Patent ID: 9053343
Filing Date: 2015-06-09
Classification: G06F

Abstract:
1. A computer-implemented method for debugging access control policies, comprising: receiving a first request from a first computing device of a first user to access one or more computing resources; determining that the first request is denied according to one or more access control policies; after determining that the first request is denied, generating a token that identifies detailed information regarding evaluation of the one or more access control policies and regarding a reason for the determining that the first request is denied; providing the token to the first computing device, the detailed information configured to be inaccessible to the first user based at least in part on the token; receiving a second request from a second computing device of a second user to access the detailed information, the second request specifying at least the token provided to the first computing device; and after receipt of the second request, providing access to at least a portion of the detailed information to the second user, the at least a portion of the detailed information determined based at least in part on the token specified in the second request and information indicating that the token is accessible to the second user.