Patent ID: 8307291

Claim:
A computer-implemented method comprising: assigning, by a computer-based system for access control, a first user function identifier (FID) to a first user; assigning, by the computer-based system, a second user FID to a second user; assigning, by the computer-based system, a first object identifier (OID) to a first web page; assigning, by the computer-based system, a second OID to a first object on said first web page, wherein said second OID is one of a plurality of OIDs on said first web page, wherein a first subset of said plurality of OIDs is associated with a first FID in a plurality of FIDs, and wherein a second subset of said plurality of OIDs is associated with a second FID in said plurality of FIDs; assigning, by the computer-based system, said first FID to said first OID; assigning, by the computer-based system, said second FID to said second OID; assigning, by the computer-based system, a third FID to a third OID associated with a second object on said first web page, wherein, based on said first user FID, said first user has a different permission level for said first object than said second object; comparing, by the computer-based system, said first user FID, said second user FID, said first FID and said second FID, wherein said first user FID, said second user FID, said first FID, and said second FID are each part of said plurality of FIDs, wherein a first subset of said plurality of FIDs is associated with a display FID, wherein a second subset of said plurality of FIDs is associated with an execution FID, wherein a third subset of said plurality of FIDs is associated with a first edit FID, and wherein a fourth subset of said plurality of FIDs is associated with a second edit FID, wherein said first edit FID and said second edit FID comprise different edit permission levels, and wherein a plurality of FIDs in the third subset and a plurality of FIDs in the fourth subset do not overlap; and in response to said first user FID substantially matching said first FID: enabling, by the computer-based system, display to said first user of said first object on said first web page in response to said first FID being said display FID, and prohibiting, by the computer-based system and in response to said first user FID not substantially matching said second FID, execution of a function associated with said first object in response to said second FID being said execution FID, wherein, based on said first user FID and said second user FID, said second user has a different permission level for said first object than said first user.