Methods, apparatuses, and computer program products for exception handling

摘要

Methods, apparatuses, and computer program products are provided for exception handling. A method may include detecting attempted performance of a prohibited action involving protected data. The method may further include determining based at least in part on a role associated with a user associated with the prohibited action whether the user has elevated rights permitting performance of the prohibited action. The method may additionally include permitting an exception allowing performance of the prohibited action only in an instance in which it is determined that the user does have elevated rights permitting performance of the prohibited action. The method may also include prohibiting performance of the prohibited action in an instance in which it is determined that the user does not have elevated rights permitting performance of the prohibited action. Corresponding apparatuses and computer program products are also provided.

主权项

1. A method for exception handling, the method comprising:
detecting attempted performance of a prohibited action involving protected data by at least detecting an attempt to send an email including protected data to an external recipient of the email; determining, by a processor, based at least in part on a role associated with a user associated with the prohibited action whether the user has rights permitting performance of the prohibited action; permitting an exception allowing performance of the prohibited action only in an instance in which it is determined that the user does have rights permitting performance of the prohibited action; prohibiting performance of the prohibited action in an instance in which it is determined that the user does not have rights permitting performance of the prohibited action; determining whether the external recipient is authorized to receive the protected data based at least in part on a role associated with the external recipient, wherein the role associated with the external recipient indicates whether the external recipient is authorized to receive the protected data via the email; and permitting an exception allowing sending of the email including protected data to the external recipient only in an instance in which the role associated with the external recipient indicates that the external recipient is authorized to receive the protected data via the email.