Patent ID: 7454786
Filing Date: 2008-11-18
Classification: G06F,H04L

Abstract:
1. A method of authorizing a client's request at a first downstream application, said method comprising: generating a matched authorization table entry, the generating including: receiving, at the first downstream application, a first application request from an upstream application, wherein the first application request is derived from the client's request and includes the upstream security role identifier that was determined by the upstream application; reading authorization table entries stored in a downstream authorization table accessible from the downstream application; matching the upstream security role identifier included in the request with at least one of the authorization table entries included in the downstream authorization table; authorizing the client's request in response to the matching; identifying one or more required downstream security roles wherein each authorization table entry corresponds to at least one of the required downstream security roles; selecting the required downstream security role that corresponds to the matched authorization table entry; including the selected required downstream security role in a second application request; and sending the second application request to a second downstream application.