Patent ID: 7424680

Claim:
A computer program product for use in a client system that includes various client system components, and that is configured to receive one or more scripts from one or more script sources, the client system also including one or more objects that are configured to control properties and features of the client system components, the computer program product comprising one or more computer readable storage media storing computer-executable instructions for implementing a method of selectively granting or denying a script access to the one or more objects, wherein said method comprises: storing at the client system an access control data structure having one or more entries, each entry being associated with an object for which access is to be controlled and including a source identifier representing one or more script sources and a permission identifier defining a permission; receiving a script from a particular script source, wherein the script, if fully executed by the browser, would request access to a particular object; identifying an entry of the access control data structure that is independent of the script and that is associated with the particular object and has a source identifier representing the particular script source; and applying the permission defined by the permission identifier included in the identified entry to the script such that access by the script to the particular object is based upon one or more permissions that are associated with the script source and the particular system object and that are independent of the script.