Patent ID: 9665393
Date: 2017-05-30
CPC Classifications: G06F,H04L

Claim:
1. A method, performed by one or more computing devices, comprising: storing access control code defining access control rules applied to a plurality of nodes in a graph, the access control code having a predefined syntax, the graph comprising the plurality of nodes and one or more edges, and the plurality of nodes comprising: compiling the access control code; loading the compiled access control code for execution; receiving, from a frontend component that controls functionalities related to receiving and responding to requests, a query for the object; executing the compiled access control code to evaluate, for one of the access control rules, the corresponding set of operations, the executing occurring at a database tier component that is separate from the frontend component and that controls functionalities related to storage and management of the plurality of nodes in the graph and functionalities related to access control of objects, the functionalities of the database tier component being separated from the functionalities of the frontend component; determining, for each of the one or more access control rules that have not been skipped, a rule-result comprising a value representing a true or a false value; determining a final result based on the one or more rule-results of the one or more access control rules that have not been skipped, the final result indicating an allow-result or a deny-result; and sending, to the frontend component, the object when the final result evaluates to an allow-result.