A method and structure for an independent programming tool for analyzing
business separations-of-duties conflicts for users and profiles in an
object-oriented application, the tool including a database containing a
matrix of transactions, descriptions, object authorization values, and
transactional separations-of-duty conflicts; an analysis engine adapted
to use data from the object-oriented application in conjunction with the
matrix to analyze business conflicts and produce separations-of-duties
conflict reports about the object-oriented application; and a user
interface adapted to control the tool.