Simulation of authorization checks using a debugger
For each statement of an application executing in a debugger script-controlled debugger session, if the statement comprises an authorization check for a user in regard to an object, and if the debugger includes a set of authorization rules associated with the object, then execution of the applicatio...
Gespeichert in:
1. Verfasser: | |
---|---|
Format: | Patent |
Sprache: | eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | For each statement of an application executing in a debugger script-controlled debugger session, if the statement comprises an authorization check for a user in regard to an object, and if the debugger includes a set of authorization rules associated with the object, then execution of the application is discontinued. Application values for each data field of the object are obtained. These values are compared to respective values specified by each rule of the set of authorization rules. If the current values do not match values specified by at least one of the rules, the authorization check is executed normally. If the current values do match values specified by at least one of the rules, then: the authorization check is skipped, a pass or fail value for the authorization check is registered by the executing application according to the at least one rule, and execution of the application continues normally. |
---|