Protected Graphical User Interface for Role-Based Application and Data Access

A computer program product for controlling access on an endpoint device to at least a portion of an application, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computing device to cause the computing device to:

• obtaining a default configuration indicating whether one or more widget functions associated with said application are enabled in a graphical user interface;
• modifying one or more of the widget functions in said default configuration to a disabled status in said graphical user interface based on a privilege configuration;
• determining if one or more user click events generated using said graphical user interface are associated with a widget function having said disabled status;
• and
• preventing said user click events having said disabled status from being provided to an operating system for further processing, wherein at least one of said steps is carried out by a computing device.

A system for controlling access on an endpoint device to at least a portion of an application, said system comprising:

• a memory;
• and
• at least one hardware device coupled to the memory and configured for:
• obtaining a default configuration indicating whether one or more widget functions associated with said application are enabled in a graphical user interface;
• modifying one or more of the widget functions in said default configuration to a disabled status in said graphical user interface based on a privilege configuration;
• determining if one or more user click events generated using said graphical user interface are associated with a widget function having said disabled status;
• and
• preventing said user click events having said disabled status from being provided to an operating system for further processing, wherein at least one of said steps is carried out by a computing device.