File System Permission Inheritance via Global Version Parameters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method of setting access control lists (ACLs) in file systems is inefficient, as it requires repeatedly setting ACLs for each node in a directory tree, leading to high overhead in both time and storage space usage.
Innovation Solution
A method that uses a global version parameter to incrementally update permission settings, allowing child nodes to inherit permission records from parent nodes, thus only requiring the ACL to be set for the parent node, reducing the need to traverse all subdirectories or files for permission setting and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Manufacturing precision
If ACL is set for each node individually in the directory tree, then access permission control precision is improved, but time overhead and storage overhead increase significantly
Solution Approach 1:
The patent segments the permission setting process by introducing version parameters that divide the directory tree into regions with identical permission settings. Instead of setting ACL for every node individually, the system sets ACL only for root nodes of permission regions, and child nodes inherit permissions from their parent nodes until a version parameter change indicates a different permission setting. This segmentation dramatically reduces the number of ACL setting operations required.
Solution Approach 2:
The patent applies preliminary action by pre-setting permission settings for parent nodes that will be inherited by multiple child nodes. When a parent node's ACL is configured, the system proactively establishes this permission setting as the default for all child nodes, and only overrides it when specific child nodes require different permissions. This preliminary configuration eliminates the need to repeatedly set identical ACLs for numerous child nodes.
2Manufacturing precision
If ACL is set for each node individually in the directory tree, then access permission control precision is improved, but storage space overhead increases
Solution Approach 1:
The patent merges identical permission settings across multiple nodes by introducing version parameters. Nodes with the same version parameter share the same permission settings, allowing the system to store ACL information only once for a group of nodes rather than duplicating it for each node. This merging strategy significantly reduces storage space overhead while maintaining the ability to differentiate permissions when version parameters differ.
Solution Approach 2:
The version parameter mechanism serves multiple functions: it acts as an inheritance flag, a region identifier, and a permission version tracker. By making this single parameter multi-functional, the system eliminates the need for separate storage structures to track permission inheritance relationships, reducing overall storage overhead while maintaining precise permission control capabilities.
3Stability of the object's composition
If version parameter update frequency is increased to ensure permission consistency, then permission consistency is improved, but system performance deteriorates
Solution Approach 1:
The patent implements periodic action by updating version parameters only when necessary - specifically, when permission settings actually change. Rather than continuously or frequently updating version parameters, the system increments the version parameter at discrete intervals when permission modifications occur. This periodic update strategy maintains permission consistency while minimizing the performance overhead associated with version parameter management.
Solution Approach 2:
The version parameter mechanism serves itself by automatically indicating when permission settings need to be re-evaluated. Child nodes monitor their parent nodes' version parameters and automatically inherit updated permissions without requiring active management or frequent system-wide synchronization. This self-service approach maintains permission consistency through minimal system intervention, preserving system performance.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Embodiments of the present invention provide a file system permission setting method and apparatus, so that a permission record of access permission for a node of a directory tree is quickly set, and an updated global version parameter is used to represent one permission setting operation on any node of the directory tree. In the method, a permission record of a child node of the node to be set with permission inherits a permission record obtained after a current permission setting operation on the node to be set with permission. Therefore, only a permission record of a parent node of the directory tree is set, and all files and all subdirectories below a directory corresponding to the parent node inherit the permission record of the parent node. It is unnecessary to traverse all the subdirectories or files below the parent node to separately set a permission record of each subdirectory or file below the parent node, thereby improving efficiency of setting the access permission for the directory tree. The permission record is set for the parent node, and the permission record does not need to be repeatedly set for the subdirectory and the file below the directory corresponding to the parent node, thereby reducing storage space overheads.