Abstract: Constraining authorization tokens via filtering in one example implementation can include generating a first authorization token that provides a first level of access to first data matching a first set of criteria. A filter can be applied to constrain a second authorization token that provides a second level of access to second data matching a second set of criteria. The first authorization token and the second authorization token can have a subset relationship where the first level of access is greater than the second level of access, and the relationship between the first and second authorization token can be maintained.

Abstract: Group access authorities for a restricted user account group in a directory system are selected to include directory traverse authority. A restricted user account is included in the restricted user account group such that the restricted user account inherits group access authorities. The directory system is configured to allow directory traversing without performing directory traverse checking. An application is confined to run within the restricted user account so that access authorities of the application include group access authorities.

Abstract: An original identifier of an application in a computer system is changed to a new identifier. An attempt is made, using the original identifier, to run the application. In response to the attempt, the application is then launched in a restricted user account on the computer system using the new identifier.

Abstract: A file sharing system includes authorization-based security to control access to shared files; and a synchronizer which uses the authorization-based security to monitor the shared files for changes and propagating the changes according to sharing relationships. A method for file sharing includes using authorization-based security to control access to a shared file; and monitoring the shared file for changes using a synchronizer which incorporates the authorization-based security to access the shared file.

Abstract: A computer system and method operate on a number of user interfaces to provide a graphical decision making tool that allows a user to graphically define and manipulate objects representing options, criteria, and ratings, to analyze and produce a decision. The user interfaces include an option rating window for each criterion for categorically rating the options with respect to the criterion. The option rating window includes a number of columnar category areas representing various categories for graphically evaluating the options, and a number of special rating areas for ascribing particular non-linear evaluations. The category areas are mapped to numeric rating scales so that the graphical position of a rating (associated with both an option and a criterion) produces a numeric rating for the option. The user interfaces further include a criteria weighting window for graphically establishing a criteria weight for each criterion.