Patent ID: 7406530

Claim:
A computer program product comprising: a computer-readable storage medium having computer-executable code stored therein for passing messages from a service provided by a server in a first walled garden of a plurality of walled gardens to a client, wherein each of the plurality of walled gardens is identified by an affiliation value, the computer-executable code comprising: a module configured to receive a message from the service intended for the client; a module configured to examine a header of the message to determine whether the header represents a potential security violation; a module configured to strip the header from the message responsive to a determination that the header represents a potential security violation; a module configured to determine permissions of the service with respect to the client, wherein the permissions are determined responsive at least in part to the service, the client, and an affiliation value of the first walled garden; a module configured to include the determined permissions with the message; and a module configured to pass the message and the determined permissions to the client.