1. A method for handling security for a web service client, the method comprising: processing, by a web service computer system, using a first processing thread, a first step of an application for the web service client based on a security attribute being valid, wherein: the web service client is associated with an identity attribute stored by the web service computer system and the security attribute stored by the web service computer system; the identity attribute identifies the web service client; and the security attribute defines a right of the web service client to access one or more portions of the application; after processing the first step, transferring, by the web service computer system, state data of the application as processed for the web service client and the identity attribute to a database stored using a non-transitory computer-readable storage medium; storing the identity attribute and the state data of the application as processed for the web service client to the database, the security attribute not being stored; after storing the identity attribute and the state data of the application, ending the first processing thread; in response to a trigger, retrieving the state data of the application as processed for the web service client from the database; following retrieval of the state data of the application as executed for the entity, reevaluating, by the computer system, the security attribute for the web service client, wherein the security attribute was initially evaluated prior to the first step of the application being processed for the web service client; and processing a second step of the application for the web service client based on the reevaluated security attribute being valid.