Patent ID: 8676845
Filing Date: 2014-03-18
Classification: G06F

Abstract:
1. A method for controlling access to a relational database of a plurality of relational databases, the method comprising: defining and creating a plurality of entitlement tables including a first entitlement table and a second entitlement table, wherein the first entitlement table and the second entitlement table are independent from each other, and wherein the first entitlement table defines a first set of rules for access to a first one or more relational databases of the plurality of relational databases and the second entitlement table defines a second set of rules for access to a second one or more relational databases of the plurality of relational databases; establishing, for the relational database, a priority hierarchy between the first entitlement table and the second entitlement table such that the first entitlement table is dominant to, and therefore overrides, the second entitlement table; receiving a program call for access to requested data in the relational database, wherein the request includes a user identifier that identifies a user, and wherein the user identifier is set by a relational database program; in response to receiving the program call, determining if the user identifier has authorization to access the requested data by comparing the user identifier with an entry in the first entitlement table or the second entitlement table that is associated with the requested data in the relational database, wherein the first entitlement table or the second entitlement table defines which data classifications are authorized to be accessed by the user; and in response to determining the user identifier has authorization to access the requested data, allowing access to the requested data; wherein one of the first entitlement table and the second entitlement table includes only rules for inclusion that permit a user with a specific user identifier to access the requested data and another one of the first entitlement table and the second entitlement table includes only rules for exclusion that prohibit a user with a specific user identifier from accessing the requested data.