Declarative attribute security using custom properties

A system for implementing attribute security, the system comprising:

• one or more processors;
• and
• a memory communicatively coupled with and readable by the one or more processors and having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to perform:
• identifying a view object associated with a user interface environment, the view object defining how to obtain for the user interface environment data corresponding to business objects stored in a first datasource;
• identifying an attribute of the view object corresponding to an attribute of the business objects stored in the first datasource, the attribute of the view object having a custom property enabling attribute-based security for the attribute of the business objects stored in the first datasource;
• determining a value for the custom property enabling attribute-based security for the attribute of the business objects stored in the first datasource, the value indicative of one or more security privileges for the attribute of the business objects stored in the first datasource;
• determining whether the one or more security privileges specified in the custom property for the attribute of the view object are satisfied;
• and
• based on a determination that the one or more security privileges specified in the custom property for the attribute of the view object are not satisfied, caching in a second datasource a portion of the data corresponding to the business objects stored in the first datasource that excludes data corresponding to the attribute of the business objects.

A computer-readable, storage medium storing computer-executable code for implementing attribute security, the computer-readable storage medium comprising:

• code for identifying a view object associated with a user interface environment, the view object defining how to obtain for the user interface environment data corresponding to business objects stored in a first datasource;
• code for identifying an attribute of the view object corresponding to an attribute of the business objects stored in the first datasource, the attribute of the view object having a custom property enabling attribute-based security for the attribute of the business objects stored in the first datasource;
• code for determining a value for the custom property enabling attribute-based security for the attribute of the business objects stored in the first datasource, the value indicative of one or more security privileges for the attribute of the business objects stored in the first datasource;
• code for determining whether the one or more security privileges specified in the custom property for the attribute of the view object are satisfied;
• and
• code for, based on a determination that the one or more security privileges specified in the custom property for the attribute of the view object are not satisfied, caching in a second datasource a portion of the data corresponding to the business objects stored in the first datasource that excludes data corresponding to the attribute of the business objects.