Patent Document ID: 9075843
Application ID: 12851332

Base Claim:
1. A method of checking user authorization to access a database, the method comprising: receiving a query; producing an execution plan for the query, the execution plan indicating a type of access performed during execution of the query within the database according to the execution plan, the execution plan indicating a schema plan name of a schema containing a schema table used during execution of the query within the database according to the execution plan, and the execution plan indicating a table plan identity of a plan table used during execution of the query according to the execution plan; receiving an access rule applicable to a user associated with the query, the access rule indicating a second table identity of a second table, a second schema name identity of a second schema containing a second schema table, and a type of access; determining whether the access rule permits processing of the query according to the execution plan, the determining including: determining whether the type of access indicated by the execution plan matches the type of access indicated by the rule; determining whether the schema containing the schema table indicated by the schema plan name of the execution plan matches the second schema containing the second schema table indicated by the access rule; and determining whether the table plan identity indicated by the execution plan matches the second table identity of the second table indicated by the access rule; and rejecting the query in response to a determination that the table plan identity indicated by the execution plan does not match the second table identity of the second table indicated by the access rule, in response to a determination that the schema containing the schema table indicated by the schema plan name of the execution plan does not match the second schema containing the second schema table indicated by the second schema name of the access rule, or in response to a determination that the type of access indicated by the execution plan does not match the type of access indicated by the access rule.

---

Claim 5:
5. The method of claim 1 , wherein the access rule indicates a type of access that is denied.