Patent ID: 7593942
Filing Date: 2009-09-22
Classification: G06F,Y10S

Abstract:
1. A database system comprising: a plurality of database objects, each database object having an individual level of security; a plurality of factors, each factor representing a characteristic of a user of the database system; a plurality of rules, each rule defining a limitation on operation of the database system by the user based on at least one of the plurality of factors and based on attributes of data to be operated on, including the individual level of security of the database object of the data to be operated on; and a plurality of realms, each realm defining a privilege of the user of the database system relative to a schema of the database system, wherein each realm comprises a logical grouping of database schemas, and further comprises associations to at least one of the database schemas, at least one user account, and at least one database role; wherein the database system is operable to grant or deny access to data to a user based on the factors associated with the user, based on the rules satisfied by the factors associated with the user and the attributes of the data, and based on the realm associated with the user.