Web page security system

Abstract

A security application for granting different access rights to web pages and objects on each web page is disclosed. A data table assigns one or more function identifiers (FIDs) to users. A second data table assigns a different object identifier (OID) to each web page, and to assign a different OID for each object on each web page. A third data table assigns an FID to each OID. When a user attempts to access a web page or an object on the web page, a web server compares each of the user's FIDs to the FID assigned to the web page or object. The web server grants access to the web page or object if one of the user's FIDs matches the FID assigned to the web page or object, the user is granted access to the web page or object according to the function of the matched FID.

1 - 7 . (canceled) 
     
     
         8 . A system, comprising:
 a processor; and   memory having program instructions stored therein, wherein the program instructions are executable by the processor to cause the system to:
 store a first set of criteria specifying one or more functions that are permissible with respect to an entire content of a web page; 
 store a second set of criteria specifying one or more functions that are permissible with respect to an item within the web page; and 
 restrict access to content of the web page in accordance with the first and second sets of criteria. 
   
     
     
         9 . The system of  claim 8 , wherein the program instructions are executable to cause the system to:
 assign a user to at least one of a plurality of security tiers, wherein the first set of criteria specifies that the user, in response to being assigned to the at least one security tier, is permitted to perform a first set of functions with respect to the entire content of the web page, and wherein the second set of criteria specifies that the user, in response to being assigned to the at least one security tier, is permitted to perform a second set of functions with respect to the item within the web page.   
     
     
         10 . The system of  claim 9 , wherein the first set of functions includes viewing the entire content of the web page, and wherein the second set of functions includes inputting data into the item within the web page. 
     
     
         11 . The system of  claim 8 , wherein the second set of criteria includes criteria for each of a plurality of items within the web page. 
     
     
         12 . The system of  claim 12 , wherein the plurality of items includes a radio field and a text field. 
     
     
         13 . The system of  claim 8 , wherein the second set of criteria specifies that a user is permitted to view the item, but not to edit data in the item. 
     
     
         14 . The method of  claim 13 , wherein the program instructions are executable to cause the system to:
 in response to the second set of criteria, display the item as shaded out to prevent the user from editing data in the item.   
     
     
         15 . The system of  claim 8 , wherein the first set of criteria specifies a first identifier indicative of one of a plurality of security tiers, wherein the security tier permits displaying the entire content of the web page;
 wherein the program instructions are executable to cause the system to:
 assign a user a second identifier indicative of one of the plurality of security tiers; and 
 determine whether the user is permitted to view the entire content of the web page by comparing the second identifier with the first identifier. 
   
     
     
         16 . The system of  claim 15 , wherein the second set of criteria specifies a third identifier indicative of another one of the plurality of security tiers, wherein the other security tier permits editing content within the item;
 wherein the program instructions are executable to cause the system to:
 determine whether the user is permitted to edit content within the item by comparing the second identifier with the third identifier. 
   
     
     
         17 . A method, comprising:
 a web server receiving, from a client device, a request to access a web page;   the web server determining whether to grant a user of the client device access to the web page, by accessing a database, wherein the database specifies access criteria for an entire content of the web page; and   the web server determining whether to the user is permitted to perform a particular function with respect to an item in the web page, by accessing the database, wherein the database further specifies one or more performable functions within respect to the item.   
     
     
         18 . The method of  claim 17 , wherein the database specifies an identifier for the item, wherein the identifier is indicative of one of a plurality of function levels, wherein each function level is associated with a respective set of functions performable with respect to the item. 
     
     
         19 . The method of  claim 18 , wherein the identifier is indicative of a function level that permits viewing of the item, but not editing of the item. 
     
     
         20 . The method of  claim 19 , further comprising:
 in response to the identifier being indicative of the function level, the web server causing the web page to be displayed with the item shaded out.   
     
     
         21 . The method of  claim 17 , wherein the database specifies access criteria for a plurality of web pages served by the web server, and wherein the database further specifies functions performable with respect to items in the plurality of web pages. 
     
     
         22 . The method of  claim 17 , wherein the database specifies an identifier for the user, wherein the identifier is indicative of one of a plurality of function levels, wherein each function level is associated with a respective set of functions performable by the user; and
 wherein the determining whether to grant the user access to the web page includes determining whether the identifier indicates that the user has a sufficient function level to access the web page.   
     
     
         23 . The method of  claim 22 , wherein the database specifies respective identifiers for a plurality of users, wherein each identifier is indicative of one of the plurality of function levels. 
     
     
         24 . A non-transitory computer readable medium having program instructions stored thereon, wherein the program instructions are executable by a computer system to cause the computer system to perform operations comprising:
 maintaining a database, wherein the database specifies a first set of criteria indicative of functions that are performable with respect to a web page as a whole, wherein the database specifies a second set of criteria indicative of functions that are performable with respect to one or more items within the web page;   the computer system receiving a request from a client device to access the web page; and   the computer system granting the client device access in accordance with the first and second sets of criteria.   
     
     
         25 . The computer readable medium of  claim 24 , wherein the database specifies a user identifier for a user, wherein the user identifier is indicative of functions that are performable by the user;
 wherein the second set of criteria includes a function identifier indicative of functions that are performable with respect to an item in the web page; and   wherein the granting includes comparing the user identifier with the function identifier.   
     
     
         26 . The computer readable medium of  claim 24 , wherein the database assigns a respective object identifier for each of the one or more items, and wherein the database associates each of the object identifiers with a respective function identifier indicative of functions performable with respect to an item in the web page. 
     
     
         27 . The computer readable medium of  claim 26 , wherein the database specifies an object identifier for a text field within the web page and associates the object identifier with a function identifier indicative of the text field being editable by a user.