Methods and systems for managing permissions data and/or indexes

• US 9,081,872 B2
• Filed: 08/04/2006
• Issued: 07/14/2015
• Est. Priority Date: 06/25/2004
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Hrnkvist, John, Arrouve, Yan
• Primary Examiner(s): Arjomandi, Noosha
• Application Number:
  US11/499,485
• Publication Number:
  US 20070033191A1
• Time in Patent Office: 3,266 Days
• Field of Search: 707/729, 707/783
• US Class Current: 1/1
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 16/14 Details of searching files based on file metadata
• CPC Class Codes: G06F 16/90335 Query processing

Abstract

Systems and methods for indexing and searching data, such as file contents and/or metadata. In one exemplary method, an index corresponding to files on a storage device is created. Index is partitioned into subindexes according to certain criteria, such as the location of files or exclusivity of access to files. Subindex contains the entire content of files or metadata describing files, in addition to identifiers leading back to files'"'"' physical storage. Index is maintained by moving files'"'"' index entries from one subindex to another as files change in relation to the partition criteria, such as changing location. Searching some subindexes, like one corresponding to files in a shared folder, is done with permission checking. Searches of certain other subindexes, like one corresponding to the home folder of the user searching, are done without permission checking the underlying files resulting in a performance improvement.

Claims

1. A machine implemented method of processing data comprising:

creating a searchable index including a first subindex and a second subindex, wherein the first subindex corresponds to files in a user'"'"'s folder and the second subindex corresponds to files outside the user'"'"'s folder and wherein the user has permission to access files in the user'"'"'s folder;

receiving a search query from a user;

performing a search of the index, based on the search query, wherein the search generates first results from the first subindex and second results from the second subindex;

displaying the first results without performing a permissions check on the first results;

performing, by a data processing system, a permissions check upon the second results, wherein the permissions check comprises determining if the user has permission to access files in the second results;

filtering the second results using results of the permissions check; and

displaying the filtered second results.

2. A method as in claim 1 wherein the first subindex is physically represented as a data structure.

3. A method as in claim 1 wherein the first subindex is virtually represented within a data structure.

4. A method as in claim 1 wherein the first subindex contains entries, wherein an entry contains at least file data and a file identifier.

5. A method as in claim 1 wherein the index contains entries, wherein an entry contains file data, a file identifier, and a user name, wherein a set of files within the index having the same user name is a virtual subindex belonging to a user identified by the user name.

6. A method as in claim 1 wherein the index contains the full text of files.

7. A method as in claim 1 wherein the search query contains a plurality of words.

8. A method as in claim 7 wherein the search further contains a plurality of numbers.

9. A method as in claim 8 wherein the plurality of words contains first words and second words, wherein a first word and a second word are associated with a first number from the plurality of numbers, wherein the first word and the second word are matched when the first word and second word are found within the first number of words of each other.

10. A method as in claim 1 wherein the index contains metadata.

11. A machine implemented method of processing data comprising:

creating a searchable index including a first subindex and a second subindex, wherein the first subindex corresponds to files in a user'"'"'s folder and the second subindex corresponds to files outside the user'"'"'s folder and wherein the user has permission to access files in the user'"'"'s folder;

receiving a search query from a user;

performing a search of the index, based on the search query, wherein the search generates first results from the first subindex and second results from the second subindex;

displaying the first results without examining data in a permissions cache;

examining, by a data processing system, data in a permissions cache for the second results, wherein examining data in the permissions cache comprises determining if the user has permission to access files in the second results;

filtering the second results using results of the examining; and

displaying the filtered second results.

12. A method as in claim 11 wherein the permissions cache contains entries, wherein an entry contains a file identifier, a user name, and a flag, wherein the flag takes on a value of true when a user identified by the user name has access to a file identified by the file identifier.

13. A method as in claim 12 wherein an entry further contains an indication of validity, wherein the entry indicates whether it is a valid entry or an invalid entry.

14. A method as in claim 13 wherein the entry indicates that it is an invalid entry, a permissions check is performed and the entry'"'"'s flag is updated with a result of the permissions check and the entry now indicates that it is valid.

15. A method as in claim 13 wherein the entry indicates that it is a valid entry, wherein the value of the entry'"'"'s flag is used in lieu of a permissions check.

16. A method as in claim 11 wherein the first subindex is physically represented as a data structure.

17. A method as in claim 11 wherein the first subindex is virtually represented within a data structure.

18. A method as in claim 11 wherein the first subindex contains entries, wherein an entry contains at least file data and a file identifier.

19. A method as in claim 11 wherein the index contains entries, wherein an entry contains file data, a file identifier, and a user name, wherein a set of files within the index having the same user name is a virtual subindex belonging to a user identified by the user name.

