CLIENT-ASSISTED FULFILLMENT OF A RESOURCE REQUEST
Techniques are described herein that are capable of providing client-assisted fulfillment of a resource request. For instance, the resource request initially may be directed to a machine that stores the resource (i.e., a resource machine). A resource access agent may redirect the resource request to a client device for purposes of fulfillment. For example, the resource access agent may intercept the resource request before the resource request reaches the resource machine and/or before the resource machine takes action with respect to the resource request. Such client-assisted fulfillment may (or may not) be provided in a single sign-on environment. A single sign-on environment is an environment in which multiple distinct software systems are accessible to a user based on a single authentication of the user.
1 . A method comprising:
receiving a request for a resource to be accessed on behalf of a client device from a first machine;
informing the client device of an identity of the resource;
receiving data of the resource from the client device in response to the client device receiving the data from a second machine that stores the resource; and
providing the data to fulfill the request in response to receiving the data from the client device.
2 . The method of claim 1 , wherein receiving the data comprises:
receiving the data from the client device further in response to validation of the request; and
wherein providing the data comprises:
providing the data to fulfill the request based on the validation.
3 . The method of claim 1 , wherein receiving the request comprises:
receiving the request that identifies the first machine.
4 . The method of claim 1 , further comprising:
determining that performance of a management action is initiated with respect to the first machine;
wherein receiving the request comprises:
receiving the request based on initiation of the performance of the management action.
5 . The method of claim 1 , further comprising:
determining that a connection of the client device to a network that communicatively couples the client device to the first machine is initiated;
wherein informing the client device of the identity of the resource comprises:
delaying the informing of the client device of the identity of the resource until initiation of the connection of the client device to the network.
6 . The method of claim 1 , wherein receiving the request comprises:
intercepting the request using an application programming interface hook.
7 . A system comprising:
processing logic configured to process a request for a resource to be accessed on behalf of a client device to determine whether the request is to be fulfilled, the request received from a first machine;
informing logic configured to inform the client device of an identity of the resource in response to a determination that the request is to be fulfilled; and
provision logic configured to provide data of the resource, which is received from the client device in response to the client device receiving the data from a second machine that stores the resource, to fulfill the request.
8 . The system of claim 7 , wherein the data is received from the client device further in response to validation of the request; and
wherein the provision logic is configured to provide the data to fulfill the request based on the validation.
9 . The system of claim 7 , wherein the request identifies the first machine.
10 . The system of claim 7 , further comprising:
determination logic configured to determine whether performance of a management action is initiated with respect to the first machine;
wherein the request is based on initiation of the performance of the management action.
11 . The system of claim 7 , further comprising:
determination logic configured to determine whether a connection of the client device to a network that is configured to communicatively couple the client device to the first machine is initiated;
wherein the informing logic is configured to delay informing the client device of the identity of the resource until initiation of the connection of the client device to the network occurs.
12 . The system of claim 7 , wherein the request is directed to a file system;
wherein the system further comprises:
a file system filter configured to intercept the request and to provide the data to fulfill the request.
13 . The system of claim 7 , further comprising:
a virtual machine that is deployed on the first machine;
wherein the virtual machine is configured to receive the request and to provide the data to the first machine to fulfill the request.
14 . A client device comprising:
processing logic configured to process a request, the request identifying a resource to be accessed on behalf of the client device by a first machine;
query provision logic configured to provide a query to a second machine that stores the resource, the query requesting access to the resource; and
data provision logic configured to receive data of the resource from the second machine in response to the query, the data provision logic further configured to provide the data to the first machine based on the request in response to receipt of the data.
15 . The client device of claim 14 , wherein the request further identifies the first machine.
16 . The client device of claim 14 , further comprising:
validation logic configured to validate the request;
wherein the data provision logic is configured to provide the data to the first machine based on validation of the request in response to receipt of the data.
17 . The client device of claim 16 , wherein the request further identifies the first machine;
wherein the validation logic is configured to review an access policy that is associated with the first machine to determine whether the access policy indicates that the first machine is not to receive access to the resource; and
wherein the data provision logic is configured to provide the data to the first machine further based on the access policy not indicating that the first machine is not to receive access to the resource.
18 . The client device of claim 17 , further comprising:
a user interface;
wherein the query provision logic is further configured to provide an inquiry via the user interface based on receipt of the request, the inquiry configured to solicit identification of at least one access policy to be applied with respect to the request;
wherein the validation logic is configured to receive identification of the access policy that is associated with the first machine via the user interface in response to the inquiry; and
wherein the validation logic is configured to review the access policy in response to receipt of the identification of the access policy.
19 . The client device of claim 14 , further comprising:
management logic configured to initiate performance of a management action with respect to the first machine;
wherein the request is based on initiation of the performance of the management action.
20 . The client device of claim 14 , further comprising:
initiation logic configured to initiate a connection between the client device and a network that is configured to communicatively couple the client device to the first machine;
wherein initiation of the connection between the client device and the network triggers the request.