1. A computing system for controlling access to a plurality of objects, the computing system comprising: a processor; and memory that stores a scoped access control metadata element that controls access to a plurality of objects that are stored in a computer storage medium of the computing system, wherein the scoped access control metadata element comprises: a resource scope statement that identifies a plurality of objects for which the scoped access control metadata element provides access rights by defining a portion of a directory hierarchy indicating that the scoped access control metadata element provides access rights for a plurality of file objects located at or below the specified portion of the directory hierarchy; and a rules statement that includes a plurality of rule statements that each define different access control rules for accessing the plurality of objects, including: a first rule statement that includes: a first statement scope that identifies a first set of one or more users to whom the first rule statement applies and who may access the plurality of objects, including a rule that defines the first set of one or more users as users that have been authenticated; and a first grant statement that defines what access rights the first set of one or more users are granted for accessing any one of the plurality of objects; and a second rule statement that includes: a second statement scope that identifies a second set of one or more users to whom the second rule statement applies and who may also access the plurality of objects; and a second grant statement that defines what different access rights the second set of one or more users are granted for accessing any one of the plurality of objects, the computing system further comprising memory that stores computer-executable instructions that, when executed, implement a method, comprising: receiving a request from a user to access one of the plurality of file objects, the user included in one or more of the first set of one or more users or the second set of one or more users; determining that the scoped access control metadata element provides access rights to the one of the plurality of file objects; and granting the user access to the one of the plurality of file objects, as defined by the scoped access control metadata element.
1. A computing system for controlling access to a plurality of objects, the computing system comprising: a processor; and memory that stores a scoped access control metadata element that controls access to a plurality of objects that are stored in a computer storage medium of the computing system, wherein the scoped access control metadata element comprises: a resource scope statement that identifies a plurality of objects for which the scoped access control metadata element provides access rights by defining a portion of a directory hierarchy indicating that the scoped access control metadata element provides access rights for a plurality of file objects located at or below the specified portion of the directory hierarchy; and a rules statement that includes a plurality of rule statements that each define different access control rules for accessing the plurality of objects, including: a first rule statement that includes: a first statement scope that identifies a first set of one or more users to whom the first rule statement applies and who may access the plurality of objects, including a rule that defines the first set of one or more users as users that have been authenticated; and a first grant statement that defines what access rights the first set of one or more users are granted for accessing any one of the plurality of objects; and a second rule statement that includes: a second statement scope that identifies a second set of one or more users to whom the second rule statement applies and who may also access the plurality of objects; and a second grant statement that defines what different access rights the second set of one or more users are granted for accessing any one of the plurality of objects, the computing system further comprising memory that stores computer-executable instructions that, when executed, implement a method, comprising: receiving a request from a user to access one of the plurality of file objects, the user included in one or more of the first set of one or more users or the second set of one or more users; determining that the scoped access control metadata element provides access rights to the one of the plurality of file objects; and granting the user access to the one of the plurality of file objects, as defined by the scoped access control metadata element. 5. The computing system of claim 1 , wherein the rules statement contains references the plurality of rule statements, such that the rules are not directly contained within the rules statement.