Methods, systems, and media are disclosed for determining access rights to
a resource managed by an application. One embodiment includes receiving a
request by the application, wherein the request comprises an action a
user seeks to perform on the resource. Further, the embodiment includes
locating, based on the request, the resource in a structure having
groupings of resources, wherein the groupings include a grouping having
the resource. Typically the groupings comprise files having mappings of
resources to assigned groups, and each group has an associated
authorization table mapping roles or policies to users. Further still,
the embodiment includes reading an authorization table associated with
the grouping having the resource, and determining whether to grant the
access rights for performing the action on the resource.