Storage application programming interface

• US 7,546,297 B2
• Filed: 03/14/2005
• Issued: 06/09/2009
• Est. Priority Date: 03/14/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Kannan, Suresh, Rosato, Stephen P, Ko, Pak H, Moulhaud, Patrick E., Elliott, Paul A.
• Primary Examiner(s): Rones; Charles
• Assistant Examiner(s): Quader; Fazlul
• Application Number:
  US11/079,462
• Publication Number:
  US 20060206510A1
• Time in Patent Office: 1,548 Days
• Field of Search: 707/9
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Systems, methods, apparatus, data structures, and computer-readable media are described which provide techniques for managing data storage. In an implementation, a method includes examining a role map to determine which of a plurality of roles are applicable to a request to interact with at least one of a plurality of items. The request is received via an application programming interface (API) that is available over a network and one or more of the items reference a respective item of data. Access to the at least one item is permitted based on a role definition which describes differing access rights available for the item based on which of the roles is applicable to the request.

Claims

1. A computer-implemented method having computer instructions executable by a processor, comprising:

examining a role map stored on a computing device to determine which of a plurality of roles are applicable to a request to interact with at least one of a plurality of items, wherein;

the request is received via an application programming interface (API) that is available over a network; and

an item is a fundamental object and includes basic properties, attributes, and item-associated methods, which are used by a storage service to manage the item; and

each of the plurality of items references a single item of data through one of a plurality of relationships, the single item of data comprising a property, wherein each relationship stores a value corresponding to the property of the single item of data;

permitting access to the at least one said item based on a role definition which describes differing access rights available for the at least one item based on a role applicable to the request; and

enforcing a manipulation of the items and relationships to form a hierarchy to share and to reuse corresponding items of data, wherein the items are configured to inherit role definitions.

2. The method as described in claim 1, wherein the role definition describes an attribute of the item that is accessible by a first said role and is not accessible by a second said role.

3. The method as described in claim 1, wherein the role is applicable to the request based on an identity of a client that originated the request.

4. The method as described in claim 1, wherein at least two of the one or more said items reference a shared item of data.

5. The method as described in claim 1, wherein two or more of the plurality of items are configured to form a hierarchy.

6. The method as described in claim 1, wherein the request is configured as a method call selected from the group consisting of:

a retrieve item call;

a create item call;

a create relationship between items call;

a change access permission call;

a role map change;

a role definition change;

update item;

delete item; and

a share item call.

7. The method as described in claim 1, wherein the request corresponds to a role selected from a group consisting of:

an administrator;

an owner;

a creator;

a guest;

a contributor; and

a member.

8. The method as described in claim 1, wherein:

at least one said role is stored in a permission record store which is accessible to a storage service module that is executable to perform the permitting; and

another said role is defined by the storage service module without accessing the permission record store.

9. A computer-implemented method having computer instructions executable by a processor, comprising:

receiving a plurality of requests at an application programming interface stored on a computing device to access a respective one or more of a plurality of items, wherein;

each request is sent over a network from a respective one of a plurality of clients;

an item is a fundamental object and includes basic properties, attributes, and item-associated methods, which are used by a storage service to manage the item;

one or more items reference at least one of a plurality of data;

at least one item has a defined relationship with another item, the defined relationship comprising a value corresponding to a property of the another item, wherein the value of the defined relationship supersedes a value of the property of the another item;

at least two items reference a shared item of data;

another two items are configured to form a hierarchy;

at least one item has a defined relationship with another item; and

one or more items have one or more role definitions which describe respective access rights that are defined for one or more roles;

determining what access rights a client has to the item referenced by a corresponding request;

managing access of the plurality of clients to the one or more items based on a role is applicable to a respective client; and

retrieving a role definition information about the item when the item is retrieved to permit a requesting client to determine how to utilize the plurality of data referenced by the item.

10. The method as described in claim 9, wherein:

at least one said role definition describes a method of the item that is accessible by one said role and is not accessible by another said role; and

at least one said role definition describes an attribute of the item that is accessible by the one said role and is not accessible by the other said role.

11. The method as described in claim 9, wherein the client is a web server.

12. The method as described in claim 9, wherein at least one said request is configured as a method call selected from the group consisting of:

a retrieve item call;

a create item call;

a create relationship between items call;

a change access permission call;

a role map change;

a role definition change; and

a share item call.