Patent ID: 8533772
Filing Date: 2013-09-10
Classification: G06F,H04L

Abstract:
1. A method comprising: initializing, by a computing device, an authorization policy store to maintain one or more objects including a scope object that represents a scope of operations authorized to be performed with respect to an application; associating, by the computing device, with the scope object a role object that defines a set of operations that can be performed by one or more users within the scope of operations; arranging, by the computing device, the authorization policy store in a hierarchical manner in which the scope object defines a collection of child objects including another scope object and the role object, wherein the child objects have a same scope; and causing, by the computing device, the child objects to inherit authorization policies from a parent object, a policy associated with a child object taking precedence over a policy associated with the parent object when a conflict occurs.