Ramaswamy C Ranganathan

20120167158, Jun 28, 2012

Dec 24, 2010

12/978451

Paul Leach - Seattle WA, US
David McPherson - Bothell WA, US
Vishal Agarwal - Bothell WA, US
Mark Fishel Novak - Newcastle WA, US
Ming Tang - Redmond WA, US
Ramaswamy Ranganathan - Bellevue WA, US
Pranav Kukreja - Bellevue WA, US
Andrey Popov - Renton WA, US
Nir Ben Zvi - Redmond WA, US
Arun K. Nanda - Sammamish WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 17/00

726 1, 726 21

Resource authorization policies and resource scopes may be defined separately, thereby decoupling a set of authorization rules from the scope of resources to which those rules apply. In one example, a resource includes anything that can be used in a computing environment (e.g., a file, a device, etc.). A scope describes a set of resources (e.g., all files in folder X, all files labeled “Y”, etc.). Policies describe what can be done with a resource (e.g., “read-only,” “read/write,” “delete, if requestor is a member of the admin group,” etc.). When scopes and policies have been defined, they may be linked, thereby indicating that the policy applies to any resource within the scope. When a request for the resource is made, the request is evaluated against all policies associated with scopes that contain the resource. If the conditions specified in the policies apply, then the request may be granted.

20130125199, May 16, 2013

Nov 10, 2011

13/294162

Mark F. Novak - Newcastle WA, US
Paul Leach - Seattle WA, US
Vishal Agarwal - Bothell WA, US
David McPherson - Bothell WA, US
Sunil Gottumukkala - Redmond WA, US
Jignesh Shah - Redmond WA, US
Arun K. Nanda - Sammamish WA, US
Nir Ben Zvi - Redmond WA, US
Pranav Kukreja - Bellevue WA, US
Ramaswamy Ranganathan - Bellevue WA, US

MICROSOFT CORPORATION - Redmond WA

G06F 21/00

726 1

A policy that governs access to a resource may be tested against real-world access requests before being used to control access to the resource. In one example, access to a resource is governed by a policy, referred to as an effective policy. When the policy is to be modified or replaced, the modification or replacement may become a test policy. When a request is made to access the resource, the request may be evaluated under both the effective policy and the test policy. Whether access is granted is determined under the effective policy, but the decision that would be made under the test policy is noted, and may be logged. If the test policy is determined to behave acceptably when confronted with real-world access requests, then the current effective policy may be replaced with the test policy.