In a variation on this embodiment, after identifying the purpose associated with the request, the system identifies a role associated with the application.
The system determines if the role is empowered to have the identified purpose, and if so, identifies the set of attributes associated with the purpose.