Method And System For Restricting Access To User Resources

A proxy server for passing messages from a service provided by a server in a first walled garden of a plurality of walled gardens to a client, wherein each of the plurality of walled gardens is identified by an affiliation value, the proxy server comprising:

• a processor for executing computer program code;
• a non-transitory computer-readable storage medium having computer-executable code stored therein, the computer-executable code executable to:
• receive a message from the service intended for the client;
• examine a header of the message to determine whether the header represents a potential security violation;
• strip the header from the message responsive to a determination that the header represents a potential security violation;
• determine permissions of the service with respect to the client, wherein the permissions are determined responsive at least in part to the service, the client, and an affiliation value of the first walled garden;
• include the determined permissions with the message in a second header;
• and
• pass the message and the second header to the client.

A method of passing messages from a service provided by a server in a first walled garden of a plurality of walled gardens to a client, wherein each of the plurality of walled gardens is identified by an affiliation value, comprising:

• receiving a message from the service intended for the client;
• examining a header of the message to determine whether the header represents a potential security violation;
• stripping the header from the message responsive to a determination that the header represents a potential security violation;
• determining permissions of the service with respect to the client, wherein the permissions are determined responsive at least in part to the service, the client, and an affiliation value of the first walled garden;
• including the determined permissions with the message in a second header;
• and
• passing the message and the second header to the client.