Patent ID: 8214641

Claim:
A computer storage medium having computer-executable instructions, which when executed perform actions, comprising: receiving a request to access an object secured via a first security mechanism, the first security mechanism securing the object at least in part via security data, the security data including an entity identifier that indicates an entity associated with the object; determining that the request is formatted according to an object access protocol associated with a second security mechanism, the object access protocol comprises a file system protocol that includes file access information in the request, the file access information comprising a user identifier and a group identifier; attempting to map the user identifier and the group identifier of the request to one of a plurality of accounts of the first security mechanism, each account identifying access rights to stored objects; if the attempt to map is determined to be unsuccessful, determining whether unmapped entities are allowed; if unmapped entities are determined to be allowed, reading and decoding the security data, the security data further comprising a custom security identifier formatted using a format defined by the first security mechanism, the custom security identifier comprising a user identifier and a group identifier of an entity that created the object and unmapped access rights associated with the object; obtaining the unmapped access rights from the security data; determining whether the entity is granted access based on the obtained unmapped access rights; if unmapped entities are determined to not be allowed, determining whether anonymous access is allowed, if anonymous access is allowed, mapping the request to an anonymous account; reading and decoding the security data, the security data further comprising the custom security identifier formatted using the format defined by the first security mechanism, the custom security identifier comprising the user identifier and the group identifier of the entity that created the object and access rights associated with the object; obtaining access rights for the anonymous account from the security data; determining whether the entity is granted access based on the obtained access rights.