Root-level application selective configuration
Systems and methods for root-level application selective configuration for managing performance of actions on files in a file system including an agent executed on a computing device. The agent can determine a plurality of files stored in a particular folder. The agent can receive a selection of a particular file of the plurality of files. The agent can determine whether to include an action for the particular file in a context menu based on a first policy determination. The agent can render the context menu comprising a plurality of menu entries. The plurality of menu entries can include an additional menu entry that corresponds to the action. The agent can determine whether to perform the action based on a second policy determination. The agent can cause the at least one action to be performed.
1 . A system comprising:
an agent; and
a computing device comprising a memory and a processor, the computing device being configured to execute the agent by the processor to:
determine a plurality of files stored in a particular folder;
receive a selection of a particular file of the plurality of files;
determine whether to include an action for the particular file in a context menu based on a first policy determination;
in response to determining to include the action for the particular file as selected, render the context menu comprising a plurality of menu entries, the plurality of menu entries comprising an additional menu entry that corresponds to the action;
upon selection of the additional menu entry, determine whether to perform the action based on a second policy determination; and
in response to determining to perform the action, cause the action to be performed on the particular file at a privilege level that is higher than or lower than that of a current user account.
2 . The system of claim 1 , wherein the computing device is further configured to execute the agent to:
perform the first policy determination at a first granularity; and
perform the second policy determination at a second granularity.
3 . The system of claim 1 , wherein the computing device is further configured to execute the agent to determine file metadata for the particular file by querying a policy server for the file metadata.
4 . The system of claim 1 , wherein the first policy determination is performed at a first level of validation and the second policy determination is performed at a second level of validation.
5 . A system comprising:
a computing device; and
an agent that, when executed by the computing device, causes the computing device to:
determine a plurality of files stored in a particular folder;
receive a selection of a particular file of the plurality of files;
determine whether to include an action for the particular file in a context menu based on at least one policy;
in response to determining to include the action for the particular file as selected, render the context menu comprising a plurality of menu entries, the plurality of menu entries comprising an additional menu entry that corresponds to the action;
upon selection of the additional menu entry, determine whether to perform the action based on the at least one policy; and
in response to determining to perform the action, cause the action to be performed on the particular file at a privilege level that is higher than or lower than that of a current user account.
6 . The system of claim 5 , wherein the agent further causes the computing device to receive an indication of whether the at least one policy allows the action for the particular file from a policy server, wherein determination of whether to include the action is based on the indication.
7 . The system of claim 5 , wherein the agent further causes the computing device to:
transmit a request to a policy server; and
receive the at least one policy as a policy file from the policy server.
8 . The system of claim 7 , wherein the request to the policy server comprises an identifier of a current user account and a hash of the particular file.
9 . The system of claim 5 , wherein the agent further causes the computing device to:
load the at least one policy from a policy server; and
store the at least one policy on a local storage device.
10 . The system of claim 5 , wherein the agent further causes the computing device to:
query a policy server for a first policy file of the at least one policy at a first granularity; and
query the policy server for a second policy file of the at least one policy at a second granularity.
11 . The system of claim 5 , wherein the determination whether to include the action is performed is performed at a first level of validation and the determination whether to perform the action is performed at a second level of validation.
12 . A method, comprising:
determining, via one of one or more computing devices, a plurality of files stored in a particular folder;
receiving, via one of the one or more computing devices, a selection of a particular file of the plurality of files;
determining, via one of the one or more computing devices, to include an action for the particular file in a context menu based on a first policy determination;
rendering, via one of the one or more computing devices, the context menu comprising a plurality of menu entries, the plurality of menu entries comprising an additional menu entry that corresponds to the action for the particular file that was selected receiving, via one of the one or more computing devices, a selection of the additional menu entry;
determining, via one of the one or more computing devices, to perform the action based on a second policy determination; and
causing, via one of the one or more computing devices, the action to be performed on the particular file at a privilege level that is higher than or lower than that of a current user account.
13 . The method of claim 12 , wherein determining to perform the action based on the second policy determination comprises authenticating a current user account.
14 . The method of claim 12 , wherein determining to perform the action based on the second policy determination comprises verifying a source of the files.
15 . The method of claim 12 , wherein the first policy determination occurs at a first granularity and the second policy determination occurs at a second granularity.
16 . The method of claim 12 , further comprising determining, for each of the plurality of files, a respective badge based on a third policy determination.
17 . The method of claim 16 , wherein the third policy determination is performed at a first level of validation, the first policy determination is performed at a second level of validation, and the second policy determination is performed at a third level of validation.
18 . The method of claim 12 , wherein the action is performed based on privileges of the agent.