Abstract: The disclosed embodiments provide a system for processing a request for profile data. During operation, the system obtains, from the request, an identifier for a member in a user community and a first non-global scope. Next, the system matches the identifier to a central profile record and locates a scoped profile record for the member. If the request is a read request, the system retrieves a first field from the scoped profile record and a second field from the central profile record and transmits the first and second fields in a response to the request without including, in the response, additional fields that are outside of the first non-global scope or the global scope. If the request is a write request, the system stores an update to the first field in the scoped profile record without modifying the first field in profile records that are outside of the first non-global scope.

Abstract: The disclosed embodiments provide a system for managing access to a remote storage system. During operation, the system receives a request from a user to access a remote storage system. Next, the system matches one or more parameters in the request to metadata in a virtual filesystem in the remote storage system.

Abstract: The disclosed embodiments provide a system for managing access to a remote storage system. During operation, the system receives a first request from a user to write a file to a remote storage system. Next, the system receives a first encrypted version of the file from a client associated with the first request. The system then decrypts the first encrypted version to obtain an unencrypted version of the file and uses the unencrypted version to generate a second encrypted version of the file. Finally, the system writes the second encrypted version to a file store and stores metadata for the file in a virtual filesystem that is physically separate from the file store.