Method and System to Implement Multi-Factor Authorization
Disclosed is an approach for dynamically applying roles and access levels to an actor based at least in part upon a set of conditions an object should meet for the role to be assumed. The approach may dynamically determine privileges based at least in part upon API endpoints and operations. A multi-factor approach may be taken for determining authorization based at least in part upon conditions, attributes, and policy.
1 . A computer implemented method, comprising:
receiving a request for access to an object in a computing system by an actor;
dynamically applying a role and an access level to the actor; and
providing access to the object in the computing system based at least in part upon the role and the access level that was dynamically applied to the actor.
2 . The method of claim 1 , wherein the role and the access level are dynamically applied to the actor using a multi-factor approach based at least in part upon conditions, attributes and policies corresponding to the object and/or the actor.
3 . The method of claim 1 , wherein the role and the access level are dynamically applied to the actor based at least in part upon a set of conditions that are met by the object and the actor for the role.
4 . The method of claim 1 , wherein a set of privileged are granted to the actor for the object that correspond to the role and the access level.
5 . The method of claim 4 , wherein the set of privileged are dynamically determined based at least in part upon feature flags, API endpoints and operations.
6 . The method of claim 1 , wherein real-time events are considered as inputs to dynamically determine the role and/or the access level.
7 . The method of claim 1 , wherein each of the object and the actor are tested against a condition in a conditional role.
8 . A computer program product comprising a non-transitory computer accessible medium storing thereupon a sequence of instructions which, when executed by a processor, causes the processor to perform a set of acts comprising:
receiving a request for access to an object in a computing system by an actor;
dynamically applying a role and an access level to the actor; and
providing access to the object in the computing system based at least in part upon the role and the access level that was dynamically applied to the actor.
9 . The computer program product of claim 8 , wherein the role and the access level are dynamically applied to the actor using a multi-factor approach based at least in part upon conditions, attributes and policies corresponding to the object and/or the actor.
10 . The computer program product of claim 8 , wherein the role and the access level are dynamically applied to the actor based at least in part upon a set of conditions that are met by the object and the actor for the role.
11 . The computer program product of claim 8 , wherein a set of privileged are granted to the actor for the object that correspond to the role and the access level.
12 . The computer program product of claim 11 , wherein the set of privileged are dynamically determined based at least in part upon feature flags, API endpoints and operations.
13 . The computer program product of claim 8 , wherein real-time events are considered as inputs to dynamically determine the role and/or the access level.
14 . The computer program product of claim 8 , wherein each of the object and the actor are tested against a condition in a conditional role.
15 . A system for implementing a standby database, comprising:
a processor;
a memory having stored thereupon a sequence of instructions of program code, which when executed by the processor, causes the processor to execute a set of acts comprising: receiving a request for access to an object in a computing system by an actor; dynamically applying a role and an access level to the actor; and providing access to the object in the computing system based at least in part upon the role and the access level that was dynamically applied to the actor.
16 . The system of claim 15 , wherein the role and the access level are dynamically applied to the actor using a multi-factor approach based at least in part upon conditions, attributes and policies corresponding to the object and/or the actor.
17 . The system of claim 15 , wherein the role and the access level are dynamically applied to the actor based at least in part upon a set of conditions that are met by the object and the actor for the role.
18 . The system of claim 15 , wherein a set of privileged are granted to the actor for the object that correspond to the role and the access level.
19 . The system of claim 18 , wherein the set of privileged are dynamically determined based at least in part upon feature flags, API endpoints and operations.
20 . The system of claim 15 , wherein real-time events are considered as inputs to dynamically determine the role and/or the access level.
21 . The system of claim 15 , wherein each of the object and the actor are tested against a condition in a conditional role.