Patent ID: 8875224

Claim:
A method comprising: determining, by a processor, whether a policy data structure defines an authorization for a request to access a resource, the policy data structure defining a plurality of predetermined authorizations, each predetermined authorization relating to authorization of at least one user to access at least one resource, each predetermined authorization further relating to a plurality of dynamic access requests, each dynamic access request indicating a condition to be satisfied by a respective set of attributes associated with a user request to access a resource and for the request to be granted in absence of an authorization determinative of the request; in response to determining that the policy data structure defines an authorization for the request to access the resource, applying the authorization, by the processor, to determine whether to grant the request; in response to determining that the policy data structure does not define an authorization for the request to access the resource, determining, by the processor, whether the policy data structure defines a dynamic access requirement determinative for the request; in response to determining that the policy data structure defines a dynamic access requirement determinative for the request, determining, by the processor, whether to grant the request in accordance with the respective set of attributes associated with the request; for at least one user request, after determining whether to grant the request, adding a dynamic authorization relating to authorization to access the resource within the request, by the processor, to the policy data structure.