Apr. 11, 2005 to Apr. 14, 2005
Kristal T. Pollack , University of California, Santa Cruz
Scott A. Brandt , University of California, Santa Cruz
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSST.2005.11
To determine whether a user can access a file in a hierarchical file system a traversal of the directory hierarchy is required in order to check access control for all the parent directories. This traversal can be especially expensive in a distributed system where the files may be on separate devices. We present two approaches for representing the complete access control for a file and its parent directories such that it can be stored locally with each file in order to avoid traversal. We use the well-known CNF and DNF (Conjunctive and Disjunctive Normal Form) formats to store permission and ownership information compactly for the entire path to a file. An examination of the structure of an existing large shared file system demonstrates the efficacy of our solution.
Kristal T. Pollack, Scott A. Brandt, "Efficient Access Control for Distributed Hierarchical File Systems", MSST, 2005, Mass Storage Systems and Technologies, IEEE / NASA Goddard Conference on, Mass Storage Systems and Technologies, IEEE / NASA Goddard Conference on 2005, pp. 253-260, doi:10.1109/MSST.2005.11