Patent ID: 8775470

Claim:
A data processing method for controlling access to data stored on a database, the method comprising: receiving and parsing a user request containing a reference to a relational object; determining column and row access restrictions based on the user's identity and the parsed request; constructing a pseudo-view of the relational object based on the determined column and row access restrictions; replacing the reference to the relational object in the request with the pseudo-view comprising the column and row restrictions, to create a modified user request, and compiling the modified request, wherein the pseudo-view representation is dynamically created by compiling and evaluating access restrictions defined for the said one or more relational objects; and wherein the modified user request is compiled after replacing the reference in the request to the one or more relational objects with the pseudo-view, wherein constructing the pseudo-view of the relational object comprises generating a SELECT statement of the form: SELECT <column list>from <object name>where <predicate list>, wherein <column list>is an aggregate of the column restrictions, <object name>is the referenced relational object, and <predicate list>is an aggregate of the row restrictions combined together, wherein the modified user request is compiled after replacing the reference in the request with the pseudo view, and wherein, when the user request has the form: SELECT <column list>from <object name>where <row or column>=<search condition>, the modified user request has the form: SELECT <column list>from (SELECT <column list>from <object name>where <predicate list>) where <row or column>=<search condition>.