Patent ID: 7720863

Claim:
A computer-readable medium adapted to store computer-executable instructions for supporting secured access to data stored in a database system managed by a business application, wherein the computer-executable instructions comprise computer code to: execute a first business application on a business application client that is external to the database system, wherein the first business application is configured to read from and write to a database table that is managed by a database system, the business application client is adapted to configure a rule to customize access to the database table, the rule including an external environment reference to the database table, the business application client is communicatively coupled to a first business application server, the first business application server is adapted to store and implement the configured rule, the database system is separate and distinct from the first business application, and the database system provides access to the database table to the first business application; monitor the first business application execution for communication of the configured rule between the business application client and the first business application server; intercepting the configured rule directed from the first business application to the first business application server, the configured rule specifying security criteria for access to the data, wherein the security criteria of the rule specifies what data may be accessed for retrieval from the database table; translating the external environment references to a schema of the database table; create a database view using the translated external environment references, wherein the view corresponds to a subset of the data of the database table of the first business application in accordance with the security criteria of the security rule intercepted from the first business application; store a representation of the database view in the database system; receive a query from a second application for data of the database table, the second application being separate and distinct from the first business application; and respond to the query by providing data from the database tables of the first business application based on the database view and a user identifier.