Abstract: A method for access control, the method may include (a) receiving, by a file server, an access request for allowing a user to access a file system entity, the user is identified by a first file system protocol (FSP) user identifier, (b) converting the first FSP user identifier to a first access control user identifier (ACUI) of the user, the first ACUI represents a combination of the user and the first FSP, (c) searching, within an access control data structure (ACUI), for a relevant access control rule associated with a member of a multiprotocol set of ACUIs of the user, wherein the multiprotocol set includes the first ACUI of the user and at least one other ACUI of the user that represents at least one combination of the user and at least one other FSP, and (d) responding to the access request based on the relevant access control rule, when finding the relevant access control.

Abstract: A method for access control, the method may include (a) receiving, by a file server, an access request for allowing a user to access a file system entity, the user is identified by a first file system protocol (FSP) user identifier, (b) converting the first FSP user identifier to a first access control user identifier (ACUI) of the user, the first ACUI represents a combination of the user and the first FSP, (c) searching, within an access control data structure (ACUI), for a relevant access control rule associated with a member of a multiprotocol set of ACUIs of the user, wherein the multiprotocol set includes the first ACUI of the user and at least one other ACUI of the user that represents at least one combination of the user and at least one other FSP, and (d) responding to the access request based on the relevant access control rule, when finding the relevant access control.

Abstract: A storage system, including: (a) a primary storage entity utilized for storing a data-set of the storage system; (b) a secondary storage entity utilized for backing-up the data within the primary storage entity; (c) a flushing management module adapted to identify within the primary storage entity two groups of dirty data blocks, each group is comprised of dirty data blocks which are arranged within the secondary storage entity in a successive sequence, and to further identify within the primary storage entity a further group of backed-up data blocks which are arranged within the secondary storage entity in a successive sequence intermediately in-between the two identified groups of dirty data blocks; and (d) said flushing management module is adapted to combine the group of backed-up data blocks together with the two identified groups of dirty data blocks to form a successive extended flush sequence and to destage it to the secondary storage entity.

Abstract: Systems and methods for input/output command management. In embodiments of the invention an input/output command fully executes after a lock has been obtained for the command on all storage segments relating to the command, in a predetermined order. Some embodiments of the invention allow overlapping access to storage and/or to individual storage segments by a plurality of input/output commands. In some embodiments of the invention, prioritization of commands is facilitated through the usage of a sharing policy and/or wakeup policy.

Abstract: Systems and methods for input/output command management. In some cases of a write command received from a host, a maximum capacity limit relating to primary memory may be disregarded because data relating to the write command is written to backup memory prior to acknowledging the write command. In some of these cases, timeout is less likely than if the maximum capacity limit had been respected.

Abstract: A storage system, including: (a) a primary storage entity utilized for storing a data-set of the storage system; (b) a secondary storage entity utilized for backing-up the data within the primary storage entity; (c) a flushing management module adapted to identify within the primary storage entity two groups of dirty data blocks, each group is comprised of dirty data blocks which are arranged within the secondary storage entity in a successive sequence, and to further identify within the primary storage entity a further group of backed-up data blocks which are arranged within the secondary storage entity in a successive sequence intermediately in-between the two identified groups of dirty data blocks; and (d) said flushing management module is adapted to combine the group of backed-up data blocks together with the two identified groups of dirty data blocks to form a successive extended flush sequence and to destage it to the secondary storage entity.