Patent ID: 8327456

Claim:
A computer-implemented method of securing data records in a service-based web platform, the computer-implemented method comprising: storing, by the service-based web platform, one or more data records associated with an owner entity that is authorized to access the service-based web platform and the one or more data records; exposing, by the service-based web platform, web methods for accessing data records stored by the service-based web platform, wherein authorization to call certain web methods is granted by the service-based web platform to authorized users of the service-based web platform according to user context; receiving, by the service-based web platform, a call to an exposed web method from an application requesting access to a stored data record associated with the owner entity on behalf of a user; verifying, by the service-based web platform, authorization of the application to call the exposed web method based at least on whether the user is authorized to access the service-based web platform and has been granted authorization to call the exposed web method by the service-based web platform; and denying, by the service-based web platform, access of the application to the stored data record associated with the owner entity upon verifying authorization of the application to call the exposed web method unless: the user is at least one of the owner entity or a user that has been explicitly granted access by the owner entity to the stored data record or a set of data records that includes the stored data record; the application is registered with the service-based web platform; the owner entity has explicitly granted the application access to a minimum required data record set that was specified by the application during registration; and the stored data record is within the minimum required data record set.