公开(公告)号：US20160139845A1

公开(公告)日：2016-05-19

申请号：US14550276

申请日：2014-11-21

Applicant: NetApp Inc.

Inventor： Mark Muhlestein ,  Amit Aggarwal ,  Amrutha KS

IPC: G06F3/06

Abstract: One or more techniques and/or systems are provided for implementing storage level access control for data grouping structures. For example, a storage level access guard may be defined for a data grouping structure (e.g., a Qtree, a portion of a volume, etc.) of a storage device. The storage level access guard may be defined at a storage level of the storage device such that clients and/or certain administrators such as domain administrators may be restricted from accessing and/or changing the storage level access guard, which may increase data security. A hidden and unmodifiable property may be applied to the storage level access guard, which may be stored in a directory associated with the data grouping structure so that a logical replication of the data grouping structure may also replicate the storage level access guard.

Abstract translation: 提供一个或多个技术和/或系统用于实现数据分组结构的存储级访问控制。 例如，可以为存储设备的数据分组结构（例如，Qtree，卷的一部分等）定义存储级访问保护。 可以在存储设备的存储级别定义存储级别访问保护，使得可以限制客户端和/或诸如域管理员的某些管理员访问和/或改变存储级别访问保护，这可能增加数据安全性。 可以将隐藏和不可修改的属性应用于存储级访问保护，存储级别访问保护可以存储在与数据分组结构相关联的目录中，使得数据分组结构的逻辑复制也可以复制存储级访问保护。