Patent ID: 9613224
Date: 2017-04-04
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: identifying, by a session manager in a middle tier that includes an application that is separate from the session manager, security context data that indicates one or more roles of a requesting entity; sending, by the session manager, to a database system that is separate from the middle tier and that comprises one or more database servers, the security context data; wherein the database system creates a session to include the security context data; receiving, by the session manager, from the database system, a session identifier that identifies the session; after sending the security context data, receiving, by the session manager, from the application, a request that was initiated by the requesting entity and that targets data stored in the database system; before sending the request to the database system, inserting, by the session manager, into the request to create a modified request, the session identifier that identifies the session; sending the modified request to the database system; wherein the method is performed by one or more computing devices.