Programmatic access control validation
AssigneeSap SE
InventorJuergen Kremp
Life of this patent
Estimating the term…
Abstract
Techniques of validating access controls within an application are disclosed. A validation test is performed by receiving test data comprising one or more privilege elements selected from a set of privilege elements representing a privilege scheme defined in an application. The test data and a data set are accessed. The application is executed using the data set according to the one or more privilege elements. A set of interaction indicators is generated representing interactions of the application with a portion of the data set. The set of interaction indicators is presented at a display device of a computing device.
Claims20
A system, comprising:
- one or more processors;
- and
- a processor-readable storage device in communication with the one or more processors, the processor-readable storage device comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- receiving test data comprising one or more privilege elements, the test data received into a testing container defined within a set of processor-executable instructions comprising an application, the one or more privilege elements being selected from a set of privilege elements representing a privilege scheme;
- accessing, by the one or more processors, the application, with the test data incorporated into the testing container, to initiate privilege testing for the application;
- accessing, by the one or more processors, a data set to insert at least a portion of the data set into the application;
- executing, by the one or more processors, the application, using the data set, according to the one or more privilege elements of the test data;
- generating, by the one or more processors, a set of interaction indicators for the application representing interactions of the application with a portion of the data set using the one or more privilege elements;
- and
- causing presentation of the set of interaction indicators at a display device of a computing device.
A method, comprising:
- receiving test data comprising one or more privilege elements, the test data received into a testing container defined within a set of processor-executable instructions comprising an application, the one or more privilege elements being selected from a set of privilege elements representing a privilege scheme;
- accessing, by one or more processors, the application, with the test data incorporated into the testing container, to initiate privilege testing for the application;
- accessing, by the one or more processors, a data set to insert at least a portion of the data set into the application;
- executing, by the one or more processors, the application, using the data set, according to the one or more privilege elements of the test data;
- generating, by the one or more processors, a set of interaction indicators for the application representing interactions of the application with a portion of the data set using the one or more privilege elements;
- and
- causing presentation of the set of interaction indicators at a display device of a computing device.
A processor-readable storage device comprising instructions that, when executed by one or more processors of a machine, causes the machine to perform operations comprising:
- receiving test data comprising one or more privilege elements, the test data received into a testing container defined within a set of processor-executable instructions comprising an application, the one or more privilege elements being selected from a set of privilege elements representing a privilege scheme;
- accessing, by the one or more processors, the application, with the test data incorporated into the testing container, to initiate privilege testing for the application;
- accessing, by the one or more processors, a data set to insert at least a portion of the data set into the application;
- executing, by the one or more processors, the application, using the data set, according to the one or more privilege elements of the test data;
- generating, by the one or more processors, a set of interaction indicators for the application representing interactions of the application with a portion of the data set using the one or more privilege elements;
- and
- causing presentation of the set of interaction indicators at a display device of a computing device.
Dependencies are inferred from the claim text.