Patent ID: 9286475
Filing Date: 2016-03-15
CPC Classification: G06F

Claim Text:
1. A method of enforcing data privileges, comprising: receiving a query from a user to access a multi-tenant database; accessing, via a metadata security engine, a set of permissions specifying the user's data privileges to the multi-tenant database; identifying a set of objects, the set of objects including at least one object containing data matching the query in the multi-tenant database; authenticating, via the metadata security engine, the user's data privileges to at least one column of at least one object in the set of objects containing data matching the query, the metadata security engine being independent of the multi-tenant database; for each object in the set of objects having the user's data privileges authenticated, substituting one or more table-valued functions associated with the received query based on the set of permissions, the one or more table-valued functions conforming the at least one object containing data matching the query with the set of permissions specifying the user's data privileges, the substituting of the one or more table-valued functions comprising: transmitting a response to the received query, the response to the received query including the one or more table-valued functions for each object in the set of objects having the user's data privileges authenticated.