1. A method of determining the requirement for second-party authorization of a first task, said first task to be performed on a first protected resource, said method implemented by a computer, said method comprising: receiving by the computer a first authorization request requesting second-party authorization of said first task; for said first protected resource, determining by the computer a first attribute group, said first attribute group comprising one or more first attributes associated with said first protected resource; for said first task, determining by the computer a second attribute group, said second attribute group comprising one or more second attributes associated with said first task; and utilizing one or more said first attributes and one or more said second attributes, determining by the computer said requirement for second-party authorization of said first task.