Patent ID: 8433717
Filing Date: 2013-04-30
Classification: G06F

Abstract:
1. For a data management system that secures access to a plurality of data objects contained in a data hierarchy of an enterprise, a method of securing access to data attributes of the data objects, said method comprising: receiving an identification of a first set of data attributes of a first data object, said first set of data attributes corresponding to a first set of data values of the first data object; receiving an identification of a second set of data attributes of a second data object that is hierarchically related to the first data object in the data hierarchy, said second set of data attributes corresponding to a second set of data values of the second data object; defining, from the first and second sets of data attributes, a virtual security object that represents a logical object which allows the first and second sets of data attributes to be uniformly secured as one group; and applying a set of control permissions that is received for the virtual security object uniformly across the first and second sets of data attributes while maintaining the hierarchical relationship between the first and second data objects in the data hierarchy, wherein the set of control permissions is used to control access to the data values of the first and second sets of data attributes in response to user queries.