Retrofitting Legacy Code for Authorization Policy Enforcement Vinod Ganapathy [email protected] Trent Jaeger [email protected] Somesh Jha [email protected].