Patent ID: 7669226

Claim:
A computer-implemented method of accessing, by a user, a software application object using an authorization policy, said software application object being part of a software application written in an object-oriented, structured, imperative programming language, and modifying, by said user, said software application object, said method comprising: generating a software application object group, comprising a plurality of software application objects, from a software application object description document run on a data processor; selecting said software application object group by any instance of a specified object method call result and a specified object field value; creating said authorization policy for each said software application object group in a single generic authorization file, said single generic authorization file having different authorization rules for different software application objects; sending said selected software application object group to an access controller; establishing access control parameters using said any instance of said specified object method call result and said specified object field value, for said user to access said selected software application object group based on said authorization policy; changing, by said user, said authorization policy by modifying a declarative specification of environmental variables of said authorization policy and modifying constraints defined on attributes of a software application object, including code, in said selected software application object group; and modifying, by said user, said software application object, including code, in said selected software application object group of said software application.