Securely authorizing the performance of actions

One or more electronically-accessible media comprising a database, the database comprising:

• a plurality of entries that are each directed to an authorization policy, each authorization policy associated with at least one action of a plurality of actions;
• each entry of the plurality of entries including at least one rule that stipulates how the authorization policy to which the entry is directed may be satisfied, the at least one rule including one or more authentication ticket requirements;
• and
• wherein the database may be searched at least by the actions of the plurality of actions;
• wherein at least one entry of the plurality of entries includes a first rule and a second rule;
• the first rule including at least one requirement for at least one validated authentication ticket, and the second rule including at least one requirement for at least two validated authentication tickets;
• and
• wherein the at least one entry is directed to a particular authorization policy;
• and wherein the particular authorization policy may be satisfied by complying with the first rule and/or by complying with the second rule.

One or more electronically-accessible media comprising a database the database comprising:

• a plurality of entries that are each directed to an authorization policy, each authorization policy associated with at least one action of a plurality of actions;
• each entry of the plurality of entries including at least one rule that stipulates how the authorization policy to which the entry is directed may be satisfied, the at least one rule including one or more authentication ticket requirements;
• and
• wherein the database may be searched at least by the actions of the plurality of action;
• wherein at least one entry of the plurality of entries includes a first rule and a second rule;
• the first rule including at least one requirement for at least one validated authentication ticket, and the second rule including at least one requirement for at least two validated authentication tickets;
• and
• wherein the at least one entry is directed to a particular authorization policy;
• and wherein the particular authorization policy may be satisfied by acquisition of the at least one validated authentication ticket of the first rule and/or by acquisition of the at least two validated authentication tickets of the second rule.

One or more electronically-accessible media comprising a database, the database comprising:

• a plurality of entries that are each directed to an authorization policy, each authorization policy associated with at least one action of a plurality of actions;
• each entry of the plurality of entries including at least one rule that stipulates how the authorization policy to which the entry is directed may be satisfied, the at least one rule including one or more authentication ticket requirements;
• and
• wherein the database may be searched at least by the actions of the plurality of actions;
• and
• wherein at least one entry of the plurality of entries includes a first rule and a second rule;
• the first rule stipulating a first route that may be followed to conform thereto and thereby satisfy an authorization policy to which the at least one entry is directed, and the second rule stipulating a second route that may be followed to conform thereto and thereby satisfy the authorization policy to which the at least one entry is directed.

One or more electronically-accessible media comprising a database, the database comprising:

• a first entry that is directed to a first authorization policy that is associated with a first privileged action, the first entry including:
• at least one first rule that stipulates how the first authorization policy can be satisfied to ensure that the first privileged action is performed responsive to a secure authentication;
• and
• a second entry that is directed to a second authorization policy that is associated with a second privileged action, the second entry including:
• at least one second rule that stipulates how the second authorization policy can be satisfied to ensure that the second privileged action is performed responsive to a secure authentication;
• wherein the database is adapted to be searched with reference to a privileged action to locate an associated authorization policy;
• and
• wherein the second entry further includes:
• at least one third rule that stipulates how the second authorization policy can be satisfied to ensure that the second privileged action is performed responsive to a secure authentication.

One or more electronically-accessible media comprising a database, the database comprising:

• a first entry that is directed to a first authorization policy that is associated with a first privileged action the first entry including:
• at least one first rule that stipulates how the first authorization policy can be satisfied to ensure that the first privileged action is performed responsive to a secure authentication;
• and
• a second entry that is directed to a second authorization policy that is associated with a second privileged action, the second entry including:
• at least one second rule that stipulates how the second authorization policy can be satisfied to ensure that the second privileged action is performed responsive to a secure authentication;
• wherein the database is adapted to be searched with reference to a privileged action to locate an associated authorization policy;
• and
• wherein the at least one first rule includes one or more first authentication ticket requirements and the at least one second rule includes one or more second authentication ticket requirements.

A system for authorizing the performance of actions, the system comprising:

• one or more agents that are capable of receiving a plurality of action performance requests;
• the one or more agents to consult a plurality of authorization policies, each authorization policy of the plurality of authorization policies associated with at least one action and indicating how performance of the at least one action can be authorized;
• the one or more agents to pursue authorization for the plurality of action performance requests;
• wherein the one or more agents comprise a first agent and a plurality of second agents;
• and wherein the first agent is capable of receiving the plurality of action performance requests, and each respective second agent of the plurality of second agents is assigned to handle a respective action performance request of the plurality of action performance requests.

A system for authorizing the performance of actions, the system comprising:

• one or more agents that are capable of receiving a plurality of action performance requests;
• the one or more agents to consult a plurality of authorization policies, each authorization policy of the plurality of authorization policies associated with at least one action and indicating how performance of the at least one action can be authorized;
• the one or more agents to pursue authorization for the plurality of action performance requests;
• wherein the one or more agents are to pursue the authorization of a particular action performance request by showing a user interface to a user that input the particular action performance request, by throwing a user interface to an entity that can approve performance of an action of the particular action performance request, by sending an electronic message to an entity that can approve performance of the action of the particular action performance request, and by verifying a privilege status on at least one of a client machine of the user that input the particular action performance request and a network of the user that input the particular action performance request.

One or more electronically-accessible media comprising electronically-executable instructions that, when executed, direct an electronic device to execute operations comprising:

• receiving an action performance request that is directed to a requested action;
• locating an authorization policy that is associated with the requested action from among a plurality of authorization policies, the authorization policy indicating how performance of the requested action can be authorized;
• extracting at least one rule and one or more authentication ticket requirements from the authorization policy that is associated with the requested action;
• receiving one or more authentication tickets;
• determining whether the one or more authentication tickets have been validated in accordance with the at least one rule and/or the one or more authentication ticket requirements;
• if so, authorizing performance of the requested action;
• and
• if not, determining whether a timer set in accordance with the at least one rule has expired;
• and
• if the timer has not expired, repeating the operation of determining whether the one or more authentication tickets have been validated.

One or more electronically-accessible media comprising electronically-executable instructions that, when executed, direct an electronic device to execute operations comprising:

• receiving an action performance request that is directed to a requested action;
• locating an authorization policy that is associated with the requested action from among a plurality of authorization policies, the authorization policy indicating how performance of the requested action can be authorized;
• extracting at least one rule and one or more authentication ticket requirements from the authorization policy that is associated with the requested action;
• receiving one or more authentication tickets;
• determining whether the one or more authentication tickets have been validated in accordance with the at least one rule and/or the one or more authentication ticket requirements;
• and
• if so, authorizing performance of the requested action:
• wherein the electronically-executable instructions comprise at least one action security agent that enables, at least in part, execution of the operations of receiving one or more authentication tickets, determining, and authorizing.