Patent ID: 9553757
Date: 2017-01-24
CPC Classifications: H04L

Claim:
1. A computer implemented method for managing access to data resources, the method comprising: receiving a user-defined access control policy for managing access to one or more data resources, the user-defined access control policy specifying one or more conditions and one of: a substitution result or a substitution request to be applied when the one or more conditions are satisfied; receiving, from a client, an application programming interface (API) request to access the one or more data resources, the request being associated with an unfiltered result including all available information; and evaluating the user-defined access control policy by a policy evaluation engine to determine whether the API request satisfies the one or more conditions specified in the user-defined access control policy; wherein, in response to determining that the API request satisfies the one or more conditions, the policy evaluation engine is configured to: