Dynamic authorization to features and data in JAVA-based enterprise applications

A system for providing dynamic management of roles and features in enterprise applications comprising

• a memory module for storing information for a plurality of users in a user table, identifying each user by a unique login used as a primary key, and information for a plurality of roles in a role table, identifying each role by a unique name as a primary key and information for a plurality of features in a feature table, identifying each feature by a unique name as a primary key;
• and
• a processor for creating a first join-table for mapping users onto selected roles, utilizing the user primary key and role primary key as foreign keys to define an assignment of users to roles, and a second join-table for mapping features onto selected roles, utilizing the feature primary key and role primary key as foreign keys to define an assignment of features to roles, the first and second join-tables stored in the memory module, wherein when a user requests access to a selected feature, the processor is queried to determine if the selected feature is assigned in the second join-table to a role assigned to the user in the first join-table.