Patent ID: 8667018

Claim:
A computer-implemented method for implementing a security policy in a database, comprising: receiving a request associated with a first table row and a second table row in a database table; obtaining a set of access control lists (ACLs) associated with the database; evaluating the ACLs to obtain a corresponding set of ACL results associated with the database; storing the ACL results; applying a set of predicates to the stored ACL results and the first table row to obtain a first access privilege for the first table row, wherein a predicate determines the relevance of a corresponding ACL result to one or more rows of the database table; applying the predicates to the stored ACL results and the second table row to obtain a second access privilege for the second table row, without re-evaluating the ACLs, thereby allowing evaluation of access privileges for the first and second table rows without repeatedly evaluating the ACLs; and producing a result in response to the request.