Patent ID: 9298933
Filing Date: 2016-03-29
CPC Classification: G06F

Claim Text:
1. A computer-implemented method, comprising: establishing one or more privileges in a database system, each privilege controlling access to an administrative function for the database system; assigning each privilege to one or more roles; receiving a request from a first user to grant a role to a second user; determining whether the first user has administrative rights over the role; granting the role to the second user when the first user is determined to have administrative rights over the role; receiving a request from the first user to revoke a role from a third user; determining whether the first user has administrative rights over the role; determining whether revoking the role from the third user would result in the role not having a threshold number of administrators; and revoking the role from the third user when the first user is determined to have administrative rights over the role and when the role is determined to have at least the threshold number of administrators after revoking the role from the third user.