access from a first module used by the web application to a file in a first region within the private filesystem and preventing access from the first module to a file in any other region within the private filesystem, and allowing access from a different, second module used by the web application to a file in a different, second region within the private filesystem and preventing access from the second module to a file in any other region within the private filesystem.