Dynamic security policies

A computer system for dynamic security policies, the computer system comprising:

• a memory medium comprising program instructions, the program instruction comprising a plurality of profiles within a user account on a the computer system, wherein each profile corresponds to a different unlock credential of a plurality of unlock credentials associated with the user account and each profile is associated with a security scope of a plurality of security scopes within the user account;
• a bus coupled to the memory medium;
• and
• a processor, for executing the program instructions, coupled to an applications profile manager via the bus that when executing the program instructions causes the system to:
• unlock the user account in response to receipt of an unlock credential of the plurality of unlock credentials;
• open, in response to the unlock credential, a profile of the plurality of profiles corresponding with the unlock credential, wherein the opened profile can be swapped dynamically for a different profile of the plurality of profiles within a same user session in response to receipt of a different unlock credential of the plurality of unlock credentials;
• receive a request to open a digital item on the computer system;
• determine, by comparing the requested digital item to a security scope of the plurality of security scopes associated with the opened profile, whether access to the digital item is permitted;
• issue a request, subsequent to access to the digital item being denied under all security scopes of the plurality of security scopes associated with the opened first profile, for a second unlock credential associated with a second profile having a security scope permitting access to the requested digital item;
• replace the first profile with the second profile in the same user session responsive to receipt of the second unlock credential;
• and
• permit access to the digital item responsive to the replacement.

A computer program product for dynamic security policies, the computer program product comprising a computer readable hardware storage device having program instructions embodied therewith, the program instructions executable by a processor to:

• establish a plurality of profiles within a user account on a mobile device, wherein each profile corresponds to a different unlock credential of a plurality of unlock credentials associated with the user account and each profile is associated with a security scope of a plurality of security scopes within the user account;
• unlock the user account on the mobile device in response to receipt of an unlock credential of the plurality of unlock credentials;
• open, in response to the unlock credential, a profile of the plurality of profiles corresponding with the unlock credential on the mobile device, wherein the opened profile can be swapped dynamically for a different profile of the plurality of profiles within a same user session in response to receipt of a different unlock credential of the plurality of unlock credentials;
• receive a request to open a digital item on the mobile device;
• determine, by comparing the requested digital item to a security scope of the plurality of security scopes associated with the opened profile, whether access to the digital item is permitted;
• issue a request, subsequent to access to the digital item being denied under all security scopes of the plurality of security scopes associated with the opened first profile, for a second unlock credential associated with a second profile having a security scope permitting access to the requested digital item;
• replace the first profile with the second profile in the same user session responsive to receipt of the second unlock credential;
• and
• permit access to the digital item responsive to the replacement.