Patent ID: 8185548

Claim:
A method executing on a processor of a computer, the method comprising: providing a plurality of policies, wherein the policies are applicable to a plurality of target profiles, each target profile having a set of target attributes, and each policy comprises a conditional statement having a policy abstraction and a corresponding action that will be performed when the conditional statement is satisfied, and each policy abstraction has a corresponding definition statement stored separately from the policy; analyzing a first policy to determine whether that policy is relevant to a specific target profile with a set of specific target attributes; determining the first policy comprising a corresponding first conditional statement and a first action is relevant when a value of at least one of the specific target attributes is used during an evaluation of the first policy and allowing the first action to be performed at the first specific target; after the first action is allowed to be performed at the first specific target, altering the first conditional statement and without transferring the first policy to the first specific target; and after altering the first conditional statement at the server and without transferring the first policy to the first specific target, evaluating the first conditional statement which results in not allowing performing of the first action at the first specific target.