Patent ID: 9633199
Date: 2017-04-25
CPC Classifications: G06F

Claim:
1. A computer program product for monitoring application operations of an application installed on a computer system, the computer program product comprising a non-transitory computer readable storage medium having computer readable program code embodied therein that executes to perform operations, the operations comprising: receiving a declaration of security requirements indicating actions the application designates to perform with respect to resources in the computer system, wherein a plurality of the indicated actions are indicated for at least two operation modes of the application, wherein the at least two operation modes are members of a set of operation modes comprising an installation mode, an update mode, and a normal operation mode, wherein each of the security requirements indicates an association of at least one of an action and a resource and one of the operation modes to cause to permit or deny the action with respect to the associated resource when invoked during the associated operation mode indicated in one of the security requirements; receiving notification to allow one of the operation modes; indicating that the operation mode allowed in the notification is enabled for the application; detecting that the application is requesting to perform a requested action with respect to a requested resource in the computer system; determining a current operation mode of the application comprising one of the at least two operation modes in response to detecting that the application is requesting the requested action; determining whether the current operation mode is indicated as enabled for the application; determining whether the declaration of security requirements indicates the requested action for the application with the current operation mode in response to determining that the current operation mode is indicated as enabled; and allowing the requested action with respect to the requested resource to proceed in response to determining that the declaration of security requirements indicates the requested action with respect to the requested resource with the current operation mode.