Patent Document ID: 10032045
Application ID: 14928585

Base Claim:
1. A system for dynamically determining field-level access control using a hierarchical permission context structure, the system comprising: a machine-readable medium storing computer-executable instructions; and at least one hardware processor communicatively coupled to the machine-readable medium that, when the computer-executable instructions are executed, the at least one hardware processor is configured to: receive one or more user credentials, the one or more user credentials corresponding to a user; identify a plurality of fields in an electronic document to be communicated to a client device; select a first field from the plurality of fields, the first field having a label portion and a data portion, wherein the selected first field is associated with a second user, the second user being different than the first user; and determine whether the one or more user credentials provide authorization for viewing data associated with the data portion of the selected first field by: referencing a hierarchical permission context structure, the hierarchical permission context structure defining a hierarchy of assignable user roles; and comparing one or more of the user roles assigned to the second user with one or more user roles assigned to the first user; in response to a determination that the received one or more user credentials do not provide authorization, replace the data of the data portion of the selected first field with a predetermined restriction identifier prior to communicating the electronic document to the client device, the predetermined restriction identifier informing the user that the user is not authorized to view the data; in response to a determination that the received one or more user credentials provide authorization, add the data to the data portion of the selected first field; and communicate the electronic document to the client device.

---

Claim 3:
3. The system of claim 1 , wherein the at least one hardware processor is further configured to: add the first field to a redacted field list, the redacted field list identifying at least one field from the plurality of fields where the user was not authorized to view the data associated with the data portion of the at least one field; and communicate the redacted field list to the client device.