Application security policy management agent

An apparatus comprising:

• a memory;
• and
• a processor coupled to the memory, the processor configured execute instructions stored in the memory to:
• launch an application in a development environment, the application defining a custom security manager function;
• instantiate a development security manager function based on the custom security manager function;
• run the application in the development environment, wherein running the application causes the application to request one or more permissions from the development security manager function;
• pass the request for the permissions to the custom security manager function;
• cause the development security manager function to approve the one or more permissions;
• cause the custom security manager function to determine whether to approve or deny the request based on a permissions policy;
• responsive to a determination to deny the request, update the permissions policy to approve subsequent requests for the one or more permissions;
• and
• associate the updated permissions policy with the application.

One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions and, when the software is executed by a processor, cause the processor to:

• launch an application in a development environment, the application defining a custom security manager function;
• instantiate a development security manager function based on the custom security manager function;
• run the application in the development environment, wherein running the application causes the application to request one or more permissions from the development security manager function;
• pass the request for the permissions to the custom security manager function;
• cause the development security manager function to approve the one or more permissions;
• cause the custom security manager function to determine whether to approve or deny the request based on a permissions policy;
• responsive to a determination to deny the request, update the permissions policy to approve subsequent requests for the one or more permissions;
• and associate the updated permissions policy with the application.