Netapp, Inc.

Alan G Yoder

Timothy J Thompson

Mark Muhlestein

Benjamin Swartzlander

Steven R Klinkner

Robert M Armitano

Joshua Hanan Flank

James T Uren

Dejan L Mihajlovic

Centralized role-based access control (RBAC) for storage servers can include operating multiple storage servers, each configured to provide a set of clients with access to stored data, and using a separate network server to provide centralized RBAC. The network server may include an API proxy to proxy requests to access individual APIs of a storage server by an application which is external to the network server and the storage server and may control access to the individual APIs of the storage servers on a per-API, per-user and per-object basis. The API proxy may filter responses to API calls based on the access privileges of the user of the application which sent the API call. In some embodiments, the network server may implement a Windows domain server, an LDAP server or the like to evaluate security credentials of administrative users on behalf of multiple storage servers.

Centralized role-based access control for storage servers

Certain tasks are outsourced from a filer to a remote policy engine. The policy engine implements various defined policies to control the filer's servicing of client requests. For example, the policy engine can be used to implement policies to control various storage-related operations relating to data managed by a filer, such as creation, deletion, modification, opening, closing, renaming and/or changing attributes of files or directories managed by the filer.

Policy engine to control the servicing of requests received by a storage server

Growing community of inventors

Mountain View, CA, United States of America

Alan G Yoder