1. A system comprising: memory and a processor; and a security scheme module, stored in the memory and executable on the processor, that includes an authorization query table and a syntactic validator that disallows an assertion having a negation element at a first level, wherein the authorization query table includes multiple fields with each field mapping a resource-specific operation to an associated authorization query, and wherein each authorization query is a logical English expression comprising a fact, a condition, and/or a logical operator.
1. A system comprising: memory and a processor; and a security scheme module, stored in the memory and executable on the processor, that includes an authorization query table and a syntactic validator that disallows an assertion having a negation element at a first level, wherein the authorization query table includes multiple fields with each field mapping a resource-specific operation to an associated authorization query, and wherein each authorization query is a logical English expression comprising a fact, a condition, and/or a logical operator. 2. The system as recited in claim 1 , wherein the associated authorization query comprises an associated authorization query template having one or more predetermined empty slots.