Data loss prevention for an online content management platform

1. A method comprising:

obtaining a data loss prevention (DLP) policy, wherein the DLP policy comprises one or more rules, wherein each of the one or more rules comprises a condition and a restriction;

identifying, within a collection of content items stored on a content management system, a set of content items in violation of the one or more rules, wherein identifying the set of content items in violation of the one or more rules comprises accessing metadata associated with the collection of content items to identify the set of content items in violation of the one or more rules, wherein each violation comprises a first reference to a content item in violation of at least one of the one or more rules and a second reference to the at least one of the one or more rules violated;

updating content management permissions for the set of content items in violation of the one or more rules;

receiving an update to the one or more rules in the DLP policy;

based on the update to the one or more rules, identifying one or more content items associated with one or more content management permissions; and

updating, based on the update to the one or more rules, the one or more content management permissions associated with the one or more content items identified.

2. The method of claim 1 , further comprising:

based on the DLP policy, generating a log of DLP violations associated with the collection of content items stored on the content management system.

3. The method of claim 2 , wherein the updating of the content management permissions for the set of content items in violation of the one or more rules is based on the log of DLP violations.

4. The method of claim 2 , wherein the log of DLP violations includes the set of content items in violation of the one or more rules associated with the DLP policy.

5. The method of claim 1 , wherein obtaining the DLP policy comprises receiving, by the content management system, the DLP policy from a client device associated with a user account registered at the content management system.

6. The method of claim 1 , wherein identifying the set of content items in violation of the one or more rules comprises accessing the collection of content items from the content management system.

7. The method of claim 1 , wherein the metadata associated with the collection of content items comprises at least one of comments, author identifiers, editor identifiers, collaboration attributes, or collaboration text.

8. The method of claim 1 , wherein identifying the set of content items in violation of the one or more rules comprises:

scanning the collection of content items on the content management system; and

scanning the metadata associated with the collection of content items, wherein the set of content items in violation of the one or more rules is identified based at least partly on the scanned metadata.

9. The method of claim 1 , further comprising:

receiving an access request associated with a content item from the collection of content items; and

determining whether to accept or deny the access request based on at least one of the content management permissions associated with the content item.

10. A content management system comprising:

one or more processors; and

at least one non-transitory computer-readable medium storing instructions that, when executed by the one or more processors, cause the content management system to:

obtain a data loss prevention (DLP) policy, wherein the DLP policy comprises one or more rules, wherein each of the one or more rules comprises a condition and a restriction;

identify, within a collection of content items stored on the content management system, a set of content items in violation of the one or more rules, wherein identifying the set of content items in violation of the one or more rules comprises accessing metadata associated with the collection of content items to identify the set of content items in violation of the one or more rules, wherein each violation comprises a first reference to a content item in violation of at least one of the one or more rules and a second reference to the at least one of the one or more rules violated;

update content management permissions for the set of content items in violation of the one or more rules;

receive an update to the one or more rules in the DLP policy;

based on the update to the one or more rules, identifying one or more content items associated with one or more content management permissions; and

update, based on the update to the one or more rules, the one or more content management permissions associated with the one or more content items identified for updating.

11. The content management system of claim 10 , the at least one non-transitory computer-readable medium storing instructions that, when executed by the one or more processors, cause the content management system to:

generate, based on the DLP policy, a log of DLP violations associated with the collection of content items stored on the content management system.

12. The content management system of claim 11 , wherein the updating of the content management permissions for the set of content items in violation of the one or more rules is based on the log of DLP violations.

13. The content management system of claim 11 , wherein the log of DLP violations includes the set of content items in violation of the one or more rules associated with the DLP policy.

14. The content management system of claim 10 , wherein obtaining the DLP policy comprises receiving, by the content management system, the DLP policy from a client device associated with a user account registered at the content management system.

15. The content management system of claim 10 , wherein identifying the set of content items in violation of the one or more rules comprises accessing the collection of content items from the content management system.

16. The content management system of claim 10 , wherein the metadata associated with the collection of content items comprises at least one of comments, author identifiers, editor identifiers, collaboration attributes, or collaboration text.

17. The content management system of claim 10 , wherein identifying the set of content items in violation of the one or more rules comprises:

scanning the collection of content items on the content management system; and

scanning the metadata associated with the collection of content items, wherein the set of content items in violation of the one or more rules is identified based at least partly on the scanned metadata.

18. The content management system of claim 10 , the at least one non-transitory computer-readable medium storing instructions that, when executed by the one or more processors, cause the content management system to:

receive an access request associated with a content item from the collection of content items; and

determine whether to accept or deny the access request based on at least one of the content management permissions associated with the content item.

19. A non-transitory computer-readable medium comprising:

instructions that, when executed by one or more processors, cause the one or more processors to:

obtain a data loss prevention (DLP) policy, wherein the DLP policy comprises one or more rules, wherein each of the one or more rules comprises a condition and a restriction;

identify, within a collection of content items stored on a content management system, a set of content items in violation of the one or more rules, wherein identifying the set of content items in violation of the one or more rules comprises accessing metadata associated with the collection of content items to identify the set of content items in violation of the one or more rules, wherein each violation comprises a first reference to a content item in violation of at least one of the one or more rules and a second reference to the at least one of the one or more rules violated;

update content management permissions for the set of content items in violation of the one or more rules;

receive an update to the one or more rules in the DLP policy;

based on the update to the one or more rules, identifying one or more content items associated with one or more content management permissions; and

update, based on the update to the one or more rules, the one or more content management permissions associated with the one or more content items identified for updating.

20. The non-transitory computer-readable medium of claim 19 , further comprising instructions that, when executed by the one or more processors, cause the one or more processors to:

generate, based on the DLP policy, a log of DLP violations associated with the collection of content items stored on the content management system, the log of DLP violations including the set of content items in violation of the one or more rules associated with the DLP policy, wherein updating the content management permissions for the set of content items in violation of the one or more rules is based on the log of DLP violations.