Efficient retrieval and rendering of access-controlled computer resources
Particular aspects of this disclosure relate to computerized systems for generating and using improved data structures and functionality to efficiently render different multiple access-controlled resources (or properties of access-controlled resources) that are part of a concept. Often times, two or more resources of a concept or properties of a resource are subject to different access controls. This adds computing complexity as to whether or not a user is granted access to the entire concept or resource, a portion of the concept or resource, or none of the concept or resources and what exactly is surfaced back to the user when there are resources or properties the user does and does not have access to. Some embodiments accordingly render an efficient composite view of concepts or resources where some resources or properties are accessible by the requesting user, while other resources or properties are not accessible by the requesting user.
1. A computerized system comprising:
one or more processors; and
computer storage memory having computer-executable instructions stored thereon which, when executed by the one or more processors, implement a method comprising:
generating a first mapping that identifies a concept and a plurality of computer resources, the first mapping associating the concept the plurality of computer resources; wherein the concept corresponds to a class of information and the plurality of computer resources include information related to the concept;
generating a second mapping that is different from the first mapping and that associates access control lists (ACLs) with the plurality of computer resources associated with the concept, wherein an ACL associated with each computer resource of the plurality of computer resources indicates an access control level needed to access the computer resource;
receiving a query from a user identifying the concept;
in response to receipt of the query identifying the concept, retrieving an index record for the concept from the first mapping, the index record identifying the plurality of computer resources that include the information related to the concept;
accessing the second mapping to identify the ACL governing access to each of the plurality of computer resources identified in the index record for the concept;
based on the second mapping, determining that a first access control level is required to access a first computer resource of the plurality of computer resources associated with the concept and that a second access control level is required to access a second computer resource of the plurality of computer resources associated with the concept;
comparing the first access control level and the second access control level with one or more access credentials of the user; and
based at least in part on the determining and the comparing, providing the user with access to the first computer resource to a user device in response to the query from the user.
2. The computerized system of claim 1 , further comprising denying the user access to the second computer resource based at least in part on the comparing.
3. The computerized system of claim 2 , the method further comprising:
receiving a second request associated with a second user, wherein the second request includes the concept;
using the first mapping and the second mapping, determining that the second user has access to the second computer resource but not the first computer resource; and
based at least in part on the determining, providing the second computer resource to another user device associated with the second user.
4. The computerized system of claim 1 , wherein providing the user with access to the first computer resource includes generating a view of the concept that identifies the first computer resource and that does not identify the second computer resource.
5. The computerized system of claim 1 , wherein the second mapping maps each computer resource ID of a plurality of computer resource IDs to a respective ACL of the ACLs, wherein the ACL includes one or more access control level identifiers that indicate one or more access control levels needed to access a respective computer resource, and wherein the first mapping is an auxiliary data structure that references the second mapping in response to receipt of the query.
6. The computerized system of claim 1 , the method further comprising generating metadata associated with each computer resource of the plurality of computer resources, wherein the metadata includes information describing how the concept is associated with the plurality of computer resources.
7. The computerized system of claim 1 , wherein the concept includes a project title or meeting topic.