20. A method as in claim 11 wherein the index contains the full text of files.

21. A method as in claim 11 wherein the search query contains a plurality of words.

22. A method as in claim 21 wherein the search further contains a plurality of numbers.

23. A method as in claim 22 wherein the plurality of words contains first words and second words, wherein a first word and second word is associated with a first number from the plurality of numbers, wherein the first word and the second word are matched when the first word and second word are found within the first number of words of each other.

24. A method as in claim 11 wherein the index contains metadata.

25. A machine implemented method of processing data comprising:

receiving a search query from a user;

performing a search of a storage device, based on the search query, wherein the storage device contains at least one folder belonging to the user and at least one folder that does not belong to the user and wherein the user has permission to access files in the at least one folder belonging to the user and wherein the search generates first results from the folder belonging to the user and second results from the folder that does not belong to the user;

displaying the first results without performing a permissions check on the first results;

performing, by a data processing system, a permissions check upon the second results, wherein the permissions check comprises determining if the user has permission to access files in the second results;

filtering the second results using results of the permissions check; and

displaying the filtered second results.

26. A method as in claim 25 wherein the search query contains a plurality of words.

27. A method as in claim 26 wherein the search further contains a plurality of numbers.

28. A method as in claim 27 wherein the plurality of words contains first words and second words, wherein a first word and a second word are associated with a first number from the plurality of numbers, wherein the first word and the second word are matched when the first word and second word are found within the first number of words of each other.

29. A non-transitory machine readable storage medium storing instructions which when executed by a data processing system cause the data processing system to perform a method of processing data, the method comprising:

creating a searchable index including a first subindex and a second subindex, wherein the first subindex corresponds to files in a user'"'"'s folder and the second subindex corresponds to files outside the user'"'"'s folder and wherein the user has permission to access files in the user'"'"'s folder;

receiving a search query from a user;

performing a search of the index, based on the search query, wherein the search generates first results from the first subindex and second results from the second subindex;

displaying the first results without performing a permissions check on the first results;

performing a permissions check upon the second results, wherein the permissions check comprises determining if the user has permission to access files in the second results;

filtering the second results using results of the permissions check; and

displaying the filtered second results.

30. The non-transitory machine readable storage medium as in claim 29 wherein the first subindex is physically represented as a data structure.

31. The non-transitory machine readable storage medium as in claim 29 wherein the first subindex is virtually represented within a data structure.

32. The non-transitory machine readable storage medium as in claim 29 wherein the first subindex contains entries, wherein an entry contains at least file data and a file identifier.

33. The non-transitory machine readable storage medium as in claim 29 wherein the index contains entries, wherein an entry contains file data, a file identifier, and a user name, wherein a set of files within the index having the same user name is a virtual subindex belonging to a user identified by the user name.

34. The non-transitory machine readable storage medium as in claim 29 wherein the index contains the full text of files.

35. The non-transitory machine readable storage medium as in claim 29 wherein the search query contains a plurality of words.

36. The non-transitory machine readable storage medium as in claim 35 wherein the search further contains a plurality of numbers.

37. The non-transitory machine readable storage medium as in claim 36 wherein the plurality of words contains first words and second words, wherein a first word and a second word are associated with a first number from the plurality of numbers, wherein the first word and the second word are matched when the first word and second word are found within the first number of words of each other.

38. The non-transitory machine readable storage medium as in claim 29 wherein the index contains metadata.

39. A non-transitory machine readable storage medium storing instructions which when executed by a data processing system cause the data processing system to perform a method of processing data, the method comprising:

creating a searchable index including a first subindex and a second subindex, wherein the first subindex corresponds to files in a user'"'"'s folder and the second subindex corresponds to files outside the user'"'"'s folder and wherein the user has permission to access files in the user'"'"'s folder;

receiving a search query from a user;

performing a search of the index, based on the search query, wherein the search generates first results from the first subindex and second results from the second subindex;

displaying the first results without examining data in a permissions cache;

examining data in a permissions cache for the second results, wherein examining data in the permissions cache comprises determining if the user has permission to access files in the second results;

filtering the second results using results of the examining; and

displaying the filtered second results.

40. The non-transitory machine readable storage medium as in claim 39 wherein the permissions cache contains entries, wherein an entry contains a file identifier, a user name, and a flag, wherein the flag takes on a value of true when a user identified by the user name has access to a file identified by the file identifier.

41. The non-transitory machine readable storage medium as in claim 40 wherein an entry further contains an indication of validity, wherein the entry indicates whether it is a valid entry or an invalid entry.

