4. The system as recited in claim 1 , wherein the security scheme evaluates the associated authorization query in conjunction with an assertion context having multiple assertions, at least one assertion of the multiple assertions relating to the resource-specific operation.
4. The system as recited in claim 1 , wherein the security scheme evaluates the associated authorization query in conjunction with an assertion context having multiple assertions, at least one assertion of the multiple assertions relating to the resource-specific operation. 5. The system as recited in claim 4 , wherein the authorization query table includes at least one field having an authorization query that includes a negation operator.