Patent ID: 8001604

Claim:
A computer implemented method for protecting a first user from authorization limitation by a second user, the method comprising: a computer receiving an authorization command from the second user, wherein the authorization command targets the first user, and the second user is at least partially authorized to operate the authorization command; the computer determining that the first user is an ancestor user of the second user; determining whether at least one parent-child relationship between the first user and the second user is associated with an authorization mask, wherein the authorization mask is a logical OR of a command mask with a recursive authorization mask, wherein the recursive authorization mask is associated with an ancestor user of the second user, wherein the recursive authorization mask is associated with a parent-child relationship, wherein the recursive authorization mask is comprised of at least one bit position and the at least one bit position is associated with at least one authorization; and responsive to a determination that there is at least one parent-child relationship between the first user and the second user associated with the authorization mask, preventing by the computer operation of code of the authorization command to change the at least one authorization of the first user, wherein the authorization mask indicates suppression of code of the authorization command with respect to targeting the ancestor user of the second user.