Patent ID: 8732201

Claim:
A computer system, comprising: a web service runtime engine that uses first processing resources, the web service runtime engine including: a plurality of web services configured to perform operations in connection with XML data, and a web service runtime access enforcement module; and an XML server that uses second processing resources that are different from the first processing resources, the XML server including: a non-transitory XML data storage area tangibly storing the XML data, a non-transitory XML schema storage area tangibly storing a plurality of XML schemas that describe the XML data, and a non-transitory access control list (ACL) storage area tangibly storing XML structure-based ACLs, defining whether and (if possible) how clients and/or web services can access the XML data; wherein the web service runtime access enforcement module is configured to determine, at the web service runtime engine, whether a given web service initiated by or on behalf of a user using a client computer can perform one or more requested operations on the XML data, based on a corresponding XML structure-based ACL stored in the non-transitory ACL storage area.