Abstract: A method, system and computer program product for selectively restricting access to a program function in a computer system having an operating system security mechanism operates via an application programming interface (API) that includes a program function registration API function, an authorization selection API function, and an authorization query API function. In response to a call to the API registration function, the program function is registered in a repository in the computer system. After the program function has been registered, a system administrator can select user authorizations using a software tool that includes calls to the authorization selection API function. The system administrator may select whether a particular user or group of users is authorized to access each registered program function. A programmer can embed a call to the authorization query API function in an application program, which includes or calls the program function.

Abstract: The present invention provides a system and method of performing user authentication on web based applications, such as IBM's Network Station Configuration Preference Manager. In particular, the system and method saves and continuously passes user information back and forth between a web client and a web server. The user information can then be used by CGI programs being executed on the web server for authentication purposes. Specifically, each CGI program will examine the user information, determine the authority privileges of the user, run the CGI program under a non-default user mode, return user information back to the web client, and return the CGI job to run in a default user mode.