Patent ID: 8204906

Claim:
A computer implemented method for providing increased role and security enforcement for database log files, comprising: receiving, from a requesting entity, a request to view a log event record included in the database log files, wherein one or more elements of the log event record is stored in the database log files in an encrypted format, wherein the log event record includes content of an abstract query and one or more data records retrieved from an underlying physical database and returned to a user in response to executing the abstract query, wherein each element of the log event record has a respective log visibility setting; decrypting the one or more elements of the log event record, including decrypting at least one of the data records retrieved in response to executing the abstract query; retrieving, for each decrypted element of the log event record, the log visibility setting; evaluating, for each decrypted element of the log event record, the log visibility setting to determine whether to re-encrypt a given element prior to returning the log event record to the requesting entity; based on the evaluated log visibility settings, selectively re-encrypting any of the decrypted elements of the log event record determined to be re-encrypted; and returning a resulting log event record to the requesting entity.