Patent ID: 8266177

Claim:
An apparatus for empirically adjusting a user's authorized access to a database, the apparatus comprising: a non-transitory computer-readable storage medium storing executable computer program modules comprising: a database discovery module configured to determine a structure of the database and the user's authorized access to the database, the user's authorized access including a set of authorized database tables and authorized columns; a command monitoring module configured to monitor the user's actual accesses to the database until a preselected quantity of actual accesses have been observed, the user's actual accesses including a set of accessed database tables and accessed columns; and an analysis module configured to compare the user's actual accesses with the user's authorized access and configured to adjust the user's authorized access taking into account results of the comparing by changing settings within a database access control module to deny the user future database access to an authorized database table or an authorized column that is not in the set of accessed database tables and accessed columns; and a processor for executing the computer program modules.