Patent ID: 9591000
Date: 2017-03-07
CPC Classifications: G06F,H04L

Claim:
1. A method performed by a server comprising one or more computers, the method comprising: executing an application tier of an enterprise software application for receiving a plurality of Application Programming Interface (API) calls from a user device presenting a graphical user interface (GUI) for a presentation tier of the enterprise software application in a web browser, and for responding to the API calls; and executing an application tier security controller for checking the API calls against a mapping that maps each API call into a respective group with a respective user interface (UI) element of the GUI and a respective security key, and for authorizing user access to the application tier based on checking the API calls against the mapping; wherein the GUI includes a controlled group of UI elements specified in the mapping and an uncontrolled group of UI elements not specified in the mapping; wherein executing the application tier security controller comprises receiving an instruction to add a first UI element from the uncontrolled group to the controlled group and, in response, creating a group for the first UI element in the mapping.