Intuit Inc.
AUTHORIZATION SYSTEM USING QUERIES AS AUTHORIZATION RESTRICTIONS

Abstract:

Systems and methods for generating responses to queries from a client application are disclosed. One example method includes receiving a first query from the client application, determining an authorization context for the first query based at least in part on a set of authorization restrictions corresponding to the client application, generating a response to the first query based at least in part on an intermediate response generated by a query engine, the response redacted based at least in part on the authorization context, and providing the response to the client application.