1. A method comprising: maintaining one or more applications on one or more processors programmed with instructions to host said one or more applications based, at least in part, on source code associated with said one or more applications, said one or more applications being accessible by one or more users subject to one or more security business rules; changing at least one of said security business rules; modifying access to at least a portion of said one or more applications through said one or more processors in accordance with said one or more changes in at least one of said security business rules by altering runtime behavior of said one or more applications based on authorization metadata and without modifying said source code associated with said one or more applications; wherein maintaining a database of said authorization metadata, and wherein said authorization metadata is associated with said one or more applications and representative of said security business rules; wherein said modifying access to at least a portion of said one or more applications without modifying said source code associated with said one or more applications further comprises modifying said authorization metadata based, at least in part, on said one or more changes in said at least one of said security business rules.