Abstract: This application relates to apparatus and methods for automatically determining and enforcing user permissions for applications and application features. In some embodiments, a system includes a server and a user device. The server may determine a user of the user device based on receiving login credential data. The server may further obtain user attributes for the user including, in some examples, a location of the user. The server may further obtain an attribute-based control policy that identifies relationships between a plurality of possible user attributes. For example, the control policy may identify attribute requirements that must be met for enablement of a particular application feature. Additionally, the server may determine user permissions for the user based on the control policy and the user attributes. The server may transmit the user permissions to the user device, and the user device configures the corresponding application according to the user permissions.

Abstract: This application relates to apparatus and methods for automatically determining and enforcing user permissions for applications and application features. In some embodiments, a system includes a server and a user device. The server may determine a user of the user device based on receiving login credential data. The server may further obtain user attributes for the user including, in some examples, a location of the user. The server may further obtain an attribute-based control policy that identifies relationships between a plurality of possible user attributes. For example, the control policy may identify attribute requirements that must be met for enablement of a particular application feature. Additionally, the server may determine user permissions for the user based on the control policy and the user attributes. The server may transmit the user permissions to the user device, and the user device configures the corresponding application according to the user permissions.

Abstract: A system including one or more processors and one or more non-transitory computer-readable media storing computing instructions configured to run on the one or more processors and perform one or more processors and perform: transmitting an invitation to a mobile application on a mobile device of a user, wherein the invitation authorizes the mobile application on the mobile device to be used to check-in to a facility; generating, by a visitor application, an image that is displayed on a kiosk at an entrance of the facility; receiving, from the mobile device, image data of the image, as scanned by the mobile application from the kiosk, and mobile application data; validating whether the mobile application data and the image data satisfy one or more criteria; and when the one or more criteria are satisfied, authorizing the user to access the facility. Other embodiments are disclosed.

Abstract: A system including one or more processors and one or more non-transitory computer-readable media storing computing instructions configured to run on the one or more processors and perform one or more processors and perform: transmitting an invitation to a mobile application on a mobile device of a user, wherein the invitation authorizes the mobile application on the mobile device to be used to check-in to a facility; generating, by a visitor application, an image that is displayed on a kiosk at an entrance of the facility; receiving, from the mobile device, image data of the image, as scanned by the mobile application from the kiosk, and mobile application data; validating whether the mobile application data and the image data satisfy one or more criteria; and when the one or more criteria are satisfied, authorizing the user to access the facility. Other embodiments are disclosed.

Abstract: This application relates to apparatus and methods for automatically determining and enforcing user permissions for applications and application features. In some embodiments, a system includes a server and a user device. The server may determine a user of the user device based on receiving login credential data. The server may further obtain user attributes for the user including, in some examples, a location of the user. The server may further obtain an attribute-based control policy that identifies relationships between a plurality of possible user attributes. For example, the attribute-based control policy may identify attribute requirements that must be met for enablement of a particular application feature. Additionally, the server may determine user permissions for the user based on the attribute-based control policy and the user attributes. The server may transmit the user permissions to the user device, and the user device configures the corresponding application according to the user permissions.