Dynamic security policy generation

A computer-implemented method, comprising:

• receiving a request to access one or more resources of a resource hierarchy;
• determining a first representation of a security policy controlling access to the one or more resources, the first representation expressed using a first policy language;
• generating, in response to the request and based on the first representation, a second representation of the security policy in a second policy language, the second representation modifying a scope of authority granted by the first representation;
• and
• evaluating the second representation to determine whether to grant access to the one or more resources.

A system, comprising:

• at least one processor;
• and
• memory including instructions that, when executed by the at least one processor, cause the system to:
• receive a request to access one or more resources of a resource hierarchy;
• determine a first representation of a security policy controlling access to the one or more resources, the first representation expressed using a first policy language;
• obtain, in response to the request, a second representation of the security policy generated using a second policy language, the second representation modifying a scope of authority granted by the first representation;
• and
• evaluate the second representation to determine whether to grant access to the one or more resources.