Per user and per process layer visibility
View Patent ↗A method is proposed. The method includes receiving a file operation request from a process and performing a census of instances of a file applicable to the file operation request to populate a data structure. The data structure including a listing of the instances of the file applicable to the file operation request. The data structure also includes characteristics for a first instance from among the instances of the file applicable to the file operation request, and characteristics for a second instance of a selected file from among the instances of the file applicable to the file operation request. The method also includes eliminating the first instance from among the instances of the file applicable to the file operation request on the basis of a rule associated with properties from a record for the process, and the characteristics for the first instance.
1. A method comprising:
receiving a file operation request from a process;
a computer system performing a census of instances of a file applicable to said file operation request to populate a data structure, wherein
said data structure comprises a listing of said instances, and
said data structure further comprises characteristics for a first instance from among said instances and characteristics for a second instance from among said instances;
determining whether the first and second instances are to be made visible to said process, wherein
said determining comprises
determining whether said file operation request is acceptable according to a rule, and
if said file operation request is acceptable, determining whether the first and second instances are to be made visible to said process by comparing characteristics of said first and second instances with characteristics of said rule, and
said rule corresponds to said process;
making said first instance non-visible to said process on the basis of a determination that said first instance does not satisfy said rule; and
selecting for performance of said file operation request said second instance, wherein
said selecting comprises
selecting said second instance responsive to ascertaining that said second instance resides in a data layer,
selecting said second instance responsive to ascertaining that said second instance resides in an owner layer for said process,
selecting said second instance responsive to ascertaining that said second instance resides in a base file system for a client in which said process is a native process, and
selecting said second instance responsive to ascertaining that said second instance resides in a non-owner application layer and another rule for resolving conflicts indicates said selecting.
2. The method of claim 1 , wherein
said performing said census further comprises a file visibility control agent querying a file system to discover said characteristics for said first instance.
3. The method of claim 1 , wherein said performing said census further comprises:
enumerating potential sources for said instances;
determining that one of said potential sources comprises said first instance; and
recording said characteristics for said first instance.
4. The method of claim 1 , wherein said characteristics for said first instance further comprise a plurality of:
a path of said first instance,
a filename of said first instance,
an indication of deletion of said first instance,
an indication of said owner layer of said first instance,
an indication that said first instance is locked,
an item of modification and access data for said first instance,
an item of ownership data for said first instance,
an item of security data for said first instance,
an item of language data for said first instance,
an item of version data for said first instance, and
an item of metadata for said first instance.
5. The method of claim 1 , wherein
said characteristics of said rule are identified within a record for said process.
6. The method of claim 5 , wherein said making said first instance non-visible further comprises:
retrieving said characteristics of said rule from said record for said process;
retrieving said rule;
responsive to determining that said first instance is to be made non-visible to said process, removing said first instance from among said instances; and
responsive to determining that said rule requires reporting of said file operation request, reporting said file operation request.
7. The method of claim 5 , wherein said characteristics of said rule comprise a plurality of:
a creating name and path of said process,
a process identifier,
items of creation data for said process,
a list of files that said process has accessed or modified,
a thread association for said process,
an owner of said process,
a group of said owner,
a company of said owner,
an item of metadata associated with said process,
an item of data indicating resources consumed by said process,
a product that created said process,
a version of said product, and
a language of said product.
8. The method of claim 5 , wherein said characteristics of said rule comprise a plurality of:
a creating name and path of said process,
a process identifier,
items of creation data for said process,
a list of files that said process has accessed or modified,
a thread association for said process,
an owner of said process,
a group of said owner,
a company of said owner,
an item of metadata associated with said process,
an item of data indicating resources consumed by said process,
a product that created said process,
a version of said product,
a language of said product,
a path of said first instance,
a filename of said first instance,
an indication of deletion of said first instance,
an indication of said owner layer of said first instance,
an indication that said first instance is locked,
an item of modification and access data for said first instance,
an item of ownership data for said first instance,
an item of security data for said first instance,
an item of language data for said first instance,
an item of version data for said first instance,
an item of metadata for said first instance,
a location of a system executing said process, and
a time of said file operation request.
