Patent ID: 11868502
Assignee: SNOWFLAKE INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method comprising:
storing a first row level security policy in a network-based data system, the first row level security policy being created by a first user;
storing a table in a provider account of the network-based data system, the table and the first row level security policy being stored independently;
attaching the first row level security policy to the table by a second user, the second user being associated with the provider account;
sharing, by the provider account, the table with the attached first row level security policy with a consumer account in the network-based data system, the first row level security policy limiting at least one row from being accessible to the consumer account;
attaching a second row level security policy to the shared table by the consumer account;
receiving, from a third user, a query relating to the table, the third user being associated with the consumer account;
creating, by a server of the network-based data system, a plan to execute the query, the plan including a set of operators;
modifying, by the server, the plan arranging a first operator over a second operator of the set of operators to not reveal information restricted by the first row level security policy or the second row level security policy; and
executing the modified plan to generate a result for the query.