公开(公告)号：US11811774B1

公开(公告)日：2023-11-07

申请号：US17572598

申请日：2022-01-10

Applicant: Google LLC

Inventor： Patrick Allen Higgins ,  Justin Lee Hicks ,  Thomas Palmer Buzbee ,  Michael Jeffrey Procopio

IPC: H04L9/40 ,  G06F21/62

CPC classification number: H04L63/101 ,  G06F21/6218

Abstract: A method includes receiving, at a cloud storage system, a request to access a file from an external application on behalf of a first user account, determining, based on one or more access control lists (ACLs) associated with a shared folder, that the external application is not allowed to access the file on behalf of the first user account, and receiving, from a user device associated with the first user account, a message authorizing the external application to access the file on behalf of the first user account. The method further includes modifying the ACLs associated with the shared folder containing the file and a subfolder, and allowing the external application to access the file on behalf of the first user account based on the user information of the first user account and the application information of the external application in the modified ACLs.

公开(公告)号：US11223624B1

公开(公告)日：2022-01-11

申请号：US16398198

申请日：2019-04-29

Applicant: Google LLC

Inventor： Patrick Allen Higgins ,  Justin Lee Hicks ,  Thomas Palmer Buzbee ,  Michael Jeffrey Procopio

IPC: H04L29/06 ,  G06F21/62

Abstract: A system and method for recursive propagating application access control relate to managing third-party application access to content files and folders on a cloud storage system. The access control system may receive an access authorization indication to grant a third-party entity access to a parent folder containing a first file, and then modify an access control rule associated with the parent folder based on the access authorization indication. The modified access control rule is propagated to a child folder of the parent folder, and thus the third-party entity is granted access to a second file in the child folder based on the modified access control rule. The second file shares a common attribute with the first file, 1 and the modified access control rule specifies the common attribute.