Patent Document ID: 10032045
Application ID: 14928585

Base Claim:
1. A system for dynamically determining field-level access control using a hierarchical permission context structure, the system comprising: a machine-readable medium storing computer-executable instructions; and at least one hardware processor communicatively coupled to the machine-readable medium that, when the computer-executable instructions are executed, the at least one hardware processor is configured to: receive one or more user credentials, the one or more user credentials corresponding to a user; identify a plurality of fields in an electronic document to be communicated to a client device; select a first field from the plurality of fields, the first field having a label portion and a data portion, wherein the selected first field is associated with a second user, the second user being different than the first user; and determine whether the one or more user credentials provide authorization for viewing data associated with the data portion of the selected first field by: referencing a hierarchical permission context structure, the hierarchical permission context structure defining a hierarchy of assignable user roles; and comparing one or more of the user roles assigned to the second user with one or more user roles assigned to the first user; in response to a determination that the received one or more user credentials do not provide authorization, replace the data of the data portion of the selected first field with a predetermined restriction identifier prior to communicating the electronic document to the client device, the predetermined restriction identifier informing the user that the user is not authorized to view the data; in response to a determination that the received one or more user credentials provide authorization, add the data to the data portion of the selected first field; and communicate the electronic document to the client device.

---

Claim 6:
6. The system of claim 1 , wherein: a set of the plurality of fields are each associated with a label portion and a data portion; and the at least one hardware processor is further configured to determine, for each field of the set of the plurality of fields, whether a user of the client device is authorized to view data associated with the data portion of a given field.