US 2018/0121328 A1Published application

Simulation of authorization checks using a debugger

AssigneeSap SE

InventorEfstratios Tsantilis

Life of this patent

Estimating the term…

Loading patent…

Abstract

For each statement of an application executing in a debugger script-controlled debugger session, if the statement comprises an authorization check for a user in regard to an object, and if the debugger includes a set of authorization rules associated with the object, then execution of the application is discontinued. Application values for each data field of the object are obtained. These values are compared to respective values specified by each rule of the set of authorization rules. If the current values do not match values specified by at least one of the rules, the authorization check is executed normally. If the current values do match values specified by at least one of the rules, then: the authorization check is skipped, a pass or fail value for the authorization check is registered by the executing application according to the at least one rule, and execution of the application continues normally.

Claims20

Dependent claims

A system comprising a processor and a memory coupled to the processor, the memory including instructions which, when executed by the processor, cause the system to perform operations comprising:

executing an application, comprising statements and objects, one statement at a time using a debugger;
and
for each statement reached during the execution:
based on the statement comprising an authorization check for a user in regard to an object, discontinuing execution;
and
based on the debugger including a set of authorization rules associated with the object:
accessing a data structure of the object, the data structure comprising a set of data fields;
accessing current values for each of the data fields, of the set of data fields, in the executing application;
based on the current values not matching values specified by at least one of the rules, executing the authorization check;
and
based on the current values matching values specified by at least one of the rules of the set of authorization rules:
skipping the authorization check in regard to the object;
and
registering a pass or fail value for the authorization check in the executing application according to the at least one rule.

11 more elements

A non-transitory machine-readable storage medium storing instructions which, when executed by at least one processor of a machine, cause the machine to perform operations comprising:

executing an application, comprising statements and objects, one statement at a time using a debugger;
and
for each statement reached during the execution:
based on the statement comprising an authorization check for a user in regard to an object, discontinuing execution;
and
based on the debugger including a set of authorization rules associated with the object:
accessing a data structure of the object, the data structure comprising a set of data fields;
accessing current values for each of the data fields, of the set of data fields, in the executing application;
based on the current values not matching values specified by at least one of the rules, executing the authorization check;
and
based on the current values matching values specified by at least one of the rules of the set of authorization rules:
skipping the authorization check in regard to the object;
and
registering a pass or fail value for the authorization check in the executing application according to the at least one rule.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/337,822Filed 28 Oct 2016
Published: 3 May 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification5 codes

G06F 11/3698
Prevention of errors by analysis, debugging or testing of software: environments for analysis, debugging or testing of software
G06F 11/362
Prevention of errors by analysis, debugging or testing of software: debugging of software
G06F 11/3636
Debugging of software: by tracing the execution of the program
G06F 11/3668
Prevention of errors by analysis, debugging or testing of software: testing of software