Patent ID: 8635660
Filing Date: 2014-01-21
Classification: G06F,H04L

Abstract:
1. A method of constraining a database query based on an externally defined security policy, the method comprising: receiving at an application server from a user a query comprising a request to access a resource; reading with an application executing on the application server a condition clause from a grant statement defined in the security policy, the grant statement defining permission for the user to access the requested resource wherein the security policy is external to the application and wherein the application controls access to the resource; retrieving with the application executing on the application server one or more query predicates from the security policy and associated with the permission granted to the user; modifying the received query with the application executing on the application server based on the permission granted to the user wherein modifying the query comprises dynamically constraining the query prior to making the query by appending the retrieved predicates to the query associated with the requested access; and making the modified query with the application executing on the application server to perform the requested access.