METHOD FOR IMPLEMENTING FINE-GRAINED ACCESS CONTROL USING ACCESS RESTRICTIONS
First Claim
1. A data processing method for controlling access to data stored on a database, the method comprising:
- receiving and parsing a user request containing a reference to a relational object;
determining column and row access restrictions based on the user'"'"'s identity and the parsed request;
constructing a pseudo-view of the relational object based on the determined column and row access restrictions;
replacing the reference to the relational object in the request with the pseudo-view to create a modified request, andcompiling the modified request.
0 Assignments
0 Petitions
Accused Products
Abstract
Disclosed is a data processing system-implemented method, a data processing system and an article of manufacture for controlling access to data stored on a database having relational objects for which access restrictions are defined for elements of the relational objects The data processing system-implemented method includes receiving a user request to access one or more relational objects of the database, identifying any access restrictions defined for the one or more relational objects, determining whether any identified access restrictions are applicable to the user request, determining whether any determined applicable access restrictions are to be enforced for the user request, and allowing access to the one or more relational objects based on the determined enforceable access restrictions.
-
Citations
2 Claims
-
1. A data processing method for controlling access to data stored on a database, the method comprising:
-
receiving and parsing a user request containing a reference to a relational object; determining column and row access restrictions based on the user'"'"'s identity and the parsed request; constructing a pseudo-view of the relational object based on the determined column and row access restrictions; replacing the reference to the relational object in the request with the pseudo-view to create a modified request, and compiling the modified request. - View Dependent Claims (2)
-
Specification