Abstract: A system for securing user created Web resources that includes a data store and a URI security engine. The data store can store digitally encoded content comprising a set of user created, URI identified resources. The URI security engine can provide declarative instance based URI access control to the user created URI identified resources. The URI security engine can apply semantics of user/group control for accessing the URI identified resource. These controls can be group controlled based upon deployer (creator) established privileges rather than being based upon an explicit developer established privileges, which may not be possible since the resources can be deployer (end-user) created resources not existing at development time.

Abstract: A system with a network interconnecting a server and a plurality of user stations. The server stores a plurality of user applications for downloading to user stations and further stores access permissions for the applications for each user. When a user attempts to log onto the system, the server uses the user's log-on identifier to build a list of applications for which the user has access permission. The server downloads to the station a list of applications to which the user has access permission. The user station uses the list to build a folder containing only the applications from the list to which the user has access permission. The system further verifies from the list that the user has access to applications that are represented by objects that the user may have added to his or her desktop at an earlier time.

Abstract: A system with a network interconnecting a server and a plurality of user stations. The server stores a plurality of user applications for downloading to user stations and further stores access permissions for the applications for each user. When a user attempts to log onto the system, the server uses the user's log-on identifier to build a list of applications for which the user has access permission. The server downloads to the station a list of applications to which the user has access permission. The user station uses the list to build a folder containing only the applications from the list to which the user has access permission. The system further verifies from the list that the user has access to applications that are represented by objects that the user may have added to his or her desktop at an earlier time.