Patent ID: 7735119

Claim:
A computer, comprising: a non-transitory computer program product; a web server, provided on said non-transitory computer program product, comprising a web application capable of assuming a plurality of states and being arranged to process a received event from among a predeterminable set of events to change from one state to another, an event mapper that maps user requests to events, a state machine controller that computes a next application state based on combination of a current state of the state machine, the event received, an environment context and a set of allowed transitions from the current state, a definition file defining the states and the transitions between states based on the events, and a permission record file defining one or more events each corresponding to a role credential, wherein the web application comprises an event filter arranged to consult the role credentials and corresponding events in the permission record file on receipt of an event for a particular user role credential to determine whether to permit or not permit the event to be processed for such user role credential to cause a state transition.