Abstract: An endpoint determines whether a client is authorized to access data. A database stores separate authorizations of a permission model in a data table along with the data. Mapping templates of the endpoint convert a client request for data into a database query for client authorization and the requested data. In response to the query, the database returns to the endpoint the requested data as well as an indication of authorization from the data table. The mapping templates of the endpoint are then used to generate an appropriate response to the client. When the database response indicates the client is authorized, the endpoint can return the requested data to the client. When the database response indicates the client is not authorized, the endpoint can return an error. In some embodiments, the endpoint is an application programming interface (API) gateway that conforms to representational state transfer (REST) software architecture.

Abstract: A parent computer application interacts with one or more independently operating embedded child applications so as to provide an integrated seamless operating environment in which the embedded child applications are presented through the user interface of the parent application and may be controlled through the parent application. A computer operating system provides a user interface such that each installed computer application is allocated its own respective memory space by the operating system, and includes a library that is utilized for its operation, only one of the computer applications as an active application at any time. The system detects when one of the embedded child applications is the active application of the operating system, and in response changes a parent application attribute to ensure that a single integrated application window is displayed.