Patent ID: 7076557

Claim:
A method of determining whether a requested permission, wherein the permission is at least one of a set of permissions, requested by a called code frame, is satisfied within a runtime call stack so as to allow the called code frame to perform a protected operation, the method comprising: associating a first permission grant object with a first code assembly in the runtime call stack; dynamically overriding the set of permissions that is assigned to a second permission grant object associated with a second code assembly preceding the first code assembly; creating a permission request object within the called code frame to demand the requested permission; demanding via the permission request object the requested permission from the first permission grant object to allow the called code frame to perform the protected operation; determining whether the requested permission is provided in association with the first code assembly by the first permission grant object, responsive to the demanding operation; and permitting the execution of the called code frame to perform the protected operation, if the requested permission is provided in association with the first code assembly, whereby a full walk of the runtime call stack may be avoided.