Patent ID: 7370050
Filing Date: 2008-05-06
Classification: G06F,Y10S

Abstract:
1. A system that facilitates accessing data, comprising: a computer processor that executes the following software components; a query component that generates an abstraction of a data store from a connection point; a row-level security component that limits the abstraction based upon at least one row-level access permission, associates a security policy with at least one row in a data store, and comprises a security descriptor table that maps a security descriptor to a security descriptor identifier (SDID); and a single instance table that maps the SDID to a hash value of the SDID, such that the single instance table and the security descriptor table together give a complete mapping from a SHA-1 hash algorithm to SDID to binary, and the tables are used to perform a single instancing check; and a component that determines if propagation is appropriate and, if necessary, sets the security policy in a root of a hierarchical organization and propagates the security policy to at least one child in the hierarchy; and wherein the SDID is stored for each row of the data store, such that when a user creates an item, the security descriptor is inherited from a parent in the hierarchy.