Patent ID: 8627072

Claim:
A method for controlling access to data comprising: evaluating, by a processor of a computer system, an access authorization associated with a requestor for approving access to requested data, wherein access to the requested data by the requestor is approved in response to determining that the access authorization comprises a first permission permitting the requestor to access the requested data; obtaining, responsive to access approval to the requested data, outbound data for returning to the requestor in response to a request for the requested data, wherein a portion of the outbound data is mutually exclusive with the requested data and is not to be provided to the requestor; evaluating, by the processor and subsequent to obtaining the outbound data, the access authorization for the outbound data to determine that the access authorization does not comprise a second permission permitting the requestor to access the portion of the outbound data, wherein the portion of the outbound data is withheld from the requester based on the evaluating; providing, by the processor, an alert responsive to non-approval of access to the portion of the outbound data based on the access authorization used to approve access to the requested data; and denying access to the requestor for the requested data based on non-approval of access for the portion of the outbound data.