9. An apparatus comprising:
a processor; means for causing said processor to receive a file operation request from a process;
means for causing said processor to perform a census of instances of a file applicable to said file operation request to populate a data structure, wherein
said data structure comprises a listing of said instances, and
said data structure further comprises characteristics for a first instance from among said instances and characteristics for a second instance from among said instances;
means for causing said processor to determine whether the first and second instances are to be made visible to said process, wherein
said determine causes said processor to
determine whether said file operation request is acceptable according to a rule, and
if said file operation request is acceptable, determine whether the first and second instances are to be made visible to said process by comparing characteristics of said first and second instances with characteristics of said rule, and
said rule corresponds to said process;
means for causing said processor to make said first instance non-visible to said process on the basis of a determination that said first instance does not satisfy said rule; and
means for causing said processor to select for performance of said file operation request said second instance,
said select causes said processor to
select said second instance responsive to ascertaining that said second instance resides in a data layer,
select said second instance responsive to ascertaining that said second instance resides in an owner layer for said process,
select said second instance responsive to ascertaining that said second instance resides in a base file system for a client in which said process is a native process, and
select said second instance responsive to ascertaining that said second instance resides in a non-owner application layer and another rule for resolving conflicts indicates said selecting.
10. The apparatus of claim 9 , wherein said means for causing said processor to perform said census further comprise:
means for querying a file system to discover said characteristics for said first instance.
11. The apparatus of claim 9 , wherein
said characteristics of said rule are identified within a record for said process.
12. The apparatus of claim 11 , wherein said means for causing said processor to make said first instance non-visible further comprise:
means for causing said processor to retrieve said characteristics of said rule from said record for said process;
means for causing said processor to retrieve said rule;
means for causing said processor to, responsive to determining that said first instance is to be made non-visible to said process, remove said first instance from among said instances; and
means for causing said processor to, responsive to determining that said rule requires reporting of said file operation request, report said file operation request.
13. A computer program product comprising:
a non-transitory computer-readable medium;
instructions on the non-transitory computer-readable medium for receiving a file operation request from a process;
instructions on the non-transitory computer-readable medium for performing a census of instances of a file applicable to said file operation request to populate a data structure, wherein
said data structure comprises a listing of said instances, and
said data structure further comprises characteristics for a first instance from among said instances and characteristics for a second instance from among said instances;
instructions on the non-transitory computer-readable medium for determining whether the first and second instances are to be made visible to said process, wherein
said determining comprises
determining whether said file operation request is acceptable according to a rule, and
if said file operation request is acceptable, determining whether the first and second instances are to be made visible to said process by comparing characteristics of said first and second instances with characteristics of said rule, and
said rule corresponds to said process;
instructions on the non-transitory computer-readable medium for making said first instance non-visible to said process on the basis of a determination that said first instance does not satisfy said rule; and
instructions on the non-transitory computer-readable medium for selecting for performance of said file operation request said second instance, wherein
said selecting comprises
selecting said second instance responsive to ascertaining that said second instance resides in a data layer,
selecting said second instance responsive to ascertaining that said second instance resides in an owner layer for said process,
selecting said second instance responsive to ascertaining that said second instance resides in a base file system for a client in which said process is a native process, and
selecting said second instance responsive to ascertaining that said second instance resides in a non-owner application layer and another rule for resolving conflicts indicates said selecting.
14. The computer program product of claim 13 , wherein said instructions on the non-transitory computer-readable medium for performing said census further comprise:
instructions on the non-transitory computer-readable medium for querying a file system to discover said characteristics for said first instance.
15. The computer program product of claim 13 , wherein said instructions on the non-transitory computer-readable medium for performing said census further comprise:
instructions on the non-transitory computer-readable medium for enumerating potential sources for said instances;
instructions on the non-transitory computer-readable medium for determining that one of said potential sources comprises said first instance; and
instructions on the non-transitory computer-readable medium for recording said characteristics for said first instance.
16. The computer program product of claim 13 , wherein
said characteristics of said rule are identified within a record for said process.
17. The computer program product of claim 16 , wherein said instructions on the non-transitory computer-readable medium for making said first instance non-visible further comprise:
instructions on the non-transitory computer-readable medium for retrieving said characteristics of said rule from said record for said process;
instructions on the non-transitory computer-readable medium for retrieving said rule;
instructions on the non-transitory computer-readable medium for, responsive to determining that said first instance is to be made non-visible to said process, removing said first instance from among said instances; and
instructions on the non-transitory computer-readable medium for, responsive to determining that said rule requires reporting of said file operation request, reporting said file operation request.
18. The computer program product of claim 13 , wherein said characteristics for said first instance further comprise a plurality of:
a path of said first instance,
a filename of said first instance,
an indication of deletion of said first instance,
an indication of said owner layer of said first instance,
an indication that said first instance is locked,
an item of modification and access data for said first instance,
an item of ownership data for said first instance,
an item of security data for said first instance,
an item of language data for said first instance,
an item of version data for said first instance, and
an item of metadata for said first instance.