Patent ID: 7739298
Filing Date: 2010-06-15
Classification: G06F

Abstract:
1. A method of controlling access to records stored in a database, said method comprising: identifying a password that is associated with one or more users of said database; defining a calculation expression for said identified password, wherein said calculation expression is a variable expression defined based on at least one field of data used in a plurality of records stored in said database, wherein said calculation expression can be evaluated at least partly based on said at least one field of data used in said plurality of records, wherein said at least one field of data is a variable which may have different values for each of said plurality of records, thereby allowing access to each individual record of said plurality of records to be selectively controlled based on at least one value of said at least one field of data stored for each of said plurality of records of said database, and wherein said calculation expression defines access privileges of said one or more users with respect to at least one operation that may be requested to be performed by said one or more users on said plurality of records of said database; receiving a request to perform said at least one operation on said plurality of records of said database, said request being identified as a request made by said one or more users associated with said password; and evaluating said calculation expression for each of said plurality of records, based on said at least one field of data, when said request has been received, wherein said evaluating comprises: (a) determining at least one value for said at least one field of data stored for a first record of said plurality of records, (b) using said at least one value as input to said calculation expression to evaluate said calculation expression for said first record, and (c) determining a first result for said calculation expression based on said evaluation of said calculation expression for said first record, wherein said first result effectively indicates whether to grant access to said first record.