42. The non-transitory machine readable storage medium as in claim 41 wherein the entry indicates that it is an invalid entry, a permissions check is performed and the entry'"'"'s flag is updated with a result of the permissions check and the entry now indicates that it is valid.

43. The non-transitory machine readable storage medium as in claim 41 wherein the entry indicates that it is a valid entry, wherein the value of the entry'"'"'s flag is used in lieu of a permissions check.

44. The non-transitory machine readable storage medium as in claim 39 wherein the first subindex is physically represented as a data structure.

45. The non-transitory machine readable storage medium as in claim 39 wherein the first subindex is virtually represented within a data structure.

46. The non-transitory machine readable storage medium as in claim 39 wherein the first subindex contains entries, wherein an entry contains at least file data and a file identifier.

47. The non-transitory machine readable storage medium as in claim 39 wherein the index contains entries, wherein an entry contains file data, a file identifier, and a user name, wherein a set of files within the index having the same user name is a virtual subindex belonging to a user identified by the user name.

48. The non-transitory machine readable storage medium as in claim 39 wherein the index contains the full text of files.

49. The non-transitory machine readable storage medium as in claim 39 wherein the search query contains a plurality of words.

50. The non-transitory machine readable storage medium as in claim 49 wherein the search further contains a plurality of numbers.

51. The non-transitory machine readable storage medium as in claim 50 wherein the plurality of words contains first words and second words, wherein a first word and second word is associated with a first number from the plurality of numbers, wherein the first word and the second word are matched when the first word and second word are found within the first number of words of each other.

52. The non-transitory machine readable storage medium as in claim 39 wherein the index contains metadata.

53. A non-transitory machine readable storage medium storing instructions which when executed by a data processing system cause the data processing system to perform a method of processing data, the method comprising:

receiving a search query from a user;

performing a search of a storage device, based on the search query, wherein the storage device contains at least one folder belonging to the user and at least one folder that does not belong to the user and wherein the user has permission to access files in the at least one folder belonging to the user and wherein the search generates first results from the folder belonging to the user and second results from the folder that does not belong to the user;

displaying the first results without performing a permissions check on the first results;

performing a permissions check upon the second results, wherein the permissions check comprises determining if the user has permission to access files in the second results;

filtering the second results using results of the permissions check; and

displaying the filtered second results.

54. The non-transitory machine readable storage medium as in claim 53 wherein the search query contains a plurality of words.

55. The non-transitory machine readable storage medium as in claim 54 wherein the search further contains a plurality of numbers.

56. The non-transitory machine readable storage medium as in claim 55 wherein the plurality of words contains first words and second words, wherein a first word and a second word are associated with a first number from the plurality of numbers, wherein the first word and the second word are matched when the first word and second word are found within the first number of words of each other.

57. A data processing system comprising:

means for creating a searchable index including a first subindex and a second subindex, wherein the first subindex corresponds to files in a user'"'"'s folder and the second subindex corresponds to files outside the user'"'"'s folder and wherein the user has permission to access files in the user'"'"'s folder;

means for receiving a search query from a user;

means for performing a search of the index, based on the search query, wherein the search generates first results from the first subindex and second results from the second subindex;

means for displaying the first results without performing a permissions check on the first results;

means for performing, by a hardware device, a permissions check upon the second results, wherein the permissions check comprises determining if the user has permission to access files in the second results;

means for filtering the second results using results of the permissions check; and

means for displaying the filtered second results.

58. A data processing system comprising:

means for creating a searchable index including a first subindex and a second subindex, wherein the first subindex corresponds to files in a user'"'"'s folder and the second subindex corresponds to files outside the user'"'"'s folder and wherein the user has permission to access files in the user'"'"'s folder;

means for receiving a search query from a user;

means for performing a search of the index, based on the search query, wherein the search generates first results from the first subindex and second results from the second subindex;

means for displaying the first results without examining data in a permissions cache;

means for examining, by a hardware device, data in a permissions cache for the second results, wherein examining data in the permissions cache comprises determining if the user has permission to access files in the second results;

means for filtering the second results using results of the examining; and

means for displaying the filtered second results.

59. A data processing system comprising:

means for receiving a search query from a user;

means for performing a search of a storage device, based on the search query, wherein the storage device contains at least one folder belonging to the user and at least one folder that does not belong to the user and wherein the user has permission to access files in the at least one folder belonging to the user and wherein the search generates first results from the folder belonging to the user and second results from the folder that does not belong to the user;

means for displaying the first results without performing a permissions check on the first results;

means for performing, by a hardware device, a permissions check upon the second results, wherein the permissions check comprises determining if the user has permission to access files in the second results;

means for filtering the second results using results of the permissions check; and

means for displaying the filtered second results.