Qualified web application security based on web application hierarchy
View Patent ↗Qualified web application security based on web application hierarchy is described. A system receives a web application login request from a web browser associated with a user device. The system identifies qualified user information associated with the user device. The system creates an executable file based on applying the qualified user information to a web application hierarchy file comprising hierarchical nodes, wherein each of the hierarchical nodes is associated with a corresponding web application function, at least one corresponding business rule, and a corresponding scope-based security configuration. The system sends the executable file to the web browser, thereby enabling the web browser to apply qualified web application security to requests from the user device for accessing the web application.
1. A system for qualified web application security based on web application hierarchy, the system comprising:
a hardware processor; and
a processor-based application, which when executed by the hardware processor, will cause the processor to:
receive a web application login request from a web browser associated with a user device;
identify qualified user information associated with the user device;
create an executable file based on applying the qualified user information to a web application hierarchy file comprising a plurality of hierarchical nodes, wherein each of the plurality of hierarchical nodes is associated with a corresponding web application function, at least one corresponding business rule, and a corresponding scope-based security configuration; and
send the executable file to the web browser, thereby enabling the web browser to apply qualified web application security to requests from the user device for accessing the web application.
2. The system of claim 1 , wherein the qualified user information is based on at least one of a user role, a subscription, the user device, a geographic location associated with the user device, a user profile, a time of an access request, a version of the web application, a client-server environment, a user-requested functionality, a service agreement, and a tenant associated with a multi-tenant database system.
3. The system of claim 1 , wherein creating the executable file comprises creating a qualified web application hierarchy file based on the qualified user information and creating the executable file is based on the qualified web application hierarchy file.
4. The system of claim 1 , wherein applying the qualified web application security to requests from the user device for accessing the web application comprises disabling access to a child node associated with the web application hierarchy file in response to a determination that access is disabled to an ancestor node associated with the child node.
5. The system of claim 1 , wherein the processor-based application is further configured to receive the web application hierarchy file from a system administrator.
6. The system of claim 1 , wherein the processor-based application is further configured to:
receive an additional scope-based security configuration from a system administrator; and
insert the additional scope-based security configuration into a corresponding node of the plurality of hierarchical nodes in the web application hierarchy file.
7. The system of claim 1 , wherein the processor-based application is further configured to:
receive an additional hierarchical node from a system administrator; and
insert the additional hierarchical node into the plurality of hierarchical nodes in the web application hierarchy file.
8. A computer-implemented method for qualified web application security based on web application hierarchy, the method comprising:
receiving a web application login request from a web browser associated with a user device;
identifying qualified user information associated with the user device;
creating an executable file based on applying the qualified user information to a web application hierarchy file comprising a plurality of hierarchical nodes, wherein each of the plurality of hierarchical nodes is associated with a corresponding web application function, at least one corresponding business rule, and a corresponding scope-based security configuration; and
sending the executable file to the web browser, thereby enabling the web browser to apply qualified web application security to requests from the user device for accessing the web application.
9. The method of claim 8 , wherein the qualified user information is based on at least one of a user role, a subscription, the user device, a geographic location associated with the user device, a user profile, a time of an access request, a version of the web application, a client-server environment, a user-requested functionality, a service agreement, and a tenant associated with a multi-tenant database system.
10. The method of claim 8 , wherein creating the executable file comprises creating a qualified web application hierarchy file based on the qualified user information and creating the executable file is based on the qualified web application hierarchy file.
11. The method of claim 8 , wherein applying the qualified web application security to requests from the user device for accessing the web application comprises disabling access to a child node associated with the web application hierarchy file in response to a determination that access is disabled to an ancestor node associated with the child node.
12. The method of claim 8 , wherein the method further comprises receiving the web application hierarchy file from a system administrator.
13. The method of claim 8 , wherein the method further comprises:
receiving an additional scope-based security configuration from a system administrator;
inserting the additional scope-based security configuration into a corresponding node of the plurality of hierarchical nodes in the web application hierarchy file;
receiving an additional hierarchical node from a system administrator; and
inserting the additional hierarchical node into the plurality of hierarchical nodes in the web application hierarchy file.
14. A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
receive a web application login request from a web browser associated with a user device;
identify qualified user information associated with the user device;
create an executable file based on applying the qualified user information to a web application hierarchy file comprising a plurality of hierarchical nodes, wherein each of the plurality of hierarchical nodes is associated with a corresponding web application function, at least one corresponding business rule, and a corresponding scope-based security configuration; and
send the executable file to the web browser, thereby enabling the web browser to apply qualified web application security to requests from the user device for accessing the web application.
15. The computer program product of claim 14 , wherein the qualified user information is based on at least one of a user role, a subscription, the user device, a geographic location associated with the user device, a user profile, a time of an access request, a version of the web application, a client-server environment, a user-requested functionality, a service agreement, and a tenant associated with a multi-tenant database system.
16. The computer program product of claim 14 , wherein creating the executable file comprises creating a qualified web application hierarchy file based on the qualified user information and creating the executable file is based on the qualified web application hierarchy file.
17. The computer program product of claim 14 , wherein applying the qualified web application security to requests from the user device for accessing the web application comprises disabling access to a child node associated with the application hierarchy file in response to a determination that access is disabled to an ancestor node associated with the child node.
18. The computer program product of claim 14 , wherein the program code includes further instructions to receive the web application hierarchy file from a system administrator.
19. The computer program product of claim 14 , wherein the program code includes further instructions to:
receive an additional scope-based security configuration from a system administrator; and
insert the additional scope-based security configuration into a corresponding node of the plurality of hierarchical nodes in the web application hierarchy file.
20. The computer program product of claim 14 , wherein the program code includes further instructions to:
receive an additional hierarchical node from a system administrator; and
insert the additional hierarchical node into the plurality of hierarchical nodes in the web application hierarchy file.