Google Inc.

Thomas Palmer Buzbee

Michael Jeffrey Procopio

Justin Lee Hicks

Patrick Allen Higgins

Ronald E Schneider

A method includes receiving, at a cloud storage system, a request to access a file from an external application on behalf of a first user account, determining, based on one or more access control lists (ACLs) associated with a shared folder, that the external application is not allowed to access the file on behalf of the first user account, and receiving, from a user device associated with the first user account, a message authorizing the external application to access the file on behalf of the first user account. The method further includes modifying the ACLs associated with the shared folder containing the file and a subfolder, and allowing the external application to access the file on behalf of the first user account based on the user information of the first user account and the application information of the external application in the modified ACLs.

System and method for recursive propagating application access control

A system and method for recursive propagating application access control relate to managing third-party application access to content files and folders on a cloud storage system. The access control system may receive an access authorization indication to grant a third-party entity access to a parent folder containing a first file, and then modify an access control rule associated with the parent folder based on the access authorization indication. The modified access control rule is propagated to a child folder of the parent folder, and thus the third-party entity is granted access to a second file in the child folder based on the modified access control rule. The second file shares a common attribute with the first file, 1 and the modified access control rule specifies the common attribute.

A system and method for recursive propagating application access control relate to managing third-party application access to content files and folders on a cloud storage system. The access control system may receive an access authorization indication to grant a third-party entity access to a parent folder containing a first file, and then modify an access control rule associated with the parent folder based on the access authorization indication. The modified access control rule is propagated to a child folder of the parent folder, and thus the third-party entity is granted access to a second file in the child folder based on the modified access control rule. The second file shares a common attribute with the first file, and the modified access control rule specifies the common attribute.

Systems and methods for providing a dedicated storage directory for third-party applications in a cloud storage system may include allocating a user specific and application specific directory for the third-party application and controlling access to the directory. The directory may be used to store application data associated with the third-party application. The directory is made available to the respective third-party application and may be hidden from view from other applications and users.

Growing community of inventors

Boulder, CO, United States of America

Thomas Palmer Buzbee