Content-based file system security
View Patent ↗A method for enforcing computer-based file system security, the method comprising generating a content-based file system from files in a physical file system, and enforcing a user access right to any aspect of the content-based file system, where the user access right derives from a user access right to a file in the physical file system.
1. A method for enforcing computer-based file system security, the method comprising:
receiving a request associated with a user to access a directory in a file system;
determining if said directory includes at least one file for which said user has a read right; and
providing said user with access to said directory only if at least one file is found in said directory for which said user has a read right.
2. A method according to claim 1 and further comprising generating said directory as a virtual directory in a content-based file system.
3. A method according to claim 2 wherein said generating step comprises deriving said virtual directory from said file in a physical file system.
4. A method according to claim 1 wherein said providing step comprises providing said access where said user has permission to read said file in a physical file system.
5. A method according to claim 1 wherein said providing step comprises providing said access where said directory or a descendant subdirectory thereof is derived from said file.