Resource-Centric Authorization Schemes

A non-transitory computer-readable medium having instructions stored therein, which when executed by a computer, cause the computer to perform a method for managing permission to resources, the operations comprising:

• receiving, via a service application programming interface (API) of an authorization server, a first request to change a permission of a first user for accessing a first resource;
• in response to the first request, accessing a first resource-based permission data structure associated with the first resource to identify an entry associated with the first user, the first resource-based permission data structure having a plurality of entries corresponding to a plurality of users, respectively, each user being associated with one or more permissions for accessing the first resource;
• and
• updating one or more permissions in the identified entry associated with the first user.

A system comprising:

• a memory;
• and
• a processing device, coupled to the memory, to:
• receive, via a service application programming interface (API) of an authorization server, a first request to change a permission of a first user for accessing a first resource;
• in response to the first request, access a first resource-based permission data structure associated with the first resource to identify an entry associated with the first user, the first resource-based permission data structure having a plurality of entries corresponding to a plurality of users, respectively, each user being associated with one or more permissions for accessing the first resource;
• and
• update one or more permissions in the identified entry associated with the first user.