Patent ID: 7958150
Filing Date: 2011-06-07
Classification: G06F

Abstract:
1. A data processing system-implemented method to direct a data processing system to control access to data stored on a database having relational objects for which access restrictions are defined for elements of the relational objects, wherein the elements of the relational objects comprise rows and columns thereof, the data processing system-implemented method comprising: receiving a user request to access one or more relational objects of the database, wherein the request contains a reference to said one or more relational objects and contains a predicate, and the relational objects are at least one of a table or a view; parsing the user request; identifying row and column access restrictions defined for the one or more relational objects; determining whether the identified row and column access restrictions are applicable to the user request; accessing a catalog which defines access restrictions for restricting user access to the relational objects of the database; determining, based on the accessing of the catalog, whether the determined applicable row and column access restrictions are to be enforced for the user request; and providing access to the one or more relational objects based on the determined enforceable row and column access restrictions wherein when the determined applicable row and column access restrictions are to be enforced for the request, constructing a definition for a pseudo-view representation based on the determined enforceable row and column access restrictions to provide access to the one or more relational objects, wherein the pseudo-view representation includes an aggregate of applicable column restrictions for the user request and applicable row restrictions of said one or more relational objects, replacing the reference in the request to the one or more relational objects with the pseudo-view to modify the received user request; and compiling the modified user request, wherein the pseudo-view representation is dynamically created and is a dynamic representation of the access restrictions, wherein the pseudo-view representation is dynamically created by compiling and evaluating access restrictions defined for the said one or more relational objects; and wherein the modified user request is compiled after replacing the reference in the request to the one or more relational objects with the pseudo-view.