Patent ID: 8453217

Claim:
At a computer system, a method for providing secure access to resources in a resource store, the method comprising: an act of receiving a request over a session connected to the resource store, the request to perform an operation on secured resources of a specified resource type contained in the resource store; an act of referring to a claims list for the session, the claims list including claims for the connection accumulated from one or more previously received security tokens, each claim asserting identify information for the session; an act of referring to a security table at the resources store, the security table containing permissions for accessing secured resources contained in the resource store, the permissions defining secured operations that are authorized for secured resources contained in the resource store based on received identity information; determining accessible resource types for the session based upon the claims for the connection, the permissions in the security table, and the received identity information; determining that the specified resource type is an accessibly resource type for the session; an act of determining from the permissions that the session is authorized to perform the requested operation on secured resources of the specified resource type based on the accumulated claims contained in the claims list, wherein determining from the permissions that the session is authorized to perform the requested operation comprises determining that an application using the session is authorized to perform the requested operation based on the application using the session to communicate with the resource store; and an act of performing the requested operation for any secured resources of the specified type contained in the resource store.