Patent Document ID: 8166070
Application ID: 12175321

Base Claim:
1. A method of managing access to a query result, comprising: a) generating a plurality of persistent data objects, wherein generating comprises, for each persistent data object: receiving a query result comprising a dataset obtained from one or more databases in response to execution of a query against the one or more databases; creating security information configured for restricting access to the query result; associating the security information with the query result, wherein the security information includes security settings for a plurality of potential requesting entities, the security settings defining access rights of each potential requesting entity to at least a portion of the query result; and storing the query result and the security information together as a rowset in the respective persistent data object, the respective persistent data object being stored in a data repository; whereby each respective persistent data object is independently accessible on the basis of the respective security information contained within the respective persistent data object; and b) granting access to a requesting entity to at least some of the query result of a given persistent data object on the basis of the security information and an attribute of the requesting entity.

---

Claim 4:
4. The method of claim 1 , wherein granting access to a requesting entity to some or all of the query result on the basis of the security information and an attribute of the requesting entity comprises hiding one or more portions of the query result from the requesting entity on the basis of the security information and the attribute of the requesting entity.