Security policy editor

A method of enforcing security in a shared computing infrastructure, the computing infrastructure having associated therewith a portal application through which portal users access the shared computing infrastructure and provision one or more services, a storage system, and a set of edge servers from which protected content is delivered to requesting end users, the method comprising:

• for a particular security service provided from the shared computing infrastructure structure, distributing a security metadata template to the set of edge servers, the security metadata template defining logic for performing a security operation associated with the particular security service, the logic being common to at least a set of content providers that use the shared computing infrastructure to deliver their protected content to the requesting end users;
• receiving, via the portal application executing on a hardware element, information defining a security policy associated with a particular content provider, the information being specific to the particular content provider;
• storing, in a data store, the information;
• and
• upon receipt at an edge server of a request for the protected content and a determination that the request includes digital property and path data that is matched for the particular content provider and the information defining the security policy, fetching the information, the information being fetched as one or more response headers over a response header interface between the data store and the edge server, stitching the information into the security metadata template by setting at least one variable defined in the security policy into the security metadata template, and thereafter executing the logic to enforce the security policy with respect to the request, wherein the information and the security metadata template remain bifurcated until receipt at the edge server of the request for the protected content.