Patent ID: 8904553

Claim:
A non-transitory computer readable storage medium storing instructions thereon, which when executed by a computer, cause the computer to: receive one or more business security profiles that include resource expressions, wherein a resource expression from the resource expressions provides a permission status of a right for resources, the resource expressions include at least one of a set of resources for which the permission status of the right is granted, a set of resources for which the permission status of the right is denied, and a set of resources for which the permission status of the right is undefined; calculate at least one of a maximum value and a minimum value of the one or more business security profiles, wherein: the maximum value grants the right for a resource when the right is granted for the resource in at least one business security profile from the one or more business security profiles, and the minimum value grants the right for the resource when the right is granted for the resource in one business security profile from the one or more business security profiles and is not denied in another business security profile from the one or more business security profiles, and the at least one of the maximum value and the minimum value is calculated by using set algebra on the resource expressions, the set algebra includes set operations on at least one of the set of resources for which the permission status of the right is granted, the set of resources for which the permission status of the right is denied, and the set of resources for which the permission status of the right is undefined; compute a net profile to determine net resources from the set of resources for which the permission status of the right is granted, the set of resources for which the permission status of the right is denied, and the set of resources for which the permission status of the right is undefined, wherein the net profile is computed by aggregating the at least one of the maximum value and the minimum value of the one or more business security profiles; and based on the computed net profile, provide the permission status of the right for the net resources, the permission status is one of granted or denied.