Patent ID: 7761443

Claim:
A computer program product having instruction codes stored on a computer-useable medium for implementing access control for a query to a content management system that includes a content management server, the computer program product comprising: a set of instruction codes executed at a user processor for transmitting the query to the content management server; wherein the user processor is remotely located relative to the content management server to prevent user access to the content management server and to prevent the bypass of the security of the content management server; a set of instruction codes executed at the content management server, for parsing the query into a plurality of portions; a set of instruction codes executed at the content management server, for creating an access control logic string for the query according to an access control privilege information of the user, wherein the access control logic string is query language that prohibits an unauthorized user from accessing restricted data; a set of instruction codes executed at the content management server, for inserting the access control logic string in each portion of the query that has been parsed to generate a dynamic query, wherein the dynamic query is a result of adding the access control logic string to each of the plurality of portions of the query; and a set of instruction codes for executing the dynamic query; and a set of instruction codes for generating a secure query result.