Development of business applications

1. A computer system including instructions recorded on a non-transitory computer-readable medium and executable by at least one processor, the system comprising:

a security compliant manager configured to cause the at least one processor to manage development of business applications based on security relevance and security rules for one or more entities used by a security enforcement framework for each business application, wherein the security compliant manager includes:

a security relevance handler configured to define the security relevance for data types associated with business objects by ensuring that the one or more entities of each business application are classified in reference to the security relevance of the data types for the business objects;

a security rules handler configured to define the security rules for the data types associated with the business objects by assigning the security rules to each entity of each business application classified by the security relevance of the data types for the business objects;

a validation handler configured to define validation and test fulfillment of the security rules by providing one or more security runtime modules for each security rule defined by the security rules handler to ensure validation and test fulfillment of each security rule assigned to each entity of each business application classified by the security relevance of the data types for the business objects, wherein the security relevance classification is applied at multiple different levels of the business application including on a data type level and a user interface level; and

a security compliant observer configured to:

assist with ensuring validation and test fulfillment of each security rule by tracking assignment and invocation of each security runtime module, and

manage a set of security plug-ins integrated for multiple common frameworks to ensure each security rule is invoked by a plug-in from the set of security plug-ins and is fulfilled at both design time and runtime.

2. The system of claim 1 , wherein each entity of each business application comprises at least one of a component and a module of each business application.

3. The system of claim 1 , wherein each data type comprises a semantic, and wherein each data type is classified by the security relevance for each data type.

4. The system of claim 1 , wherein the data types comprise domain specific global data types that are security relevant including at least one of a password, a credit number, and an employee number.

5. The system of claim 1 , wherein the security relevance classification is passed to other building blocks of the business application as an inheritance of the security relevance of the data types for the business objects.

6. The system of claim 1 , wherein the one or more entities of each business application comprise one or more development entities used by the security enforcement framework of each business application.

7. The system of claim 1 , wherein the system comprises a server comprising the security enforcement framework.

8. A computer-implemented method, comprising:

managing development of business applications based on security relevance and security rules for one or more entities used by a security enforcement framework for each business application, including:

defining the security relevance for data types associated with business objects by ensuring that the one or more entities of each business application are classified in reference to the security relevance of the data types for the business objects;

defining the security rules for the data types associated with the business objects by assigning the security rules to each entity of each business application classified by the security relevance of the data types for the business objects;

defining validation and test fulfillment of the security rules by providing one or more security runtime modules for each security rule to ensure validation and test fulfillment of each security rule assigned to each entity of each business application classified by the security relevance of the data types for the business objects, wherein the security relevance classification is applied at multiple different levels of the business application including on a data type level and a user interface level;

assisting with ensuring validation and test fulfillment of each security rule by tracking assignment and invocation of each security runtime module; and

managing a set of security plug-ins integrated for multiple common frameworks to ensure each security rule is invoked by a plug-in from the set of security plug-ins and is fulfilled at both design time and runtime.

9. The method of claim 8 , wherein each entity of each business application comprises at least one of a component and a module of each business application.

10. The method of claim 8 , wherein:

each data type comprises a semantic,

each data type is classified by the security relevance for each data type, and

each data type comprises a domain specific global data type that is security relevant including at least one of a password, a credit number, and an employee number.

11. The method of claim 8 , wherein the one or more entities of each business application comprise one or more development entities used by the security enforcement framework of each business application.

12. A computer program product, the computer program product being tangibly embodied on a non-transitory computer-readable medium and comprising instructions that, when executed by at least one processor, are configured to:

manage development of business applications based on security relevance and security rules for one or more entities used by a security enforcement framework for each business application, wherein the instructions, when executed by the at least one processor, are further configured to:

define the security relevance for data types associated with business objects by ensuring that the one or more entities of each business application are classified in reference to the security relevance of the data types for the business objects;

define the security rules for the data types associated with the business objects by assigning the security rules to each entity of each business application classified by the security relevance of the data types for the business objects;

define validation and test fulfillment of the security rules by providing one or more security runtime modules for each security rule to ensure validation and test fulfillment of each security rule assigned to each entity of each business application classified by the security relevance of the data types for the business objects, wherein the security relevance classification is applied at multiple different levels of the business application including on a data type level and a user interface level;

assist with ensuring validation and test fulfillment of each security rule by tracking assignment and invocation of each security runtime module; and

manage a set of security plug-ins integrated for multiple common frameworks to ensure each security rule is invoked by a plug-in from the set of security plug-ins and is fulfilled at both design time and runtime.

13. The computer program product of claim 12 , wherein each entity of each business application comprises at least one of a component and a module of each business application.

14. The computer program product of claim 12 , wherein:

each data type comprises a semantic,

each data type is classified by the security relevance for each data type, and

each data type comprises a domain specific global data type that is security relevant including at least one of a password, a credit number, and an employee number.

15. The computer program product of claim 12 , wherein the one or more entities of each business application comprise one or more development entities used by the security enforcement framework of each business application.