Method and system for authorizing user interfaces

1. A method comprising:

authenticating a user;

in response to authenticating the user, accessing a user interface (UI) code, the UI code to generate a UI page, the UI page including instructions to generate a graphical user interface (GUI) for the user, the UI code including a security relevant portion of the UI code to generate a security relevant UI page element, the security relevant UI page element including instructions to generate a security relevant GUI element related to an application; and

in response to accessing the UI code, executing the UI code to generate the UI page, the executing the UI code including executing a first portion of the UI code to include a UI page element in the UI page, wherein the executing the first portion of the UI code is independent of whether or not the user has an authorization to access the application, the executing the UI code further including determining whether the user has the authorization to access the application, the determining based on a security policy and user role information, the executing the UI code further including performing one of

with a processor of a computing device, executing the security relevant portion of the UI code to include the security relevant UI page element in the UI page, the executing the security relevant portion of the UI code in response to determining that the user has the authorization to access the application, and

preventing executing the security relevant portion of the UI code to prevent an including of the security relevant UI page element in the UI page, the preventing executing the security relevant portion of the UI code in response to determining that the user does not have the authorization to access the application.

2. The method of claim 1 , further comprising accessing the security policy from a security policy document.

3. The method of claim 1 , further comprising:

receiving by a server the user role information from a client system; and

sending the UI page from the server to the client system to be used by the client system to generate the GUI.

4. The method of claim 3 , wherein:

determining whether the user has the authorization further comprises the server determining whether the user has the authorization; and

generating the UI page further comprises the server generating the UI page.

5. The method of claim 1 , wherein including the security relevant UI page element further comprises including instructions to display at least one of a control, a dialog box, a menu, and an indicator.

6. The method of claim 1 , wherein generating the UI page further comprises calling Java Server Page functions.

7. The method of claim 6 , wherein making a decision whether to grant the user authorization to view the application information further comprises calling Java Authentication and Authorization Service functions.

8. The method of claim 1 , wherein generating the UI page comprises generating an HTML page.

9. The method of claim 1 , wherein the executing the UI code includes the preventing executing the security relevant portion of the UI code to prevent the including of the security relevant UI page element in the UI page.

10. The method of claim 9 , wherein the executing the UI code further includes executing a second security relevant portion of the UI code to include a second security relevant UI page element in the UI page, the executing the second security relevant portion of the UI code in response to determining that the user has the authorization to access the application.

11. A system comprising:

processor circuitry;

an authentication module executing with the processor circuitry, the authentication module configured to authenticate a user;

a web service module coupled to the authentication module, the web service module executing with the processor circuitry, the web service module configured to access a user interface (UI) code in response to the authenticating the user, the UI code to generate a UI page, the UI page including instructions to generate a graphical user interface (GUI) for a user, the UI code including a security relevant portion of the UI code to generate a security relevant UI page element, the security relevant UI page element including instructions to generate a security relevant UI element related to an application, the web service module to generate the UI page by executing the UI code, the executing the UI code including executing a first portion of the UI code to include a UI page element in the UI page, wherein the executing the first portion of the UI code is independent of whether or not the user has an authorization to access the application, the executing the UI code further including one of

executing the security relevant portion of the UI code to include the security relevant UI page element in the UI page, the executing the security relevant portion of the UI code in response to determining that the user has the authorization to access the application, and

preventing executing the security relevant portion of the UI code to prevent an including of the security relevant UI page element in the UI page, the preventing executing the security relevant portion of the UI code in response to determining that the user does not have the authorization to access the application; and

an authorization module to determine and to indicate to the executing the UI code whether the user has the authorization to access the application, the determining based on a security policy and user role information.

12. The system of claim 11 , further comprising a data base server with a security policy document containing the security policy.

13. The system of claim 11 , wherein the authorization module is hosted on a security server separate from a web server that hosts the web services module.

14. The system of claim 13 ,

wherein the web server further to receive the user role information from a client system; and

wherein the web server further to send the UI page to the client system to be used to generate the GUI.

15. The system of claim 11 , wherein the security relevant UI page element includes instructions to display at least one of a control, a dialog box, a menu, and an indicator.

16. The system of claim 11 , wherein the UI code includes a Java Server Page function call.

17. The system of claim 11 , wherein the authorization module includes a Java Authentication and Authorization Service (JAAS) authorization function to use to in determining whether the user has the authorization to access the application.

18. The system of claim 17 , wherein the security relevant UI code element includes a call to the Java Authentication and Authorization Service (JAAS) authorization function.

19. The system of claim 11 , further comprising an authentication module including a Java Authentication and Authorization Service (JAAS) authentication function.

20. The system of claim 19 , wherein the UI code includes a call to the Java Authentication and Authorization Service (JAAS) authentication function.

21. A non-transitory machine-accessible medium that provides instructions that, if executed by a machine, will cause the machine to perform operations including:

authenticating a user;

in response to authenticating the user, accessing a user interface (UI) code, the UI code to generate a UI page , the UI page including instructions to generate a graphical user interface (GUI) for the user, the UI code including a security relevant portion of the UI code to generate a security relevant UI page element, the security relevant UI page element including instructions to generate a security relevant UI element related to an application;

in response to accessing the UI code, executing the UI code to generate the UI page, the executing the UI code including executing a first portion of the UI code to include a UI page element in the UI page, wherein the executing the first portion of the UI code is independent of whether or not the user has an authorization to access the application, the executing the UI code further including determining whether the user has the authorization to access the application, the determining based on a security policy and user role information, the executing the UI code further including performing one of

executing the security relevant portion of the UI code to include the security relevant UI page element in the UI page, the executing the security relevant portion of the UI code in response to determining that the user has the authorization to access the application, and

preventing executing the security relevant portion of the UI code to prevent an including of the security relevant UI page element in the UI page, the preventing executing the security relevant portion of the UI code in response to determining that the user does not have the authorization to access the application.

22. A system comprising:

a means for authenticating a user;

a means for accessing a user interface (UI) code in response to the authenticating the user, the UI code to generate a UI page, the UI page including instructions to generate a UI for the user, the UI code including a security relevant portion of the UI code to generate a security relevant UI page element, the security relevant UI page element including instructions to generate a security relevant UI element related to an application;

a means for executing the UI code in response to the accessing the UI code to generate the UI page, the means for executing the UI code including means to execute a first portion of the UI code to include a UI page element in the UI page, wherein the executing the first portion of the UI code is independent of whether or not the user has an authorization to access the application, the means for executing the UI code further including means for determining whether the user has the authorization to access the application, the determining based on a security policy and user role information, the means for executing the UI code further including one of

means for executing the security relevant portion of the UI code to include the security relevant UI page element in the UI page, the executing the security relevant portion of the UI code in response to determining that the user has the authorization to access the application, and

means for preventing executing the security relevant portion of the UI code to prevent an including of the security relevant UI page element in the UI page, the preventing executing the security relevant portion of the UI code in response to determining that the user does not have the authorization to access the application; and

a means for making a determination, in response to the executing the UI code, whether the user has the authorization to access the application, the determination based on a security policy and user role information.