Patent ID: 8601551

Claim:
A non-transitory computer-readable storage medium embodied with program instructions for causing a computer to execute a method for providing business data for a pre-emptive security audit, the method comprising: identifying a business resource to be protected; creating a link between the business resource and user interface (UI); linking the business resource to an authorization role, wherein the authorization role includes a group of authorizations required to perform a business function, each authorization providing access to authorization enforcement points at each level of a call stack; assigning a user to the authorization role; granting the user access to the business resource via at least one authorization enforcement point from the authorization enforcement points; and recording changes to the authorization role through version control by: persisting the authorization role as a previous version, creating a current version of the authorization role, and persisting the current version of the authorization role, wherein the current version of the authorization role is linked to the business resource and the previous version is deactivated.